Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
File:                     n0mgwprfTYMDB3M9LGCp2TEQogg.mft (raw, json)
Hash identifier:          wVHhwyxLDCp8eDZ7EdLOntrwsCnA95nbHm15P0fA4fQ=
Subject key identifier:   32:55:AF:F1:25:6F:C7:0F:43:A6:27:48:7A:7E:67:CA:E5:52:FB:82
Authority key identifier: 9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08
Certificate issuer:       /CN=A919B393/serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208
Certificate serial:       022C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
Manifest number:          0229
Signing time:             Thu 03 Jul 2025 02:18:43 +0000
Manifest this update:     Thu 03 Jul 2025 02:18:42 +0000
Manifest next update:     Thu 10 Jul 2025 02:18:42 +0000
Files and hashes:         1: n0mgwprfTYMDB3M9LGCp2TEQogg.crl (hash: JAaVFowRnFaHsPWP9GJU/gBnLFNqKoiZqkTgZEok9R4=)
                          2: 38F69014325B11ED8403A325C4F9AE02.roa (hash: xPxOBcWiHSTAw3zQ7FKJslNCxgd0Xv3rmMHCdbL8JBE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl
                          rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 02:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B393, serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208
        Validity
            Not Before: Jul  3 02:18:42 2025 GMT
            Not After : Jul 10 02:18:42 2025 GMT
        Subject: CN=6865e882-7215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:99:75:ed:39:48:61:55:62:df:b5:88:61:46:
                    de:c5:bc:1c:72:24:69:d3:79:c4:98:e4:14:35:1e:
                    26:92:8d:b8:9b:e0:77:22:af:b4:53:55:79:75:55:
                    01:9f:3b:a9:d0:d9:c3:57:01:05:22:79:5b:3d:e6:
                    32:ed:56:eb:76:81:46:b2:78:24:15:2b:d7:30:e3:
                    05:65:15:6f:3c:79:6c:48:70:c8:2f:3c:8b:21:c2:
                    ec:9b:8a:8b:44:56:c1:8d:e8:6f:24:9b:43:07:87:
                    df:25:98:66:d4:ee:48:af:e7:b2:e4:f2:6a:45:78:
                    db:3b:07:90:38:1e:7f:67:ec:6f:ab:ce:e9:d2:38:
                    a7:ed:ad:72:62:30:f5:5d:51:4a:7d:6e:db:c7:c4:
                    09:27:ac:96:83:5d:b0:39:c9:24:83:4a:ca:da:02:
                    67:76:16:f6:c7:a4:bd:fa:2b:68:82:2a:0c:4d:cd:
                    24:66:52:5d:01:54:d4:c8:51:c4:fd:64:96:33:bf:
                    38:07:5e:51:1c:3c:70:c5:91:71:9d:84:3d:ce:1d:
                    b4:8c:b5:0d:58:85:4d:73:f7:2e:83:5f:3b:20:c5:
                    c2:99:df:5b:ea:01:78:af:89:76:1e:fe:6b:67:67:
                    18:70:45:19:0f:a5:50:36:b9:54:77:b4:cb:d9:a0:
                    8c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:55:AF:F1:25:6F:C7:0F:43:A6:27:48:7A:7E:67:CA:E5:52:FB:82
