Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft
File:                     MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft (raw, json)
Hash identifier:          VdhF6MXVzpeELZ2PZ/JAzK+yGqBdWNyvRbMkN2zdwak=
Subject key identifier:   3E:54:58:81:FE:08:EF:AB:BE:8A:94:5E:16:EB:6A:D3:8C:6B:F3:3E
Authority key identifier: 30:DF:CD:C8:92:E7:3E:E2:54:64:28:27:42:E2:9C:56:7E:A3:CE:03
Certificate issuer:       /CN=A91C2913/serialNumber=30DFCDC892E73EE25464282742E29C567EA3CE03
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft
Manifest number:          74
Signing time:             Sun 19 Oct 2025 10:12:23 +0000
Manifest this update:     Sun 19 Oct 2025 10:12:23 +0000
Manifest next update:     Sun 26 Oct 2025 10:12:23 +0000
Files and hashes:         1: MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl (hash: UFKNa4btqsBegv1wOpBqSE9mJjbjgSRY6BBTUhSPgeo=)
                          2: 7273BDA4FE4A11EF8A0EDD73C4F9AE02.roa (hash: aKDX+epsv+87CublFWvfDFPYgSLhuAtHebX+rfx7L+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl
                          rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:12:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2913, serialNumber=30DFCDC892E73EE25464282742E29C567EA3CE03
        Validity
            Not Before: Oct 19 10:12:23 2025 GMT
            Not After : Oct 26 10:12:23 2025 GMT
        Subject: CN=68f4b987-f857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:69:76:c3:58:9c:0c:05:77:58:95:45:a8:a4:
                    bd:8c:34:ac:a6:96:98:17:bd:83:64:be:1b:09:06:
                    0b:cb:88:7b:a7:de:be:85:27:27:25:79:32:de:72:
                    45:33:97:23:bb:fb:19:60:76:e2:13:65:6b:c4:ef:
                    36:8c:f1:2a:7f:81:07:78:bc:cf:f3:f9:93:e6:0b:
                    46:42:7b:b3:b7:59:7e:71:a1:99:e3:7d:77:ee:ff:
                    0a:80:b7:8c:7d:b9:a9:05:2a:fd:54:b9:c6:b4:e3:
                    e9:b7:27:f7:1d:9b:9f:ac:85:ee:b8:ff:db:cf:c9:
                    74:01:65:cf:e0:02:eb:2c:41:8b:9f:a0:22:ef:41:
                    d0:49:cf:e7:c0:c2:15:63:2a:f7:3c:5a:93:a3:e7:
                    18:9f:0c:3a:f0:5d:fc:98:f7:ff:7e:38:b7:ad:ff:
                    b5:ee:5d:a8:c3:c0:ee:1e:40:09:44:38:33:19:66:
                    c2:1a:70:f3:33:c7:71:55:2b:0d:90:e8:07:28:8d:
                    22:17:90:f9:cb:c6:bc:76:cb:8c:29:d1:a3:97:05:
                    a5:63:9e:06:9a:c1:47:43:6f:b4:ba:6c:2b:0c:73:
                    87:2a:00:e6:85:66:b8:90:07:b8:a4:ea:5b:0a:af:
                    fc:c8:93:19:88:8c:3b:40:3d:a6:3b:ab:b7:df:dc:
                    cc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:54:58:81:FE:08:EF:AB:BE:8A:94:5E:16:EB:6A:D3:8C:6B:F3:3E
            X509v3 Authority Key Identifier:
                keyid:30:DF:CD:C8:92:E7:3E:E2:54:64:28:27:42:E2:9C:56:7E:A3:CE:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:50:dd:83:04:4e:10:46:ec:5a:3f:04:76:f9:ae:bf:4a:3b:
         fb:1b:65:8f:29:55:bf:54:5f:21:0b:1a:87:50:18:ee:33:2f:
         2b:ad:12:c5:ee:ed:24:e3:15:fb:4f:92:d5:3c:c5:31:f2:02:
         1b:f5:ef:f4:92:88:4c:c1:c9:80:3e:76:90:10:70:47:60:e2:
         b6:67:52:0d:3a:dd:15:7e:7d:2e:64:9d:86:4e:c2:b5:06:7b:
         f0:74:56:41:83:9b:e5:f7:f8:44:1e:f9:da:ca:6a:ba:b6:9b:
         97:41:fa:0e:44:23:4f:b7:29:12:56:ae:5b:c7:af:23:d7:25:
         95:d5:87:dd:e2:32:35:20:6e:bf:07:82:89:80:2a:ca:d4:d4:
         8c:16:57:7c:89:12:68:ee:c2:5b:00:0a:a9:b5:6b:77:2e:80:
         6c:11:e2:fa:32:0f:21:13:9e:4c:c6:0c:52:66:9d:7f:16:46:
         1d:17:a4:ae:01:02:ef:f4:24:67:ad:28:fe:a0:32:cc:a3:4e:
         7c:95:d0:d4:2e:37:f7:53:1a:30:1b:cf:76:88:ce:ae:7b:ab:
         dd:66:09:bd:ee:aa:a4:f1:c7:9d:92:70:0f:1e:00:e8:b2:a9:
         1a:83:c3:d7:4b:6b:d5:67:f6:31:e1:9b:57:22:53:cb:a4:ba:
         81:9f:34:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:15:49 2025 by rpki-client