Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
File:                     Ngra_oYcSDq21UqjQPuE0kur8hs.mft (raw, json)
Hash identifier:          cgL5L08zF3OTKqptH4oCFpwTpZ35Hlumxu3W40Va584=
Subject key identifier:   38:D6:97:44:4C:D8:46:7A:79:34:70:47:CB:B8:B2:C6:A9:7B:80:B3
Authority key identifier: 36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B
Certificate issuer:       /CN=A914E4C3/serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B
Certificate serial:       2762
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
Manifest number:          2762
Signing time:             Sun 10 Aug 2025 15:35:48 +0000
Manifest this update:     Sun 10 Aug 2025 15:35:47 +0000
Manifest next update:     Sun 17 Aug 2025 15:35:47 +0000
Files and hashes:         1: Ngra_oYcSDq21UqjQPuE0kur8hs.crl (hash: TOLJB4mEqeNNOqVw2m9gTPHI78XBfS2vO6DYdjv+594=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl
                          rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10082 (0x2762)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E4C3, serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B
        Validity
            Not Before: Aug 10 15:35:47 2025 GMT
            Not After : Aug 17 15:35:47 2025 GMT
        Subject: CN=6898bc54-f147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cc:0b:e5:53:7a:5f:cd:ee:09:1b:62:ed:d0:
                    f2:4f:b8:4d:e0:e9:62:8d:d7:50:f7:d7:40:4a:89:
                    00:bc:de:f1:4a:0b:67:ea:f3:31:9c:5a:86:30:44:
                    a0:32:c6:aa:e9:3c:c2:69:46:f5:32:ad:b2:85:74:
                    62:41:58:d9:2a:11:fc:bf:a1:fc:31:24:0d:2f:84:
                    4c:9a:e4:52:d8:5e:f1:eb:7d:c3:4d:4f:4c:7f:b4:
                    c7:73:49:e4:ab:c3:06:f2:82:81:b9:3e:86:43:27:
                    21:bf:21:d2:28:e0:af:68:17:e4:73:9e:2b:2c:e3:
                    b2:c9:b6:d6:a9:31:ff:f8:90:47:1b:d2:02:42:23:
                    a3:ed:99:cf:85:71:ad:80:a6:77:8c:28:38:5c:85:
                    66:87:13:6c:ad:23:cb:8d:1e:e1:26:06:4c:96:81:
                    07:f1:e2:79:d4:9f:36:f4:4c:24:66:27:d5:0d:b7:
                    9e:27:1e:e4:5d:f4:47:e4:0a:9c:e6:5f:b8:a0:9a:
                    61:42:35:58:6a:c6:ad:71:07:48:4d:75:0b:ee:ab:
                    f8:fa:de:e5:9a:72:0a:2f:68:b7:ee:3f:38:4e:1a:
                    ac:6a:4a:4b:51:a4:2e:d3:b3:75:04:34:37:26:2f:
                    f0:46:f4:89:2e:e1:98:28:18:98:16:ea:90:cf:e2:
                    9a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D6:97:44:4C:D8:46:7A:79:34:70:47:CB:B8:B2:C6:A9:7B:80:B3
            X509v3 Authority Key Identifier:
