Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft
File:                     Nps-m3tm6PW7l5puLy56rPUA0_E.mft (raw, json)
Hash identifier:          bkTlIbJvkUNFvNrma5wkgUU+nko54NHJI4QJZcUO+tY=
Subject key identifier:   63:AA:7F:5E:78:8C:62:7F:87:4A:B7:1A:4C:AE:B9:3B:01:6B:E3:A0
Authority key identifier: 36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1
Certificate issuer:       /CN=A91FB8C8/serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft
Manifest number:          012F
Signing time:             Sat 05 Jul 2025 04:52:57 +0000
Manifest this update:     Sat 05 Jul 2025 04:52:57 +0000
Manifest next update:     Sat 12 Jul 2025 04:52:57 +0000
Files and hashes:         1: Nps-m3tm6PW7l5puLy56rPUA0_E.crl (hash: kRmA/BkiQstruVDbtKmrdmtHWlOkRmWxq4PldTZWQ9g=)
                          2: CA5B7DA48ECA11EEA3901581C4F9AE02.roa (hash: NP1KRG9waDvIQkw5KUdNc2k+dz2A2AWeqBvOhbZYwI8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl
                          rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB8C8, serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1
        Validity
            Not Before: Jul  5 04:52:57 2025 GMT
            Not After : Jul 12 04:52:57 2025 GMT
        Subject: CN=6868afa9-9d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:03:9d:97:39:f2:7b:89:53:4f:df:aa:42:04:
                    4a:e0:74:a6:f2:4c:25:41:06:5e:53:3d:87:d2:e1:
                    2b:82:14:73:d3:19:72:0d:78:d1:b0:0d:2e:0e:95:
                    b8:3b:1e:88:d6:b7:3a:db:27:33:cc:df:d4:db:c4:
                    b2:d1:38:b1:24:87:e0:5f:67:c2:43:b6:13:88:a1:
                    14:5a:ba:c5:50:ae:69:a1:b5:4b:8f:65:ad:7e:49:
                    07:da:b5:35:e6:9b:99:c0:a2:ce:f2:bb:3c:01:6b:
                    09:cc:58:11:90:e9:eb:93:56:42:bf:f4:d5:5d:a8:
                    bf:5b:be:fd:b8:39:70:8e:08:8b:45:fc:d5:fe:00:
                    f7:06:af:df:47:63:d8:c7:b4:c1:93:30:1f:9b:ba:
                    ae:c0:bc:3b:0b:4b:ec:81:c4:85:a6:9c:0b:9c:e3:
                    77:d1:09:ec:06:85:63:3c:56:aa:72:f3:56:74:ab:
                    90:23:a7:5f:01:76:1c:59:d6:f0:e1:3a:89:36:c4:
                    05:db:fa:7d:af:40:1d:3a:37:6c:f3:c5:7e:10:05:
                    28:7d:03:7e:15:67:ca:93:7b:9f:2e:1a:de:b7:50:
                    f8:f3:51:41:fa:7a:f1:45:fa:ad:ff:ee:e7:b9:5d:
                    08:96:c8:f0:37:74:17:d1:07:df:25:12:6a:4f:9b:
                    7a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AA:7F:5E:78:8C:62:7F:87:4A:B7:1A:4C:AE:B9:3B:01:6B:E3:A0
            X509v3 Authority Key Identifier:
                keyid:36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f3:a8:92:04:9f:53:e0:ed:08:7f:67:2a:07:89:ed:f9:e9:
         07:42:2c:7b:b8:de:72:e4:71:7f:02:ec:20:67:40:04:c6:13:
         33:ce:88:df:3b:69:3e:41:73:0b:c7:f3:bc:cc:53:a7:16:0a:
         b2:0d:41:d8:7e:bd:b9:fa:2f:f2:6d:36:e3:53:9b:fa:ba:6f:
         65:78:f3:6d:4d:f9:0c:04:8d:4a:24:3e:93:a8:0e:d2:20:68:
         ea:11:ae:df:32:0e:4e:2b:f3:a5:f3:98:0f:f7:f1:73:ab:a8:
         ad:2d:ec:94:fb:e0:5c:ec:38:7c:56:1d:c1:3d:db:db:9c:13:
         b3:8b:6b:e7:6e:57:e5:2b:85:91:93:7a:99:ed:b2:de:93:5c:
         71:04:1c:de:36:37:75:a3:5b:7b:a3:ff:fe:ce:56:5e:4a:b2:
         45:55:37:5b:7a:61:58:a5:08:ee:ff:d0:86:ca:97:4c:71:c7:
         aa:e8:57:45:9d:80:0f:80:b9:a6:b7:96:b4:83:87:4e:1c:91:
         3a:bd:6e:3a:b3:6c:5b:de:ca:fa:41:b4:a9:f4:07:bf:ab:04:
         36:6f:d7:e7:3c:c2:5f:b6:92:07:fd:1e:c7:f2:c3:01:a7:21:
         0d:c8:e7:0b:53:25:eb:67:44:79:b7:a4:11:7d:13:4d:cf:f4:
         07:8c:73:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 21:05:04 2025 by rpki-client