Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
File:                     0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft (raw, json)
Hash identifier:          AWYPfMulAXY9PjXQ39HLs5wG4e5X61hmycR85Tqso8w=
Subject key identifier:   D3:45:EC:61:2D:E6:04:33:1D:6D:8D:8D:D2:9C:2F:C5:28:65:C1:41
Authority key identifier: D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD
Certificate issuer:       /CN=A9122219/serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD
Certificate serial:       0B59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
Manifest number:          0B4F
Signing time:             Fri 08 Aug 2025 19:22:44 +0000
Manifest this update:     Fri 08 Aug 2025 19:22:44 +0000
Manifest next update:     Fri 15 Aug 2025 19:22:44 +0000
Files and hashes:         1: 0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl (hash: H8RwG2Ul3E5yVU08jJDqVSg+nMqfR/K/+dY4WM2MXKI=)
                          2: CD145D246E4E11EDBE02B065C4F9AE02.roa (hash: HQ+n/zvxBXsyHktY7VZtlLogGsEgUPieMT07w6OWlaY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl
                          rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2905 (0xb59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122219, serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD
        Validity
            Not Before: Aug  8 19:22:44 2025 GMT
            Not After : Aug 15 19:22:44 2025 GMT
        Subject: CN=68964e84-3f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:09:e2:b4:0b:8d:56:7d:e2:b3:a4:22:78:8e:
                    57:f8:ae:e3:8e:30:ee:50:6f:19:d8:73:d1:49:4a:
                    eb:e7:7e:23:e6:98:c7:01:4a:81:37:f1:a6:b8:51:
                    3e:6d:87:5f:3f:47:e2:0d:89:97:36:99:89:4b:42:
                    dd:f0:63:8c:d2:42:82:38:da:14:b2:98:26:85:36:
                    12:b3:be:bb:0e:f4:eb:29:d0:ca:5a:53:02:e9:b8:
                    90:41:78:73:c0:77:ab:57:96:ae:fb:8b:b7:f8:a0:
                    30:3d:9c:9d:dd:be:2c:86:fa:dc:93:58:f4:d8:0b:
                    46:49:4a:f4:e9:be:e6:b7:67:81:29:da:60:10:96:
                    21:19:c1:79:67:39:a6:ae:25:df:ee:57:a2:c3:b7:
                    0e:9b:60:2c:1f:ac:11:c3:d8:cc:1d:56:dd:ef:9c:
                    20:87:75:a6:00:14:5e:d6:84:19:6e:ec:66:ef:29:
                    ea:b6:34:3f:8f:7a:02:bc:82:48:4e:f1:de:6a:ac:
                    c8:5e:b5:35:24:3e:a9:1a:62:c6:31:c4:90:cd:d8:
                    ca:9f:d2:0e:04:34:d1:f2:25:d0:37:e2:aa:70:84:
                    fd:53:aa:66:63:32:be:c6:df:d8:9a:d9:4b:5b:20:
                    fe:ec:7b:24:ac:f7:3c:d3:dc:5d:80:16:19:7d:74:
                    5e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:45:EC:61:2D:E6:04:33:1D:6D:8D:8D:D2:9C:2F:C5:28:65:C1:41
            X509v3 Authority Key Identifier:
                keyid:D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:b1:e2:c3:cc:0e:a3:76:fb:69:84:e4:57:af:ba:ff:40:83:
         4c:df:a8:e4:dd:7e:d4:2b:00:cd:be:97:b4:bd:f8:81:d9:e3:
         6f:c7:a4:c8:59:53:83:24:4e:cf:b1:ec:c7:45:ae:b0:44:f8:
         c9:cb:2a:55:7e:be:b6:ff:22:95:ef:3e:bd:ba:48:47:f8:24:
         e8:31:2e:98:54:98:1e:83:d8:e0:6b:9e:e5:5f:bb:2a:aa:65:
         12:33:30:b6:ae:93:78:3b:3b:fa:4a:fd:59:f0:87:9a:13:2c:
         e4:87:d7:81:cf:c4:49:5d:45:20:0e:a6:84:0a:8a:ad:10:87:
         cb:6f:10:33:23:11:72:88:4b:52:8c:9a:f3:91:02:b1:15:2c:
         4b:ed:67:19:88:b9:8c:19:97:10:db:96:ed:c3:ec:41:58:00:
         16:e1:59:5f:04:5a:15:26:e6:e0:ea:cf:bf:26:81:19:3e:7e:
         4d:99:f1:71:34:cc:c9:54:31:c2:b0:63:a7:65:19:ca:8d:b1:
         10:91:a8:42:54:fa:62:7c:e3:97:13:95:e0:73:0f:d5:79:a3:
         63:b2:00:6d:ec:de:2b:cf:43:08:c0:2e:5a:25:ef:54:63:e8:
         5c:0f:05:9b:9a:ae:92:b4:a4:9f:ed:9a:ea:5b:eb:eb:7b:16:
         23:bb:4d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:39:07 2025 by rpki-client