Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
File:                     nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft (raw, json)
Hash identifier:          DJyqenpQccKufoiOW+DpuSI09lwE/0Q/ir2TiyMvPok=
Subject key identifier:   24:5E:EA:F6:86:C9:43:27:FD:46:93:CC:9B:DA:12:72:17:7A:84:A2
Authority key identifier: 9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56
Certificate issuer:       /CN=A9131579/serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756
Certificate serial:       0C29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
Manifest number:          0C1B
Signing time:             Sun 10 Aug 2025 18:42:59 +0000
Manifest this update:     Sun 10 Aug 2025 18:42:59 +0000
Manifest next update:     Sun 17 Aug 2025 18:42:59 +0000
Files and hashes:         1: nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl (hash: jgrSn1xzONPxdUds1koJWVA30jlb8bHeW39WvqgrHdY=)
                          2: 7E565BCC02EB11F084618D33C4F9AE02.roa (hash: AZHVgAf1kSXl8BI/BQ5H295EutsYIoNTNb8l2dBtz+M=)
                          3: 702B683202E911F097290F2EC4F9AE02.roa (hash: K+XoaDEFz5EZQGsqk/BrrsJpJvi+KU83oJ9JVUv/YSY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl
                          rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3113 (0xc29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131579, serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756
        Validity
            Not Before: Aug 10 18:42:59 2025 GMT
            Not After : Aug 17 18:42:59 2025 GMT
        Subject: CN=6898e833-8db7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3c:8d:3c:ed:a1:6f:f0:02:65:ba:14:53:66:
                    65:44:bf:0d:10:32:8d:6b:77:45:7b:bf:0d:5b:72:
                    62:ac:53:f1:b8:89:e2:40:c3:bf:cd:d6:82:56:c9:
                    45:5c:38:64:c8:a8:33:71:45:b9:f2:57:1b:04:fe:
                    04:36:53:9b:29:7c:8c:d7:09:c8:e5:1d:3f:7b:aa:
                    74:d8:45:51:5a:c9:55:33:ac:5e:bd:7d:fe:98:1e:
                    72:b7:3f:95:1b:81:6c:56:fd:9d:e0:66:f7:fe:54:
                    e6:d0:a6:ba:18:bb:b3:cd:ff:9a:03:d0:fd:93:1c:
                    69:3c:53:4f:a1:d4:8c:67:e0:87:7c:37:e3:95:b3:
                    04:12:73:72:c8:57:85:80:bd:c3:2a:3a:68:10:98:
                    72:13:29:17:73:01:b5:5f:c4:63:81:4e:45:ce:0b:
                    f7:32:62:5b:74:7b:bf:d4:ed:cc:d0:77:06:17:cc:
                    a3:88:20:33:d3:ad:87:3a:88:31:7b:ec:11:8b:4e:
                    5f:ec:79:bb:48:51:e8:0c:1a:ea:f2:ee:27:3e:78:
                    42:cd:cc:b4:dc:c7:70:3f:8e:15:70:a8:2a:05:15:
                    52:7a:c5:6d:75:43:a9:c1:0e:f6:bb:b4:f3:d4:21:
                    33:65:f5:81:3a:f4:a5:13:90:f8:39:61:88:cd:8f:
                    f2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5E:EA:F6:86:C9:43:27:FD:46:93:CC:9B:DA:12:72:17:7A:84:A2
            X509v3 Authority Key Identifier:
                keyid:9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a6:35:79:13:62:71:8d:60:b6:30:3e:91:4c:c1:f3:0b:31:
         bf:96:68:b3:26:8a:da:35:0f:a5:da:64:da:89:2b:de:57:fc:
         e5:97:20:2a:38:3c:3c:7a:7a:85:fa:99:55:a4:2c:9b:a6:f1:
         fb:14:83:fb:15:49:a6:1c:cc:f7:42:e9:f7:01:0a:f1:69:66:
         9e:7e:21:a2:c2:3c:5d:0f:dc:47:7d:d3:25:1f:3e:f4:d0:c8:
         88:ab:19:93:ca:bf:7a:e1:ee:b5:63:03:6e:df:24:7c:59:07:
         54:26:00:f1:93:9b:d4:1c:3c:cd:af:08:35:3d:bf:1d:09:53:
         56:50:d7:c8:e9:bd:af:93:74:1d:3a:d8:b8:46:d9:78:18:9d:
         f3:3b:cd:2c:57:be:3a:07:ed:08:42:e5:2e:8d:1f:78:5f:b2:
         34:85:e2:43:69:fe:4f:20:6b:b5:c2:4f:6d:59:4a:55:3a:25:
         8b:af:56:62:46:ef:42:cd:ad:55:38:e7:fa:88:a6:8c:ca:37:
         15:56:4b:69:d2:7d:11:e2:bb:1a:9d:7e:e7:08:7c:8c:4d:0f:
         fd:0c:50:3c:e9:d6:83:18:e9:bc:a4:51:01:82:89:11:c5:bc:
         4f:c8:79:76:d8:23:9b:50:9a:c4:c4:32:d8:bc:49:a3:5b:a7:
         ff:65:7a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:39:26 2025 by rpki-client