Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
File:                     NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft (raw, json)
Hash identifier:          6vQZ0XeBS63su+Vp7UbW+Nd9QnohD++KQQO7J5e4XfE=
Subject key identifier:   49:06:BA:90:9A:FF:BE:32:45:45:E1:99:26:6F:2E:33:58:2B:08:A7
Authority key identifier: 34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06
Certificate issuer:       /CN=A9153646/serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
Certificate serial:       0752
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
Manifest number:          0C9E
Signing time:             Wed 02 Jul 2025 18:28:59 +0000
Manifest this update:     Wed 02 Jul 2025 18:28:58 +0000
Manifest next update:     Wed 09 Jul 2025 18:28:58 +0000
Files and hashes:         1: NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl (hash: dmdOrtqglQvAxn8uzQ5NkAtCiuU/p0X/ZNQCzTVYa90=)
                          2: 0C77B118353C11EFB0FA2527C4F9AE02.roa (hash: DUbgXXzqpapSxP1SYmetX0pcnJaOWrBmkI9YsNCICSA=)
                          3: 6C061360105911F08BC6692CC4F9AE02.roa (hash: fxnKQH+hbVYix2vpYNlA4ryJmehEVWmxPALPrY6fkNI=)
                          4: 9E1A4B86526511EE869BEC82C4F9AE02.roa (hash: lOrA6k7sYmhjZNB1ZlbvSFLY4z9Dna+Fs7CLS+wxvaQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl
                          rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 18:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1874 (0x752)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153646, serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
        Validity
            Not Before: Jul  2 18:28:58 2025 GMT
            Not After : Jul  9 18:28:58 2025 GMT
        Subject: CN=68657a6a-104c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ba:1a:fc:ef:d9:1f:41:22:5b:ea:71:fe:f4:
                    f7:3f:65:c0:28:ea:8b:81:e3:4f:b8:2d:6d:71:f9:
                    0d:a5:dc:b1:32:c6:51:a1:4c:1b:ce:3f:3a:64:7f:
                    13:3f:91:ec:c0:de:f6:ca:65:bf:3e:11:97:35:f2:
                    b1:a8:01:9d:b9:d7:4a:bc:a2:50:37:f5:9a:fb:37:
                    b0:23:23:67:9d:a2:ed:a8:d7:5f:15:ac:22:54:ae:
                    20:0e:2a:bd:6e:6f:2b:cf:ea:d8:d0:b6:65:10:05:
                    a7:c4:c0:7e:06:81:b4:f4:17:f5:b6:cb:27:f0:6f:
                    2f:72:89:e5:ed:0a:03:75:8c:70:57:f2:b7:e4:79:
                    cb:f5:60:5c:a9:cc:50:0f:b5:bf:0e:77:dd:3b:c9:
                    ef:da:15:86:70:96:51:9b:76:e1:90:53:ea:c3:cb:
                    a8:56:a5:ff:f1:92:a5:8b:d1:ce:da:66:1f:15:95:
                    4e:53:d8:26:04:33:49:4a:2f:b8:92:e6:77:41:6e:
                    0a:be:b3:2c:c3:cf:50:d8:89:f1:ed:fc:fe:00:3b:
                    a1:db:95:15:ac:c9:2a:61:2d:00:44:6b:c2:8e:7a:
                    37:71:e6:bb:28:22:55:b7:e1:21:d5:90:ec:7d:4e:
                    e8:00:84:ef:a5:35:d3:bf:ed:10:16:46:a4:6c:6f:
                    f9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:06:BA:90:9A:FF:BE:32:45:45:E1:99:26:6F:2E:33:58:2B:08:A7
            X509v3 Authority Key Identifier:
                keyid:34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:66:ca:cf:54:74:18:36:ae:7e:88:32:51:d5:1d:98:e6:41:
         98:88:b3:38:51:c1:d4:e9:45:5c:89:1a:90:3b:c9:6b:b4:0d:
         aa:ce:a6:b5:6c:f7:b0:a5:76:17:02:64:6e:c8:3d:49:93:96:
         63:1a:36:92:b1:11:07:55:f5:bd:ce:1b:15:d9:9d:36:ff:b4:
         30:93:a9:aa:1d:94:a1:a1:5f:47:b0:40:3b:d9:cb:ac:6b:b4:
         1d:f5:e0:fc:48:21:8d:e5:a3:22:d2:6c:5f:c8:59:b2:2f:d9:
         1b:02:40:1d:9b:d8:60:8b:0e:ba:62:fd:5d:bd:95:f1:83:39:
         68:71:0a:2a:74:6e:31:56:f8:ef:18:c6:99:7e:de:4f:b6:5f:
         ba:2b:a6:10:2d:64:b8:39:08:1d:09:f3:31:76:1c:ac:2e:e8:
         cb:a3:da:15:ec:8e:89:57:10:0f:16:53:83:8f:af:c0:ca:26:
         19:ec:89:be:17:35:ad:63:1a:33:5a:6e:cf:ee:f0:1b:d5:5f:
         3c:a4:7c:eb:c9:95:4a:52:13:2c:91:ce:8e:8b:45:c1:1f:6b:
         fe:ec:ab:80:76:4a:f1:fc:51:80:0f:d1:43:1c:63:a4:a9:a9:
         82:3a:e8:4a:8f:6e:6d:e1:0e:05:94:50:ad:8b:7f:6c:c0:7a:
         78:34:66:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 01:41:40 2025 by rpki-client