Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
File:                     n0mgwprfTYMDB3M9LGCp2TEQogg.mft (raw, json)
Hash identifier:          KpcKlfP91Z6ZbVgW1HHCv2V2jScBb0NJRujtOt89dSg=
Subject key identifier:   CF:34:5B:7B:72:8C:96:34:51:62:A5:AF:89:B8:77:86:28:FF:41:5F
Authority key identifier: 9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08
Certificate issuer:       /CN=A919B393/serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208
Certificate serial:       0263
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
Manifest number:          0260
Signing time:             Sun 19 Oct 2025 03:55:10 +0000
Manifest this update:     Sun 19 Oct 2025 03:55:09 +0000
Manifest next update:     Sun 26 Oct 2025 03:55:09 +0000
Files and hashes:         1: n0mgwprfTYMDB3M9LGCp2TEQogg.crl (hash: 5nBmM3FEPDjnRiKmBTnyrgAxkdueTPk5i42pNVJVx68=)
                          2: 38F69014325B11ED8403A325C4F9AE02.roa (hash: xPxOBcWiHSTAw3zQ7FKJslNCxgd0Xv3rmMHCdbL8JBE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl
                          rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:55:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 611 (0x263)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B393, serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208
        Validity
            Not Before: Oct 19 03:55:09 2025 GMT
            Not After : Oct 26 03:55:09 2025 GMT
        Subject: CN=68f4611e-2245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c9:cd:e3:86:cb:ae:3b:9f:aa:d1:e0:b3:d5:
                    45:42:6b:0e:f4:0b:92:83:0a:4c:18:d1:19:6e:e8:
                    c2:69:aa:8d:54:08:54:17:34:0e:a9:cf:49:1d:e5:
                    34:44:17:7d:7f:1b:7a:af:89:25:78:46:e9:b9:8c:
                    4f:b8:58:86:d7:6e:f5:59:60:69:99:bf:9e:4e:ce:
                    84:59:1b:ef:bf:05:97:ea:d2:56:71:da:ca:52:2f:
                    13:9c:cd:a4:5a:08:50:b0:88:fc:80:0c:2b:c3:b9:
                    19:76:33:ae:a7:08:10:26:94:7d:bf:ba:e6:b1:4f:
                    3c:0a:05:a5:2c:1a:e7:9e:82:fe:5e:35:6c:77:78:
                    27:53:3a:7d:c4:46:3d:9e:58:fd:0f:6c:64:a2:62:
                    54:42:7a:1e:74:0c:95:7c:69:e5:30:f1:6c:36:40:
                    8f:3c:7c:d8:8c:bf:ec:d7:77:72:36:17:ac:d6:d7:
                    10:49:4f:fb:18:f7:c2:1c:bb:25:f5:44:9f:51:4d:
                    e6:64:79:3e:f9:18:39:91:02:5d:1d:21:57:e9:ed:
                    a6:24:fd:0b:d0:fc:21:df:99:74:ad:a4:0c:55:23:
                    c2:8a:52:a3:b5:94:d6:63:93:fc:22:aa:56:a4:b8:
                    5d:70:71:2d:9a:e8:d9:07:36:aa:8f:3f:11:81:f4:
                    58:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:34:5B:7B:72:8C:96:34:51:62:A5:AF:89:B8:77:86:28:FF:41:5F
            X509v3 Authority Key Identifier:
                keyid:9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:65:4c:be:fd:6f:c5:01:91:56:07:41:10:f2:d8:7f:af:cf:
         bf:b0:fc:93:6e:a0:81:52:85:9d:9f:e5:2e:29:cb:65:ed:20:
         a7:e6:bb:dd:3f:09:37:e0:8a:1c:03:fb:36:33:70:0b:8d:e4:
         6f:ac:62:c3:59:7a:86:54:92:50:a6:36:53:f6:20:bc:90:56:
         d2:06:f7:83:73:bc:0d:33:a7:99:70:97:29:26:6e:48:60:03:
         83:1d:70:db:1f:01:27:93:9b:47:e6:99:66:67:de:2a:69:af:
         c3:f5:64:0c:5f:a2:53:c7:1b:5d:f1:e0:80:bd:5c:c2:66:57:
         f0:7d:60:b3:ed:33:de:36:fa:ff:0c:0b:fd:65:e5:21:4d:ae:
         e0:6b:6b:d9:7b:82:00:4f:e3:ad:16:fc:fb:eb:4c:f3:83:5e:
         ba:ac:81:c9:f6:ca:cc:8f:68:2d:29:82:db:87:3e:82:aa:8e:
         32:34:b8:a5:5a:e1:13:05:e0:79:8d:d5:41:d2:68:6c:a1:ef:
         a4:15:af:6f:80:39:5b:13:f6:ed:4d:23:c6:d1:05:7c:21:2b:
         1e:f5:02:9c:2c:c8:15:8a:48:8f:6c:af:38:45:e4:95:f1:00:
         44:df:2e:af:6a:60:da:e0:05:fb:25:b4:05:2a:34:3a:26:d4:
         5d:25:0b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:31:45 2025 by rpki-client