Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft
File:                     MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft (raw, json)
Hash identifier:          MmpAqAbBmnri18CD0JVJXKqbc5AVtg30C5NlQuhLVWc=
Subject key identifier:   63:91:50:95:85:1A:98:89:9A:8A:92:FE:DD:6F:9B:BB:D3:58:8F:EC
Authority key identifier: 30:DF:CD:C8:92:E7:3E:E2:54:64:28:27:42:E2:9C:56:7E:A3:CE:03
Certificate issuer:       /CN=A91C2913/serialNumber=30DFCDC892E73EE25464282742E29C567EA3CE03
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft
Manifest number:          3C
Signing time:             Tue 01 Jul 2025 08:19:52 +0000
Manifest this update:     Tue 01 Jul 2025 08:19:51 +0000
Manifest next update:     Tue 08 Jul 2025 08:19:51 +0000
Files and hashes:         1: MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl (hash: FAIhu/HXe4jozM+WbtqigkSEqAjf04yelomW9ujNeV8=)
                          2: 7273BDA4FE4A11EF8A0EDD73C4F9AE02.roa (hash: aKDX+epsv+87CublFWvfDFPYgSLhuAtHebX+rfx7L+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl
                          rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 08:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2913, serialNumber=30DFCDC892E73EE25464282742E29C567EA3CE03
        Validity
            Not Before: Jul  1 08:19:51 2025 GMT
            Not After : Jul  8 08:19:51 2025 GMT
        Subject: CN=68639a27-c3c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:37:4d:16:21:e2:02:75:51:c3:d7:4e:94:df:
                    01:14:9b:6c:99:fd:29:f4:e0:cb:c0:07:7d:6b:70:
                    55:61:49:0f:d5:b8:3d:22:ee:36:de:01:4b:ca:8a:
                    4a:97:9e:a0:ef:4e:82:96:0c:ed:fc:e1:d2:de:fd:
                    f0:28:cf:8d:d9:01:93:f0:04:8f:b0:c1:59:1b:12:
                    55:c0:b1:a1:f7:da:15:0e:1b:48:f6:aa:5e:12:30:
                    0e:ee:ac:1a:e2:e0:9c:d0:37:3c:3f:79:02:81:5b:
                    76:70:7c:27:97:f1:fd:1b:bc:73:ad:6e:cf:70:4e:
                    f1:91:f5:15:6e:0a:8c:d7:d9:b3:af:51:8e:28:ab:
                    d6:84:23:07:54:08:d6:82:fc:f8:36:5b:7d:43:17:
                    e1:ef:65:7a:3c:dc:58:58:74:16:e8:ea:89:66:82:
                    12:da:56:6e:6d:81:44:eb:4f:6c:c6:b9:c1:32:cd:
                    4a:1b:93:cd:32:86:1c:40:77:ca:9f:61:d8:a6:47:
                    3c:47:c5:78:80:64:94:05:ca:73:d4:f5:7d:38:3a:
                    1c:d6:f7:b2:d6:e7:80:e7:49:8e:f3:e6:b0:96:55:
                    2c:ad:49:f2:e0:4e:ad:8d:74:61:45:87:2c:39:4d:
                    7c:6a:f6:42:d9:11:4f:fe:c4:56:9a:55:e2:ee:1a:
                    ff:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:91:50:95:85:1A:98:89:9A:8A:92:FE:DD:6F:9B:BB:D3:58:8F:EC
            X509v3 Authority Key Identifier:
                keyid:30:DF:CD:C8:92:E7:3E:E2:54:64:28:27:42:E2:9C:56:7E:A3:CE:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:c1:e7:8f:16:d2:ef:6a:8c:4a:ab:f1:33:f9:54:a5:93:2c:
         8d:fa:60:13:5f:80:0f:58:4f:47:da:96:83:4f:e3:09:0c:51:
         12:88:44:ca:f3:78:aa:dd:cd:24:28:33:f8:d6:c9:fc:e4:72:
         a9:4f:c1:a1:7a:a3:23:39:a1:e3:44:e4:9a:30:5d:b0:16:4e:
         71:57:dd:b2:a7:6a:82:f6:e6:5c:0f:3a:ce:a7:a4:c3:e6:2e:
         98:aa:ac:a3:4f:37:d5:50:2d:72:2b:66:ff:5c:2c:5f:36:68:
         73:39:df:71:88:aa:e4:ab:7e:21:38:3c:00:2f:25:0b:59:9b:
         92:96:8a:f3:b6:ff:e1:40:fa:f7:db:88:14:bc:8a:d2:e1:cd:
         00:83:8c:37:36:af:52:15:c4:16:58:ad:e2:ac:ce:00:eb:91:
         86:b6:86:49:3b:42:05:ae:2d:11:77:ab:07:f7:64:5b:28:d4:
         7a:77:fc:af:41:5d:9d:93:a7:54:b1:02:7c:9a:5e:d3:a5:3f:
         f8:08:38:ff:33:cc:3f:29:5d:ca:4f:e5:8b:af:e9:dd:69:1d:
         b9:df:76:31:c2:55:1e:b3:5d:9d:45:97:f8:7c:66:53:6d:1b:
         27:09:6c:2a:27:01:da:61:e9:a3:1f:b5:fd:d0:32:45:a2:71:
         24:f2:28:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:59:18 2025 by rpki-client