Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft
File:                     nwZsuF9biPgjeA1flmJfQ4VIG78.mft (raw, json)
Hash identifier:          MwjK8hmyHAxASQuT75fDgL6i5bRz2PaYfbV6feFH3nM=
Subject key identifier:   CE:D8:5F:21:01:27:D0:75:1B:5F:2F:3A:01:99:C0:DA:9B:57:D8:41
Authority key identifier: 9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF
Certificate issuer:       /CN=A919DD44/serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF
Certificate serial:       0743
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft
Manifest number:          0736
Signing time:             Wed 02 Jul 2025 22:05:07 +0000
Manifest this update:     Wed 02 Jul 2025 22:05:06 +0000
Manifest next update:     Wed 09 Jul 2025 22:05:06 +0000
Files and hashes:         1: nwZsuF9biPgjeA1flmJfQ4VIG78.crl (hash: TrB3HtequqYLZyusLMXSxxeCP7+GjX9Xhc9EnbLuNL4=)
                          2: 788169BE3AAC11EBBEE1E81AC4F9AE02.roa (hash: t/R4fAlXQzy9ztNMWRdnB87GayGaEVACHRV/q2Z5jVE=)
                          3: 026A84FC4C3211ECB9639932C4F9AE02.roa (hash: uBkySuw/pyK9tvxApltYqkUVTPyi7oX70MF7KU+NjE0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl
                          rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 22:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1859 (0x743)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DD44, serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF
        Validity
            Not Before: Jul  2 22:05:06 2025 GMT
            Not After : Jul  9 22:05:06 2025 GMT
        Subject: CN=6865ad13-0c40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:47:94:7d:06:ab:60:05:70:b1:f8:f1:f1:16:
                    72:d9:0c:73:d3:3c:82:04:e3:86:1c:4c:9d:bd:9b:
                    af:eb:52:3b:cc:ec:36:2f:d4:9e:d2:a1:a2:e4:35:
                    bb:ef:b2:e2:59:ea:9d:41:e3:68:85:7d:44:ec:ee:
                    8d:aa:84:ef:ce:be:c3:02:e9:80:35:2f:81:05:e0:
                    89:aa:0a:82:eb:36:05:9c:cd:fb:36:78:1e:f8:54:
                    53:d0:2b:91:cf:9d:dd:79:7c:5e:a5:fe:7f:24:40:
                    05:70:86:93:19:5d:9c:63:a1:8c:1b:ec:e5:3a:23:
                    7b:4c:65:cf:70:5f:ec:cc:10:a1:7b:a8:3b:e1:46:
                    2a:78:ea:92:c5:12:d9:04:c6:45:d8:6b:3c:6d:33:
                    b4:57:0c:db:cf:a0:be:ee:9b:ee:3e:c3:7e:01:c6:
                    6d:bf:ef:51:33:80:54:c9:58:5b:e3:e4:ee:5f:48:
                    6e:90:13:5b:45:be:fd:d3:d0:96:fc:df:98:81:67:
                    80:b3:8f:28:ac:18:f7:ed:37:3d:fa:40:7c:97:f3:
                    b0:a8:f1:2f:29:75:54:fc:d0:10:a8:78:a6:cb:85:
                    4f:c4:8a:52:4f:25:06:41:c3:b5:71:ac:44:6f:1a:
                    91:5b:33:a2:e7:23:69:1c:8c:0b:e7:fb:71:50:c0:
                    e5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D8:5F:21:01:27:D0:75:1B:5F:2F:3A:01:99:C0:DA:9B:57:D8:41
            X509v3 Authority Key Identifier:
                keyid:9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:a9:86:8d:19:8a:4c:35:f2:88:41:04:3a:be:38:51:ab:6d:
         0f:7a:82:b8:7d:62:7b:2d:2e:c6:e6:d9:de:44:e6:89:cd:58:
         c6:40:af:7c:e3:1b:f7:89:43:b2:82:40:09:1a:3d:f1:d3:ff:
         2c:89:ce:b0:98:03:b7:7d:2d:ac:d5:6e:af:cf:ff:37:07:12:
         00:75:e6:62:39:fd:86:b8:36:03:dc:13:8e:e4:21:ed:40:d9:
         20:dd:2f:12:cd:0e:00:03:ae:c7:57:65:88:4e:8f:0b:b9:5d:
         51:58:7a:0c:97:e4:5d:4e:00:0d:52:b1:b7:29:d1:aa:49:ac:
         17:b2:6a:e7:13:56:8d:c0:31:33:df:ed:6c:51:23:af:5e:39:
         b2:4a:61:48:fc:9e:3e:a5:92:88:37:47:5f:c0:12:10:94:6c:
         c5:00:48:1c:f7:a5:57:db:33:2a:5c:21:50:e7:8a:6a:c8:9d:
         8b:00:78:1c:16:60:ce:90:65:e6:14:52:2c:1f:75:53:93:4c:
         1b:ef:6c:0e:29:c7:f1:64:19:93:f2:50:2d:70:ec:3c:4c:15:
         a2:81:6e:69:b8:4f:dc:8d:24:b2:3a:13:a8:f8:7f:51:24:c8:
         fc:56:40:59:d5:88:e8:ec:06:a0:d4:d5:04:f9:10:9f:0b:5d:
         ef:51:f7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 01:14:12 2025 by rpki-client