Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
File:                     NsqppHOp6nOCn3NWgJvBYQOtA64.mft (raw, json)
Hash identifier:          S/94Cju8RfuPg9IZQAu+OOyOqkIfieVEFQA+j1OKolA=
Subject key identifier:   6C:D1:3E:91:C3:0E:7F:EA:17:E5:4F:7F:7E:60:4A:12:F6:D3:9A:DF
Authority key identifier: 36:CA:A9:A4:73:A9:EA:73:82:9F:73:56:80:9B:C1:61:03:AD:03:AE
Certificate issuer:       /CN=A9152329/serialNumber=36CAA9A473A9EA73829F7356809BC16103AD03AE
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
Manifest number:          77
Signing time:             Thu 03 Jul 2025 07:01:10 +0000
Manifest this update:     Thu 03 Jul 2025 07:01:09 +0000
Manifest next update:     Thu 10 Jul 2025 07:01:09 +0000
Files and hashes:         1: NsqppHOp6nOCn3NWgJvBYQOtA64.crl (hash: aha8+0Fvrm1C5Ox47fVQMlDL6ENNd1At+oNXgAQvId0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.crl
                          rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152329, serialNumber=36CAA9A473A9EA73829F7356809BC16103AD03AE
        Validity
            Not Before: Jul  3 07:01:09 2025 GMT
            Not After : Jul 10 07:01:09 2025 GMT
        Subject: CN=68662ab6-2756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a8:56:3b:3b:10:e0:d5:e8:92:59:b6:64:04:
                    3b:23:b8:0c:a4:f7:d9:c7:a9:ce:b0:26:c2:e0:09:
                    4c:4a:35:0b:e6:16:80:69:aa:ca:b0:f6:79:3f:e5:
                    de:cb:3e:33:ba:a8:f1:88:ef:19:96:04:d7:65:a5:
                    11:ca:39:5f:3d:59:43:cb:2e:41:a7:8e:1f:35:f3:
                    ba:07:0d:b3:49:b2:69:d8:85:a4:7a:13:a6:0a:10:
                    1f:33:dc:6a:46:08:c6:a2:24:aa:47:7f:03:39:b5:
                    a8:42:6f:68:b9:e3:70:1e:8d:bb:ef:9d:f9:ab:85:
                    7d:b6:b1:78:55:6f:71:f6:9f:d1:8b:8c:9c:b2:03:
                    2e:5c:14:f9:00:b6:2e:21:3b:9b:05:f3:73:65:d9:
                    1f:3e:88:00:eb:24:cf:ac:b2:6b:bd:67:e2:d6:a3:
                    c9:2b:40:cb:86:04:c6:04:2b:a6:98:bf:e6:4e:c7:
                    54:dc:91:98:05:20:47:08:99:c5:76:f1:2e:b6:a9:
                    15:cd:51:b8:15:50:96:35:dc:08:43:e5:8c:d9:07:
                    ca:92:0a:8f:7a:08:e2:6f:0b:1c:35:41:63:63:1f:
                    06:78:85:55:69:f9:97:0b:44:93:3b:1e:ac:cb:a9:
                    5e:bb:fb:fe:46:fa:f6:41:13:4c:3e:93:3a:d6:7c:
                    88:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D1:3E:91:C3:0E:7F:EA:17:E5:4F:7F:7E:60:4A:12:F6:D3:9A:DF
            X509v3 Authority Key Identifier:
                keyid:36:CA:A9:A4:73:A9:EA:73:82:9F:73:56:80:9B:C1:61:03:AD:03:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:5c:b7:dc:ec:d5:7e:34:90:10:62:dd:82:49:b8:ed:7c:f0:
         47:35:ac:a7:0f:77:10:01:d7:3c:4a:71:c0:3e:85:18:2c:39:
         5a:c8:39:f1:55:eb:73:4e:fd:7b:d0:d4:b9:06:dd:65:8a:8b:
         24:d9:4a:05:28:df:30:44:ab:f9:27:42:c5:2e:3f:8c:c6:6c:
         d5:b0:68:d8:6c:9d:c4:23:93:cb:a8:8a:fb:4a:88:41:09:84:
         cf:86:d9:79:ee:a9:57:32:24:98:77:6c:fd:23:e1:d8:6a:79:
         52:40:09:9c:a5:a4:c8:5c:14:a1:9e:32:5b:bb:be:da:51:62:
         fa:44:45:93:ec:7d:d7:18:a8:2e:23:f8:3a:4b:4a:cf:02:73:
         b1:ba:95:1b:cd:73:ad:cf:4f:b6:19:af:ae:67:2b:24:04:6f:
         65:89:c8:96:dc:c4:0e:67:98:f9:4c:f5:b6:0b:12:bb:64:b7:
         60:68:94:a7:3f:08:36:6e:56:07:e3:15:30:bc:c6:43:68:1c:
         4f:4f:28:46:08:7d:82:b4:1d:b8:c6:40:11:1a:c2:97:b8:7e:
         db:ee:fc:36:45:c0:e3:b2:bd:51:5e:ac:f5:55:ff:f4:05:d2:
         91:eb:8b:57:c4:1c:7e:a2:df:e5:6b:78:62:27:4e:a5:13:9b:
         66:d0:47:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:05:35 2025 by rpki-client