Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
File:                     nPapYQAMl2lHu76x0XPCPpCflUQ.mft (raw, json)
Hash identifier:          lphExshJuRA9ufQvSDF3L2/aJVr6QVaOculESHz9J9w=
Subject key identifier:   ED:16:34:76:73:72:8C:E4:58:53:89:F0:E3:71:C8:92:3F:37:93:C5
Authority key identifier: 9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44
Certificate issuer:       /CN=A912FA65/serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544
Certificate serial:       06D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
Manifest number:          06CD
Signing time:             Fri 08 Aug 2025 22:28:20 +0000
Manifest this update:     Fri 08 Aug 2025 22:28:19 +0000
Manifest next update:     Fri 15 Aug 2025 22:28:19 +0000
Files and hashes:         1: nPapYQAMl2lHu76x0XPCPpCflUQ.crl (hash: WIDk4L1f/KuSWChDzsIoPy+9/Qr92lRrjEkU/b5mIHA=)
                          2: E14DB058662411EBADFEB364C4F9AE02.roa (hash: AGJnIVMVxGCqhPBai/J+rGCznBK2uUe21t16AbPm6pM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl
                          rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1746 (0x6d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FA65, serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544
        Validity
            Not Before: Aug  8 22:28:19 2025 GMT
            Not After : Aug 15 22:28:19 2025 GMT
        Subject: CN=68967a04-1bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:aa:ec:f5:d0:4a:88:7e:eb:cd:e4:f6:36:be:
                    00:e7:f9:ac:d1:16:ce:88:f8:ea:91:36:d9:6e:e6:
                    a1:ef:e5:93:97:1c:ef:93:be:80:06:ce:52:49:a0:
                    63:2d:61:d2:15:2a:ea:d4:be:ca:7e:9a:19:6f:f5:
                    05:0b:b4:ac:a4:23:6b:51:f3:f4:c5:8a:88:1d:04:
                    55:68:66:80:e3:6c:f4:9a:18:86:5d:01:1c:79:ca:
                    91:11:6a:fc:a9:19:54:d3:98:ed:c9:b4:21:ad:e2:
                    a6:8b:e6:54:fb:dc:14:31:ef:af:bc:5c:73:d6:f4:
                    25:bb:45:9e:aa:7d:39:83:05:0f:6e:88:10:d0:71:
                    3e:aa:b8:1a:67:03:bb:94:55:6a:73:8e:23:22:e8:
                    bb:54:23:8a:d3:6b:7b:8e:45:3b:0a:d5:74:1d:02:
                    c3:7c:dd:c4:b5:27:29:2a:ee:f1:0e:c4:35:35:ad:
                    e2:8f:82:f4:d3:64:df:19:38:6a:b8:5d:46:d4:16:
                    dd:be:4b:8d:8b:7c:92:14:c3:3d:01:cb:46:3f:7d:
                    80:5d:b8:a5:65:eb:2a:b3:5e:b3:f6:19:e3:38:cc:
                    8c:36:d4:47:38:23:cb:4f:37:a8:36:e4:cb:60:cf:
                    d1:37:89:06:de:2e:e2:5d:87:d3:f3:4b:c0:5d:da:
                    2d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:16:34:76:73:72:8C:E4:58:53:89:F0:E3:71:C8:92:3F:37:93:C5
            X509v3 Authority Key Identifier:
                keyid:9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:aa:94:4c:1a:76:b3:52:f5:fb:fe:d0:87:9b:06:4a:25:59:
         b4:f9:7e:79:29:89:ec:69:32:e9:e6:2d:97:61:28:3f:f5:c5:
         6f:2c:ca:02:3b:a8:f4:17:d2:0e:52:fc:d0:5b:39:03:90:9c:
         a9:cb:70:86:cd:97:6c:2d:90:f5:22:fa:c8:6e:0c:37:bf:51:
         3a:86:3e:c9:86:73:55:3d:28:6d:8e:00:a9:05:16:be:ca:61:
         be:84:75:db:37:5a:12:2f:65:47:96:9d:4b:79:10:a9:50:34:
         51:96:a4:49:b2:4d:75:a9:6a:ce:66:11:d3:26:f0:3f:6a:78:
         4a:c5:13:ab:c1:52:e3:5e:71:54:52:89:78:b8:8c:a0:ad:20:
         75:74:5e:df:a1:61:2f:c3:b8:0a:72:92:5b:51:6f:1d:dd:84:
         68:69:28:6d:aa:74:d4:64:00:95:7f:db:6d:6b:7f:41:cc:36:
         98:49:4e:d5:61:f5:50:fd:5c:39:e4:e7:4d:c1:dc:1a:92:d3:
         ff:ff:c9:f2:55:df:90:49:9b:36:7c:19:09:dd:1b:d7:53:e6:
         2e:89:34:39:2b:89:77:cb:03:59:9b:42:f5:bf:1a:ec:be:cf:
         c1:b2:77:84:c4:1b:85:18:21:57:10:2f:9b:34:47:16:ea:95:
         7b:4b:c4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:01:44 2025 by rpki-client