Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
File:                     -cNjgFn4ZOhK479Q2qwHnGhGPqc.mft (raw, json)
Hash identifier:          SgMLzAge3BbAhNgFbzYWHfkpHDmPLnqYTyP61TmHH1E=
Subject key identifier:   71:BD:A3:7E:D3:31:93:08:48:17:85:82:A8:F9:98:79:31:F8:59:F7
Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7
Certificate issuer:       /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7
Certificate serial:       0557
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
Manifest number:          0549
Signing time:             Fri 22 Aug 2025 23:42:15 +0000
Manifest this update:     Fri 22 Aug 2025 23:42:15 +0000
Manifest next update:     Fri 29 Aug 2025 23:42:15 +0000
Files and hashes:         1: -cNjgFn4ZOhK479Q2qwHnGhGPqc.crl (hash: UbSJPpP9k6RgVnyFdaWaQrnoAw1zC7T8pqYmMOlkygQ=)
                          2: E0A5F584DFAC11EE8C281B42C4F9AE02.roa (hash: uEs/Ek7RKHaXQAk1u0ZUP/YjMBmk6kEDrvy+C4XPa0M=)
                          3: 8A0874C0AA5211EEAFC18554C4F9AE02.roa (hash: NlN5fs6YliLYR5HdT/sNLzjDC0HoiB4qtgUQ0EkZvxE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl
                          rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 23:42:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1367 (0x557)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DB2F, serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7
        Validity
            Not Before: Aug 22 23:42:15 2025 GMT
            Not After : Aug 29 23:42:15 2025 GMT
        Subject: CN=68a90057-6873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:70:15:5c:f1:c5:92:f8:62:b2:ef:d5:52:d7:
                    c4:95:fa:b7:a8:86:c5:2e:0d:09:f5:86:df:52:48:
                    c0:21:55:40:86:76:b8:a2:29:0e:49:07:30:27:16:
                    95:4a:ea:c0:bc:99:17:27:c7:76:03:ad:23:97:99:
                    a7:e2:a1:15:76:d9:ee:c5:fb:c8:c3:96:67:76:68:
                    6f:d9:65:7e:0e:ae:fa:72:d9:69:48:f8:50:19:fe:
                    cd:af:4b:04:c0:0d:9a:fe:bf:fe:ba:3b:6f:93:de:
                    7e:b5:c8:65:d9:20:db:c2:9c:35:69:06:fb:5c:07:
                    6d:1f:4d:e1:cd:7b:07:03:5d:6b:29:a1:57:c6:04:
                    96:2d:96:d7:0b:4b:9b:56:2c:7f:8e:4a:3d:17:01:
                    d2:bf:16:d1:8d:79:ff:d3:85:1f:a2:24:7a:5a:97:
                    03:6d:32:68:50:53:98:96:5b:99:a7:05:b8:dc:2f:
                    d9:48:d9:c1:c0:d4:a5:c5:c8:72:bd:0c:55:d9:7a:
                    8f:f0:14:31:64:88:8b:97:5d:94:26:20:23:02:1a:
                    2c:e6:10:74:9d:06:b0:d0:68:cd:01:3e:7c:0b:bc:
                    4a:a3:0c:c1:55:11:b3:9b:e0:a2:e7:a3:33:eb:28:
                    90:b4:2e:a0:38:28:54:2e:78:03:27:6b:ae:46:28:
                    37:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BD:A3:7E:D3:31:93:08:48:17:85:82:A8:F9:98:79:31:F8:59:F7
            X509v3 Authority Key Identifier:
                keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ad:49:6a:8f:c8:07:51:05:db:99:49:3f:2c:de:82:74:70:
         a4:6d:63:98:eb:b8:60:15:87:e2:8b:5b:88:3c:d4:81:df:c5:
         ff:9f:4a:6e:91:0e:ae:d3:7c:88:70:e1:0e:26:cc:06:a0:71:
         69:c4:3b:25:5d:3d:a7:c1:ee:e9:04:35:eb:67:6f:3e:8f:72:
         d8:4d:a7:a4:bb:d8:0b:bf:e6:c9:e2:eb:8b:4e:4e:ff:a4:37:
         92:87:70:0d:b5:8f:be:96:30:37:b2:1a:22:6d:be:08:4f:78:
         7d:43:82:b2:cf:1d:3e:b0:17:34:a3:7b:74:d3:73:66:a8:04:
         5c:40:f8:7e:7b:b7:16:78:14:b3:a7:12:c4:37:6f:a6:8d:99:
         36:eb:ac:eb:9e:c5:90:85:41:a7:03:fe:14:fc:5c:e5:51:e7:
         65:09:6c:13:76:b5:27:9a:b6:f2:6d:28:3b:d1:28:d5:33:cf:
         6d:58:cd:89:9a:88:50:7c:1f:37:76:5c:7e:a7:a9:e6:be:76:
         5b:51:d5:4e:db:eb:14:3a:9d:bd:5d:ad:58:7c:ac:c5:a7:61:
         e6:48:1e:9e:60:3d:aa:0a:5e:c1:ce:d4:68:b9:fb:83:12:b8:
         6b:79:d8:64:6a:b9:85:9e:1c:1a:82:86:e4:de:3d:ec:ad:f3:
         ea:af:24:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:34:30 2025 by rpki-client