                keyid:36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:3f:23:fa:91:34:cd:e9:18:77:53:6d:c5:2f:80:d3:30:73:
         f4:85:d6:dc:64:91:6a:1c:81:d5:78:a6:32:61:4d:68:cc:6e:
         7b:fe:b3:75:63:a0:0a:ad:d5:73:70:be:e8:7f:14:42:a1:7d:
         45:ba:03:f6:bd:c2:50:04:76:e2:4f:f0:24:7e:f3:97:97:c8:
         37:26:26:d1:33:a5:9a:71:21:40:22:ff:7d:81:7f:3b:53:a1:
         73:7e:94:dc:45:5e:02:88:aa:e8:0e:ac:bb:86:7a:3a:d2:65:
         e3:66:84:9b:43:77:54:dc:f7:95:fd:3b:3e:9c:11:92:4e:fe:
         d8:e5:2d:63:db:d9:df:d7:28:67:c3:78:b1:c9:41:90:fd:af:
         b3:c7:74:54:07:9e:c3:f3:51:0a:55:13:62:67:39:9d:a3:85:
         72:c0:99:cb:e7:51:66:7d:3a:3c:35:fc:29:c7:bc:72:a3:34:
         33:d4:97:72:6c:52:cc:cb:d6:4d:b3:eb:57:49:bd:04:5b:4d:
         b9:ef:91:46:96:36:1c:d5:47:f8:27:1a:bc:01:ad:57:eb:9b:
         1c:36:66:8c:e5:f3:fe:ce:0f:8f:0e:25:74:15:c4:e1:30:51:
         cb:7f:ee:b8:5f:61:34:e2:3a:54:e3:d5:b8:4a:1f:0d:8d:de:
         4b:5f:fd:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJ2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU0QzMxMTAvBgNVBAUTKDM2MEFEQUZFODYxQzQ4M0FCNkQ1NEFBMzQwRkI4NEQy
NEJBQkYyMUIwHhcNMjUwODEwMTUzNTQ3WhcNMjUwODE3MTUzNTQ3WjAYMRYwFAYD
VQQDEw02ODk4YmM1NC1mMTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr8wL5VN6X83uCRti7dDyT7hN4OlijddQ99dASokAvN7xSgtn6vMxnFqGMESg
Msaq6TzCaUb1Mq2yhXRiQVjZKhH8v6H8MSQNL4RMmuRS2F7x633DTU9Mf7THc0nk
q8MG8oKBuT6GQychvyHSKOCvaBfkc54rLOOyybbWqTH/+JBHG9ICQiOj7ZnPhXGt
gKZ3jCg4XIVmhxNsrSPLjR7hJgZMloEH8eJ51J829EwkZifVDbeeJx7kXfRH5Aqc
5l+4oJphQjVYasatcQdITXUL7qv4+t7lmnIKL2i37j84ThqsakpLUaQu07N1BDQ3
Ji/wRvSJLuGYKBiYFuqQz+Ka+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjWl0RM
2EZ6eTRwR8u4ssape4CzMB8GA1UdIwQYMBaAFDYK2v6GHEg6ttVKo0D7hNJLq/Ib
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTRDMy8xOEVEMzgyOEI4
QjkxMUU0OTAxQTY4NDhDNEY5QUUwMi9OZ3JhX29ZY1NEcTIxVXFqUVB1RTBrdXI4
aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL05ncmFfb1ljU0RxMjFVcWpRUHVFMGt1cjhocy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTRDMy8xOEVEMzgyOEI4QjkxMUU0OTAxQTY4NDhDNEY5QUUwMi9OZ3JhX29ZY1NE
cTIxVXFqUVB1RTBrdXI4aHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBxPyP6kTTN6Rh3U23FL4DTMHP0hdbcZJFqHIHVeKYyYU1ozG57/rN1
Y6AKrdVzcL7ofxRCoX1FugP2vcJQBHbiT/AkfvOXl8g3JibRM6WacSFAIv99gX87
U6FzfpTcRV4CiKroDqy7hno60mXjZoSbQ3dU3PeV/Ts+nBGSTv7Y5S1j29nf1yhn
w3ixyUGQ/a+zx3RUB57D81EKVRNiZzmdo4VywJnL51FmfTo8Nfwpx7xyozQz1Jdy
bFLMy9ZNs+tXSb0EW02575FGljYc1Uf4Jxq8Aa1X65scNmaM5fP+zg+PDiV0FcTh
MFHLf+64X2E04jpU49W4Sh8Njd5LX/3P
-----END CERTIFICATE-----
Generated at Mon Aug 11 01:52:43 2025 by rpki-client