Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
File:                     NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft (raw, json)
Hash identifier:          3wdG9PVCxx6n+YOxzBDNqNUsemdtwk48oHYqkXt6A24=
Subject key identifier:   EC:D6:F4:49:8F:B4:29:0F:06:27:B3:05:BC:F2:39:9C:9B:53:53:92
Authority key identifier: 34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06
Certificate issuer:       /CN=A9153646/serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
Certificate serial:       076B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
Manifest number:          0CB5
Signing time:             Sun 10 Aug 2025 18:15:06 +0000
Manifest this update:     Sun 10 Aug 2025 18:15:06 +0000
Manifest next update:     Sun 17 Aug 2025 18:15:06 +0000
Files and hashes:         1: NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl (hash: o33kFFSeNiXzcDcsBCC+j4VUzzRcqhyVN5ksMIYUSxo=)
                          2: 0C77B118353C11EFB0FA2527C4F9AE02.roa (hash: TNeim+c/SqFpRd1l3QdyFDanyKYRvKOEj0vZ8enHI5M=)
                          3: 27B9D8CE5A4911F096BE7C32C4F9AE02.roa (hash: nXEceLRdjptD3hMuu1Rrn7X5bxhPTnP5MRplqc2Qdl4=)
                          4: 9E1A4B86526511EE869BEC82C4F9AE02.roa (hash: lOrA6k7sYmhjZNB1ZlbvSFLY4z9Dna+Fs7CLS+wxvaQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl
                          rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1899 (0x76b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153646, serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
        Validity
            Not Before: Aug 10 18:15:06 2025 GMT
            Not After : Aug 17 18:15:06 2025 GMT
        Subject: CN=6898e1aa-76cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4e:a4:6b:5f:a9:d3:9d:7b:92:1d:e1:14:69:
                    3c:2e:2b:02:cb:75:e1:4f:dc:35:a3:d7:7a:fa:a8:
                    f8:24:5e:f8:76:21:9f:b2:92:59:68:c0:56:8f:0c:
                    57:51:27:9e:42:c9:10:c4:42:1a:d2:5e:e3:f9:a0:
                    63:cf:ce:d0:01:f3:3b:d5:fb:db:b4:17:eb:38:35:
                    ce:0b:6e:aa:53:6e:d8:57:51:b2:e0:f5:03:84:71:
                    fd:92:b1:03:55:7b:a5:4e:70:ac:56:15:59:e1:85:
                    6b:72:fd:f4:37:1a:8e:cc:eb:6f:1f:68:43:f6:09:
                    e2:e4:3f:ff:39:b2:87:6b:5d:40:35:0b:f6:2a:5a:
                    d2:26:fb:4e:09:ea:c0:35:e4:7c:a2:03:5d:d7:5c:
                    2b:20:78:07:f9:a5:56:2e:60:7f:da:3d:5e:a3:95:
                    22:64:3c:24:8b:f1:4a:27:c7:6d:5e:1e:b2:7f:aa:
                    a5:18:0e:b2:61:53:9f:4c:8b:dd:f1:be:dd:ab:70:
                    7f:cb:76:4d:7b:93:0b:a6:ba:d0:c7:47:35:30:b8:
                    12:bb:d6:a3:49:fe:04:a1:e5:3e:d0:91:57:f9:92:
                    61:02:70:9b:61:78:c2:bd:24:9e:98:c7:aa:fd:c1:
                    da:df:bf:99:86:c3:ac:44:d1:b4:68:17:5a:0d:cd:
                    21:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D6:F4:49:8F:B4:29:0F:06:27:B3:05:BC:F2:39:9C:9B:53:53:92
            X509v3 Authority Key Identifier:
                keyid:34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:d2:2d:ce:18:7a:1c:53:d6:b0:ef:b5:6b:0c:c7:1b:80:0c:
         87:60:b9:25:23:61:91:d2:bc:2e:3f:68:1a:dc:4b:40:bb:7d:
         45:48:14:7c:8d:fb:0b:fd:f9:4b:48:bd:63:d3:40:12:f5:8e:
         43:f5:08:56:29:07:3e:0f:f2:2a:40:87:db:0f:96:a2:5e:b4:
         42:e7:4e:10:94:63:f8:14:cc:ee:80:d3:a6:ca:ee:d6:ba:50:
         4a:30:c2:9b:3b:61:1b:cd:f8:c8:51:95:07:c1:76:a3:01:19:
         d1:4d:6d:9d:76:74:36:97:ea:bf:bd:05:4f:c5:a3:7d:d1:ce:
         95:ee:ae:00:05:c8:37:5d:af:47:96:07:7b:f5:b7:bd:87:e9:
         79:24:85:fd:54:63:8b:b5:c4:c5:2b:b0:d5:43:e2:32:ca:73:
         0d:da:89:23:f9:99:d5:4e:b0:ea:63:54:bc:e9:59:55:4f:32:
         08:27:cf:89:b8:c4:2c:91:c6:03:17:91:75:67:83:d6:dc:39:
         0b:14:57:3d:ee:be:c8:50:a7:b3:96:2c:6d:f0:f8:bc:de:e8:
         76:91:16:db:fd:19:dc:25:a7:a9:2b:15:b1:62:b0:8b:4a:c6:
         4b:bb:8b:0f:d8:0c:20:e9:b1:e6:40:00:16:5e:39:40:81:83:
         51:ab:a7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:45:24 2025 by rpki-client