Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft
File:                     nN-M6Qv3n4wUjR92H5lNghsknHE.mft (raw, json)
Hash identifier:          oDUupEuA//v507ReSQSdutGKR/suWi4p+Cioo8poU28=
Subject key identifier:   CA:70:B2:B5:D7:04:C7:E5:54:7C:E2:4B:34:9D:84:88:00:E3:94:C9
Authority key identifier: 9C:DF:8C:E9:0B:F7:9F:8C:14:8D:1F:76:1F:99:4D:82:1B:24:9C:71
Certificate issuer:       /CN=A919F450/serialNumber=9CDF8CE90BF79F8C148D1F761F994D821B249C71
Certificate serial:       0484
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft
Manifest number:          047F
Signing time:             Sat 23 Aug 2025 00:17:49 +0000
Manifest this update:     Sat 23 Aug 2025 00:17:49 +0000
Manifest next update:     Sat 30 Aug 2025 00:17:49 +0000
Files and hashes:         1: nN-M6Qv3n4wUjR92H5lNghsknHE.crl (hash: Qoh6Czb4mAZ2cc3jjSGkt8H2PrPmXoryPcrJwVhZTmE=)
                          2: DDE2BB7C534811EC8FFBDB7CC4F9AE02.roa (hash: 9BjSNtNI0t5KFZOPEwLsrwtwuYFD1A/cyJU1JZKxEKU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.crl
                          rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 00:17:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1156 (0x484)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F450, serialNumber=9CDF8CE90BF79F8C148D1F761F994D821B249C71
        Validity
            Not Before: Aug 23 00:17:49 2025 GMT
            Not After : Aug 30 00:17:49 2025 GMT
        Subject: CN=68a908ad-3bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a7:4a:fa:f0:bd:39:68:23:71:83:ca:09:44:
                    9f:25:49:2c:57:20:78:26:db:dd:59:7a:a9:95:f9:
                    60:3f:b3:7d:06:2f:56:9f:21:b4:30:c2:43:78:5e:
                    f5:ab:d4:4a:07:87:ec:0d:b5:47:cb:78:ec:83:cb:
                    62:8c:5b:3e:97:c4:85:c8:0e:43:74:99:d4:87:c3:
                    7c:57:b7:c2:4d:33:06:45:48:8d:20:3d:2a:41:d4:
                    8f:f9:60:47:83:77:b8:8e:df:a1:ce:c4:18:d4:00:
                    cf:67:dd:3f:d9:0e:65:c0:2e:43:18:3f:ce:b5:ca:
                    01:2c:02:23:9e:40:b8:f5:8e:9d:85:df:7c:a4:8f:
                    85:f6:2e:49:8d:96:08:26:8b:01:40:bd:3e:dc:22:
                    29:7e:81:e0:33:38:19:5e:10:a3:f4:2b:3f:f3:f3:
                    bf:73:84:54:ea:cc:75:3f:65:3a:ff:7f:d1:ca:60:
                    cb:5e:a5:0e:83:37:0f:8b:a1:39:ce:ac:7a:17:99:
                    39:a2:90:45:8e:1a:bc:59:7f:4c:1c:e4:ca:dc:1f:
                    5c:06:4b:dc:98:ba:7e:0b:45:83:bb:03:41:67:62:
                    40:dc:8c:cc:7e:71:f5:07:57:6a:df:8c:5c:f7:61:
                    4b:d9:33:4f:6d:1a:9f:4a:69:00:19:c1:30:a3:ed:
                    97:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:70:B2:B5:D7:04:C7:E5:54:7C:E2:4B:34:9D:84:88:00:E3:94:C9
            X509v3 Authority Key Identifier:
                keyid:9C:DF:8C:E9:0B:F7:9F:8C:14:8D:1F:76:1F:99:4D:82:1B:24:9C:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:6d:80:62:e0:eb:05:74:9a:00:f2:0e:a1:45:69:3c:00:47:
         2d:3c:b6:4b:70:4d:38:61:1b:6a:a3:f5:06:71:bf:2d:62:44:
         04:f3:59:3d:21:17:0c:65:bd:a8:9b:55:65:6c:3f:63:f5:ae:
         17:0e:73:28:07:df:17:8a:8a:11:0e:ae:16:53:a4:97:6b:46:
         05:44:28:7a:ca:c9:64:b7:cf:cf:57:cc:94:73:ff:8b:5c:50:
         2c:dd:d5:3f:e5:0d:5a:b6:0f:0c:04:0b:a5:37:8a:0e:57:79:
         60:af:7d:15:8b:4d:12:72:bd:1a:13:12:07:7b:df:a3:7a:d9:
         0d:8a:0d:b6:d4:9e:ef:19:64:0c:12:5d:bd:85:fc:8d:b8:bd:
         1c:ef:07:65:ff:e2:e0:0a:5b:8c:57:ae:c2:b7:90:66:0a:34:
         c3:b4:30:1e:c8:c8:0b:96:24:bf:8a:c3:01:fe:67:33:19:f5:
         62:43:8d:bb:0b:c7:59:b9:80:91:1b:60:c6:0d:c8:19:08:92:
         08:31:59:5b:22:53:72:9e:93:64:18:55:27:5f:02:85:77:1b:
         c4:9e:9b:c4:74:02:3d:f8:a7:1b:44:d8:5e:a6:d8:30:83:7d:
         10:b3:6d:1e:36:95:b3:2f:54:76:4a:b7:ff:be:76:b5:94:a5:
         6a:d2:72:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:14:37 2025 by rpki-client