Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
File:                     N02aLIMvI0S92MpAYxF5P2bUxzU.mft (raw, json)
Hash identifier:          BvtJRLLpUBJNP+RHPUZvDUE80Eo0cHl0VOIiiHOCrOo=
Subject key identifier:   49:4D:E7:25:E0:57:FF:4E:61:26:AD:61:44:EE:15:49:D9:4E:9C:0F
Authority key identifier: 37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35
Certificate issuer:       /CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
Certificate serial:       056F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
Manifest number:          0559
Signing time:             Sun 10 Aug 2025 23:32:48 +0000
Manifest this update:     Sun 10 Aug 2025 23:32:47 +0000
Manifest next update:     Sun 17 Aug 2025 23:32:47 +0000
Files and hashes:         1: N02aLIMvI0S92MpAYxF5P2bUxzU.crl (hash: Sr08lTOZ1E1QwEpPj2EgEEDewicYGtttStghjSuIfUI=)
                          2: AC3162143ED611EFA3523A6BC4F9AE02.roa (hash: 68fiXxDRInABMZSnArOz5po2YH5/5mLBsvEHG5ANoNk=)
                          3: 1FC8419E4B6F11EF98BA6B27C4F9AE02.roa (hash: ZIpPhxn3ZcCbFE5Pdx2VemD1MQNZXD0fX/y2N95QY8k=)
                          4: BC5887A44B6E11EFA3355126C4F9AE02.roa (hash: bqDWaQrEnfW4Yr6xAJ8NbzXfe/Eoz2cTSijNep764D8=)
                          5: 54E77A985F1F11EFA979694FC4F9AE02.roa (hash: ZIQc9K7qsEFy9TotgtpdHjpKJ2lZutFq7FE8iTx18Nc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl
                          rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 17 Aug 2025 23:32:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1391 (0x56f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122039, serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
        Validity
            Not Before: Aug 10 23:32:47 2025 GMT
            Not After : Aug 17 23:32:47 2025 GMT
        Subject: CN=68992c20-c675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b7:0c:6d:d4:85:72:b9:83:c1:c0:18:64:90:
                    bc:25:a3:55:39:e6:81:09:77:87:96:c9:3e:6e:06:
                    af:e2:5f:91:39:a9:f1:b9:7c:31:a8:ea:42:0c:a4:
                    84:15:62:83:6c:a6:26:86:53:3c:f7:e7:c2:58:f4:
                    f3:95:a1:da:c5:19:56:16:4d:b6:1f:b0:57:4c:8d:
                    52:fc:7e:76:69:35:01:6d:36:8d:b2:81:a7:f7:b9:
                    50:95:2e:46:e2:0c:91:c3:70:6b:19:8b:0e:95:d1:
                    a7:34:66:77:6c:e4:82:0f:0f:27:f3:e6:db:9b:bc:
                    6e:4b:f9:fd:59:de:84:3c:f3:f8:57:15:91:1f:d1:
                    c0:ac:d3:a3:17:95:ce:0f:25:f8:bb:e3:0b:57:c0:
                    5c:91:3f:20:14:e4:d1:e9:f5:f0:62:70:ad:a1:49:
                    80:55:29:04:d1:40:bf:ef:b4:03:8d:5e:f3:8e:e1:
                    f5:3b:07:01:35:2f:ef:25:7d:e5:17:51:b2:ee:f5:
                    17:2e:6c:5d:63:ec:a9:8d:c1:3a:e5:40:9f:f9:90:
                    c4:a8:36:49:f0:6d:d6:1f:f7:1e:77:70:ff:1a:79:
                    a1:8c:0b:4e:3a:a5:2e:d6:61:06:6e:6d:a8:83:94:
                    bb:51:89:f2:f6:af:f1:d3:6c:1e:4f:d8:d3:70:0f:
                    00:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4D:E7:25:E0:57:FF:4E:61:26:AD:61:44:EE:15:49:D9:4E:9C:0F
            X509v3 Authority Key Identifier:
                keyid:37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:50:86:33:05:a8:8d:53:a2:92:e4:17:e8:d6:16:26:51:43:
         46:09:b0:5b:cb:02:fb:b0:32:6f:c5:70:5c:eb:a9:54:a7:e0:
         ed:9e:ce:a3:58:12:39:7b:5c:bb:b0:37:70:9c:87:32:43:51:
         fd:96:24:ee:02:c6:a8:64:92:05:8f:2c:e9:03:07:9a:ac:e5:
         1e:7d:5a:c0:e7:86:f4:2b:bb:e7:f6:f7:e2:8b:f9:67:85:09:
         a7:cf:bf:78:01:84:5a:6d:bf:94:c6:eb:12:ff:56:8e:ea:8b:
         44:aa:45:5a:a1:90:de:01:a3:d9:32:44:84:6d:a2:89:85:cc:
         f9:c6:96:9c:a1:85:7d:42:99:6b:70:bd:5a:c1:45:48:ee:ff:
         bc:f8:30:ad:2f:ce:d1:5d:41:77:d1:b9:5b:c2:1a:47:53:c0:
         c1:c7:30:64:6f:e8:c4:6f:d3:48:5b:1a:24:2d:4a:99:25:b4:
         f9:bc:af:63:9e:e4:e0:af:93:de:75:72:66:0f:e6:03:4b:e2:
         76:ff:d7:b6:20:3a:0f:88:e7:e8:00:bb:32:9c:99:81:bb:18:
         b8:1e:14:68:55:31:cc:d0:07:75:7d:10:71:c8:d4:bc:a8:e1:
         0b:a3:96:9a:22:46:89:3c:7b:48:6a:4a:b8:1a:ac:fc:91:b1:
         a3:82:4a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:55:32 2025 by rpki-client