Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft
File:                     nmoKpDnP40ewT3RoQKbkNMUJsac.mft (raw, json)
Hash identifier:          yE5CTaFEivZhuIKExL3nUiTwS2gJxp3H8zC1y+BPb14=
Subject key identifier:   0E:87:E3:A4:14:71:15:AB:60:22:28:8B:C3:A3:0A:5A:5F:9A:1E:BA
Authority key identifier: 9E:6A:0A:A4:39:CF:E3:47:B0:4F:74:68:40:A6:E4:34:C5:09:B1:A7
Certificate issuer:       /CN=A914DC56/serialNumber=9E6A0AA439CFE347B04F746840A6E434C509B1A7
Certificate serial:       0181
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft
Manifest number:          017E
Signing time:             Sun 19 Oct 2025 06:19:26 +0000
Manifest this update:     Sun 19 Oct 2025 06:19:25 +0000
Manifest next update:     Sun 26 Oct 2025 06:19:25 +0000
Files and hashes:         1: nmoKpDnP40ewT3RoQKbkNMUJsac.crl (hash: wt1TCqaFfLBxIMQpk9i27OWcNTixtBgzMNxb0OHDmWk=)
                          2: 11A843B467D811EEA0543B5CC4F9AE02.roa (hash: JGrxdfcTXN7WXmiB33mKDnWSPFdrh+A/TvrelqjBL5s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.crl
                          rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC56, serialNumber=9E6A0AA439CFE347B04F746840A6E434C509B1A7
        Validity
            Not Before: Oct 19 06:19:25 2025 GMT
            Not After : Oct 26 06:19:25 2025 GMT
        Subject: CN=68f482ee-99ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0f:7a:ee:b7:dc:8e:b3:7f:6d:ad:d5:10:46:
                    23:66:1a:e9:f8:b7:5e:61:48:12:da:92:0d:de:52:
                    f0:64:29:bc:de:b2:c8:db:2b:29:a5:cf:0e:56:49:
                    2b:2f:28:be:54:b8:97:c2:bf:78:2e:71:27:38:c7:
                    51:54:b4:1c:c3:17:54:4e:8a:40:8b:9d:15:2f:da:
                    69:2a:6a:9e:76:07:ff:bb:4a:4c:87:87:44:f6:d4:
                    dc:1b:50:58:af:d6:ce:11:25:e1:85:58:51:5f:f3:
                    7e:e9:62:93:68:42:c9:01:c9:f1:52:ac:6d:9d:f8:
                    c0:8b:13:b8:05:fc:b0:a1:5a:9b:5d:41:7a:7b:5f:
                    71:ac:66:dc:9a:a9:0d:db:49:a7:18:99:36:6f:cb:
                    1b:c6:bd:09:6f:ed:ed:23:56:1e:63:80:12:3e:11:
                    33:ae:a4:95:29:85:54:a7:5a:13:2e:17:a3:ee:82:
                    35:ce:97:60:91:a4:11:46:f5:b3:4c:d1:35:ae:f8:
                    49:95:e5:07:7b:91:d4:1d:aa:b7:9d:6c:db:39:aa:
                    43:82:ec:bd:c2:fa:ec:c1:35:1f:29:d7:4c:6e:d9:
                    05:de:f7:81:8b:90:de:c6:a9:d4:35:2a:f0:11:de:
                    58:03:b8:0d:30:ea:c7:c5:f7:62:0d:ba:6a:06:de:
                    8e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:87:E3:A4:14:71:15:AB:60:22:28:8B:C3:A3:0A:5A:5F:9A:1E:BA
            X509v3 Authority Key Identifier:
                keyid:9E:6A:0A:A4:39:CF:E3:47:B0:4F:74:68:40:A6:E4:34:C5:09:B1:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:72:ab:19:91:6d:bc:a4:7f:c9:a9:6f:f6:9f:51:48:54:a5:
         24:a1:fe:3c:da:8e:94:f1:c7:a9:05:34:48:ee:2c:94:7a:a7:
         5e:7d:13:93:f5:90:4d:75:12:47:cb:99:08:96:c0:a2:f3:c0:
         01:51:3b:6a:fa:da:a7:51:2b:0d:96:3d:ea:f7:ea:49:5d:68:
         b8:19:94:e3:74:e7:e8:fe:85:e5:3e:1c:f0:c1:eb:54:ae:4a:
         6b:1b:c4:e9:69:4d:35:86:a0:72:f2:cc:43:09:d4:62:13:db:
         16:d0:bc:9a:e5:c0:2e:0d:70:d7:2f:c3:72:af:96:73:03:72:
         47:bf:e3:c4:b6:08:e1:35:0f:43:c0:1d:45:57:3d:d7:5f:3e:
         4f:7b:d6:a5:10:c5:dc:4b:00:09:7a:5f:d9:24:48:5d:13:cf:
         56:cf:e0:10:c5:32:df:0c:4a:2b:f6:a3:82:93:48:07:d3:e5:
         05:e5:fc:48:6f:64:82:11:67:b7:93:2c:09:f9:ce:a5:56:ee:
         d1:9e:88:ec:d3:ea:b0:3e:b4:5d:5c:ad:81:4e:f8:c4:d9:a4:
         95:b3:8f:1d:b4:82:30:1b:51:cf:d1:6a:4e:55:ea:0b:d8:9d:
         d3:d2:6c:38:08:7b:2e:64:77:ae:52:1d:6e:48:64:36:7d:f0:
         db:51:80:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:48:00 2025 by rpki-client