Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft
File:                     cNLQaRmVfGqmdxz1Xblvx-_niaA.mft (raw, json)
Hash identifier:          YTbLA8Nyk9rGukx2vCcdWoe36zv8DH75AABnPWguSIU=
Subject key identifier:   87:CB:C6:2B:60:5C:34:9A:D6:BE:6F:97:16:D6:E7:F1:5C:34:83:05
Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0
Certificate issuer:       /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0
Certificate serial:       042E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft
Manifest number:          041D
Signing time:             Sun 19 Oct 2025 02:17:46 +0000
Manifest this update:     Sun 19 Oct 2025 02:17:45 +0000
Manifest next update:     Sun 26 Oct 2025 02:17:45 +0000
Files and hashes:         1: cNLQaRmVfGqmdxz1Xblvx-_niaA.crl (hash: NbKRP4e93ISbRp4h97p2G8cFDl69L0PLWTI4GGxGubs=)
                          2: 5E6AFDFC855A11ECA39EB244C4F9AE02.roa (hash: 0gOlRThj6WU6Oiu1Uasxby2bhwXyhTicR9aQwl0b5JY=)
                          3: 93A5581E549211EFB6D69465C4F9AE02.roa (hash: EF49BWvzk+YoVF73ZbglxNosMQ3iOBpJBV3sashrep8=)
                          4: 927AA46C549211EFB6D69465C4F9AE02.roa (hash: BSpM2VSMPXNCcFdU8OVTaKUZ+gNICf8M+kzl5UfUxEY=)
                          5: 92F68C4E549211EFB6D69465C4F9AE02.roa (hash: q+X83YZL335SyLXeBoGpFgAzoByn2XCMGLkD6Ic10YI=)
                          6: 920D7BD0549211EFB6D69465C4F9AE02.roa (hash: gHndO2psRdsLz2dDuYnrptktBb4xTbMabDZZkDs+3FU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl
                          rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1070 (0x42e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0
        Validity
            Not Before: Oct 19 02:17:45 2025 GMT
            Not After : Oct 26 02:17:45 2025 GMT
        Subject: CN=68f44a4a-9637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e2:75:f4:e8:1f:57:e8:aa:03:a0:21:84:ed:
                    a1:a7:6c:bb:f3:f7:3f:92:a6:52:4b:ca:a8:de:a9:
                    00:9e:d8:ef:2f:28:4e:f1:92:77:55:b2:cc:4b:fa:
                    dd:25:57:e0:ec:46:b0:5c:6b:a2:6e:6a:4f:a2:3e:
                    3f:70:b3:a9:76:db:a3:8a:73:86:89:32:55:41:87:
                    6c:a4:41:0d:fd:17:df:0f:84:7a:bf:8b:c4:ca:55:
                    49:3a:f8:3a:75:9c:83:c1:44:e8:27:e3:49:c5:83:
                    cf:65:9e:b8:0d:cf:ff:d7:2d:01:5c:d0:bf:ff:3b:
                    6f:a7:0b:d0:7a:e4:74:eb:7a:d6:3b:9a:bc:7c:a5:
                    ef:d6:6c:52:63:cf:4b:25:55:51:54:49:9d:60:35:
                    85:5c:d5:65:b1:3c:8a:f5:b8:dd:72:bf:e6:91:88:
                    33:51:5f:9f:22:c2:4d:05:d6:d2:71:f0:ac:11:a6:
                    1c:da:31:68:2c:b2:43:3e:01:da:2a:e1:5e:ff:c4:
                    ea:79:c8:b2:c8:dc:46:c6:cf:a1:b6:7d:f0:71:74:
                    21:b3:4b:2d:9b:bd:9f:42:9f:c1:f0:1a:db:d4:6e:
                    5b:94:29:5a:5c:94:ae:da:ba:f0:e9:4a:ad:a1:1e:
                    5e:76:15:98:71:2d:3b:7e:05:63:99:ce:f6:32:9c:
                    b4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CB:C6:2B:60:5C:34:9A:D6:BE:6F:97:16:D6:E7:F1:5C:34:83:05
            X509v3 Authority Key Identifier:
                keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d8:1f:e1:d2:80:85:a9:e9:f7:94:ab:eb:43:96:25:9b:ae:
         2b:b8:63:72:a3:01:fc:b4:f1:8f:27:87:6a:86:4c:f1:7b:10:
         d1:77:e2:e2:22:14:11:be:a5:95:b4:3a:95:ca:75:65:39:b7:
         9d:f6:80:79:c5:65:5a:50:22:63:14:e8:0f:9b:5e:05:f7:3b:
         c9:c0:35:e3:60:5a:90:96:0b:7f:db:7f:b9:b9:21:05:c5:17:
         c9:9b:7c:64:7a:2c:a0:fb:40:e9:e1:12:a9:ac:af:02:27:ec:
         e1:fe:a3:30:79:f3:2f:80:78:d7:02:36:f7:3d:f4:f2:65:1e:
         56:8a:84:40:f0:c4:01:65:6a:dd:2a:9e:f5:d9:2e:4c:4c:01:
         ed:cf:c4:19:ac:e3:55:35:7d:a6:4c:76:c0:40:8b:fe:57:31:
         cb:d3:9b:27:22:a3:50:72:9d:29:6d:5a:42:cf:e1:20:3a:69:
         0c:b5:10:9b:23:94:26:b8:fa:29:58:97:94:6c:db:22:4f:1d:
         57:e1:4e:f2:1b:42:25:fb:83:8a:64:d1:08:58:09:51:a9:a2:
         b5:1f:6e:90:ef:1f:a5:26:5c:0a:31:e3:7c:8a:97:90:2b:f6:
         dd:8b:42:c3:8c:90:70:58:76:9f:8f:b6:fb:1b:99:58:b5:ab:
         7f:a8:80:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:43:07 2025 by rpki-client