Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft
File:                     nPMspRGaIvijMFkQ1ANfaLP8IUw.mft (raw, json)
Hash identifier:          YlEfhz2u9+UR7zFGtHV/QFPwCEtBKcYU/k9wam4jnFs=
Subject key identifier:   31:2C:3B:BB:BE:08:29:18:1C:8C:91:F3:7F:C8:53:D8:48:B2:B5:44
Authority key identifier: 9C:F3:2C:A5:11:9A:22:F8:A3:30:59:10:D4:03:5F:68:B3:FC:21:4C
Certificate issuer:       /CN=A9113E79/serialNumber=9CF32CA5119A22F8A3305910D4035F68B3FC214C
Certificate serial:       04FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPMspRGaIvijMFkQ1ANfaLP8IUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft
Manifest number:          04F6
Signing time:             Thu 12 Jun 2025 23:16:40 +0000
Manifest this update:     Thu 12 Jun 2025 23:16:39 +0000
Manifest next update:     Thu 19 Jun 2025 23:16:39 +0000
Files and hashes:         1: nPMspRGaIvijMFkQ1ANfaLP8IUw.crl (hash: 6M+Kizwv9+tceL9b1VTOhrbgpVfR4pcfOELGBZCWlFI=)
                          2: 55D5848813E411EC9BE4C87FC4F9AE02.roa (hash: IhuzHy2i1HilFEQnpW2ccDVOUFu06otCgruwg3LwU+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.crl
                          rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPMspRGaIvijMFkQ1ANfaLP8IUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 23:16:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1274 (0x4fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113E79, serialNumber=9CF32CA5119A22F8A3305910D4035F68B3FC214C
        Validity
            Not Before: Jun 12 23:16:39 2025 GMT
            Not After : Jun 19 23:16:39 2025 GMT
        Subject: CN=684b5fd8-03d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:79:a2:13:3e:57:f4:e3:e4:fc:c2:18:24:56:
                    34:15:1d:6d:c8:15:b0:14:54:f4:3b:4d:6a:c0:b2:
                    5d:c3:fd:8a:fb:7d:50:39:99:e2:15:d5:de:4d:7c:
                    1e:a9:da:9c:d1:b7:34:aa:68:ae:40:0f:41:6f:4f:
                    91:13:fb:18:2f:3e:40:b1:89:71:8c:a0:f5:82:0d:
                    07:96:33:74:88:af:9c:c0:f8:e3:02:e0:75:7d:92:
                    b2:c9:e7:94:e2:0b:c0:8a:76:0e:f8:a5:96:52:c9:
                    4c:cf:d2:20:5f:ff:6c:6b:70:e0:ce:97:4b:56:08:
                    b1:69:a2:9c:d4:f0:43:d6:48:a8:dd:87:74:bf:c7:
                    d9:90:2c:be:7f:f6:9d:34:40:1f:3e:25:3a:df:24:
                    b7:a0:ab:20:75:e0:62:74:b9:72:6f:15:a3:a7:77:
                    2d:49:31:b7:da:08:52:3b:8e:35:26:b7:e3:59:1e:
                    d2:ee:d7:9f:40:4a:bc:40:a3:f4:97:e4:f7:a4:53:
                    e8:6f:4c:ff:a0:73:39:e7:b0:08:11:88:eb:14:b9:
                    e0:c5:48:bb:01:d0:f4:cf:de:30:f4:22:49:1d:16:
                    1f:21:04:bb:47:9b:ad:0c:dc:34:64:e6:f2:c6:cc:
                    7b:d3:e6:4d:3e:0f:c1:0c:c5:79:5e:6c:a6:22:8b:
                    ad:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2C:3B:BB:BE:08:29:18:1C:8C:91:F3:7F:C8:53:D8:48:B2:B5:44
            X509v3 Authority Key Identifier:
                keyid:9C:F3:2C:A5:11:9A:22:F8:A3:30:59:10:D4:03:5F:68:B3:FC:21:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPMspRGaIvijMFkQ1ANfaLP8IUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:44:c2:ed:16:8a:b5:eb:41:8b:ae:34:12:8e:c6:83:b3:9e:
         d7:69:85:c0:ed:de:2c:75:8e:48:ea:31:d1:0d:80:dc:95:fa:
         52:81:3f:21:2e:66:09:6b:07:d6:63:e2:bc:3e:33:c9:f5:e6:
         6d:ea:54:17:2b:e1:f4:db:75:f9:f8:b9:be:01:cc:88:ad:8a:
         92:4f:e6:9a:5d:ae:0f:1e:22:9d:f6:66:cc:85:f3:db:f8:cc:
         a3:6e:fa:35:fd:60:fb:c4:64:bb:ec:87:85:4e:83:ea:33:b0:
         b5:50:0f:ea:aa:ad:99:d5:30:de:5b:7e:54:7f:ad:00:da:ef:
         49:c9:e9:ec:03:51:42:57:59:66:07:27:39:a7:04:52:3d:00:
         fa:90:cf:19:98:92:d1:72:0b:7b:f0:a4:0b:a7:20:ec:b3:e6:
         0c:46:0c:bd:35:72:f6:00:9f:1b:5d:dc:f9:7c:6b:91:22:7a:
         20:cf:61:c2:44:0c:5c:6d:8f:a9:ba:a5:41:44:80:1f:c2:10:
         f3:b8:b4:06:8d:4e:e0:03:1e:12:8c:f8:9f:06:12:27:fd:7e:
         ae:aa:c1:50:12:44:20:d2:c9:13:7f:30:aa:2e:37:88:fa:f5:
         bf:92:a6:0d:17:0b:bf:30:73:b1:fa:d4:06:66:92:af:4a:47:
         8d:a8:5b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:00:15 2025 by rpki-client