            X509v3 Authority Key Identifier:
                keyid:9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:82:e1:3b:5d:d8:c3:53:28:02:f4:c4:97:40:84:1d:cf:20:
         f4:b3:31:03:c0:3a:15:a0:57:75:9a:ea:31:4b:10:67:33:58:
         86:31:2f:5b:fe:ee:0d:0b:a0:d1:e1:9e:65:e6:4d:6e:2a:5f:
         46:78:d1:58:77:60:15:b0:04:25:f0:23:cc:e8:da:7b:33:75:
         2b:0b:4d:4b:e8:2c:d3:cd:fa:0a:be:d9:df:c9:d5:8f:98:c2:
         4b:44:71:bb:4e:50:5f:d1:99:8c:86:16:9c:1b:fe:f4:0a:77:
         21:bd:86:48:8d:31:b8:19:87:1b:68:46:b0:e2:e2:e5:82:b0:
         8c:22:cf:4f:cd:6a:54:fd:4d:9c:54:a1:3b:db:d6:e1:1a:7f:
         37:a2:f6:c0:b4:9f:e7:e5:bb:02:63:83:be:da:40:ee:d0:d4:
         7a:93:bb:96:35:b3:40:7e:18:4d:0e:51:37:bf:56:50:0e:5c:
         d5:04:66:67:df:eb:d1:c4:8d:a0:6b:65:2f:91:dd:47:89:37:
         5f:0b:68:f9:fc:f1:68:e0:95:99:b7:ae:b3:0f:b0:7d:59:7b:
         ba:59:1e:07:bd:fe:23:2b:00:88:ff:63:55:81:d5:9e:c6:fd:
         67:a8:11:5d:d0:ca:99:93:6b:e9:18:2d:96:62:62:62:30:39:
         07:fc:68:36
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUIzOTMxMTAvBgNVBAUTKDlGNDlBMEMyOUFERjREODMwMzA3NzMzRDJDNjBBOUQ5
MzExMEEyMDgwHhcNMjUwNzAzMDIxODQyWhcNMjUwNzEwMDIxODQyWjAYMRYwFAYD
VQQDEw02ODY1ZTg4Mi03MjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1pl17TlIYVVi37WIYUbexbwcciRp03nEmOQUNR4mko24m+B3Iq+0U1V5dVUB
nzup0NnDVwEFInlbPeYy7VbrdoFGsngkFSvXMOMFZRVvPHlsSHDILzyLIcLsm4qL
RFbBjehvJJtDB4ffJZhm1O5Ir+ey5PJqRXjbOweQOB5/Z+xvq87p0jin7a1yYjD1
XVFKfW7bx8QJJ6yWg12wOckkg0rK2gJndhb2x6S9+itogioMTc0kZlJdAVTUyFHE
/WSWM784B15RHDxwxZFxnYQ9zh20jLUNWIVNc/cug187IMXCmd9b6gF4r4l2Hv5r
Z2cYcEUZD6VQNrlUd7TL2aCMFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJVr/El
b8cPQ6YnSHp+Z8rlUvuCMB8GA1UdIwQYMBaAFJ9JoMKa302DAwdzPSxgqdkxEKII
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjM5My8zMjZDQkQ1ODMy
NTcxMUVEQjg4REZDMkNDNEY5QUUwMi9uMG1nd3ByZlRZTURCM005TEdDcDJURVFv
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL24wbWd3cHJmVFlNREIzTTlMR0NwMlRFUW9nZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QjM5My8zMjZDQkQ1ODMyNTcxMUVEQjg4REZDMkNDNEY5QUUwMi9uMG1nd3ByZlRZ
TURCM005TEdDcDJURVFvZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQguE7XdjDUygC9MSXQIQdzyD0szEDwDoVoFd1muoxSxBnM1iGMS9b
/u4NC6DR4Z5l5k1uKl9GeNFYd2AVsAQl8CPM6Np7M3UrC01L6CzTzfoKvtnfydWP
mMJLRHG7TlBf0ZmMhhacG/70CnchvYZIjTG4GYcbaEaw4uLlgrCMIs9PzWpU/U2c
VKE729bhGn83ovbAtJ/n5bsCY4O+2kDu0NR6k7uWNbNAfhhNDlE3v1ZQDlzVBGZn
3+vRxI2ga2Uvkd1HiTdfC2j5/PFo4JWZt66zD7B9WXu6WR4Hvf4jKwCI/2NVgdWe
xv1nqBFd0MqZk2vpGC2WYmJiMDkH/Gg2
-----END CERTIFICATE-----
Generated at Thu Jul 3 06:18:28 2025 by rpki-client