Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
File:                     NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft (raw, json)
Hash identifier:          w1NT4KVp+uR3NICuTXmHS26aTc0CnzsVWn7LoEWGyAU=
Subject key identifier:   5C:63:D7:12:02:06:3F:61:C8:57:68:22:36:EC:3A:AF:5F:9A:FA:F7
Authority key identifier: 35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77
Certificate issuer:       /CN=A916714C/serialNumber=353E48875376C6DB97E3426365CC7F18C9456877
Certificate serial:       059F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
Manifest number:          0599
Signing time:             Fri 08 Aug 2025 23:39:56 +0000
Manifest this update:     Fri 08 Aug 2025 23:39:55 +0000
Manifest next update:     Fri 15 Aug 2025 23:39:55 +0000
Files and hashes:         1: NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl (hash: HkXJoAjMYCx4+Cq06Z4fGD4CsoZirKpcDdRN/2uZ9aE=)
                          2: E50353FEDFED11EBA155C712C4F9AE02.roa (hash: IIVlt7G/+5szlJKKwOxccwy55c5N2K1rqxgqpnj4uFE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl
                          rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1439 (0x59f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916714C, serialNumber=353E48875376C6DB97E3426365CC7F18C9456877
        Validity
            Not Before: Aug  8 23:39:55 2025 GMT
            Not After : Aug 15 23:39:55 2025 GMT
        Subject: CN=68968acb-6262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4a:ed:7d:f7:67:3e:1b:d6:f3:9a:02:d5:7d:
                    f7:18:15:d8:2e:de:f4:f5:69:50:ec:41:72:55:a8:
                    aa:4d:a3:ad:1b:c9:8f:5b:c9:3d:61:31:7d:f1:98:
                    62:80:bf:2a:2d:32:8d:08:72:df:d2:59:e7:12:50:
                    be:a1:f8:e3:06:60:c9:11:13:e0:88:85:4e:c7:63:
                    ed:fc:2d:3b:d9:5b:ca:bb:c1:0c:aa:27:61:2e:26:
                    4d:14:8d:91:c9:8e:30:97:45:50:17:ad:a2:d3:26:
                    f0:0a:b7:67:1b:e2:fd:4e:52:da:8f:9d:65:83:1b:
                    6a:d0:19:dd:c3:81:a5:8a:1a:98:a7:bd:2c:bb:7a:
                    c0:69:94:e4:9f:31:6e:9f:f2:9a:de:ae:1f:c0:de:
                    9a:f6:38:74:4c:5e:22:f5:9b:5a:96:6a:3f:54:df:
                    7d:fd:1b:eb:e2:da:00:06:45:87:cb:9f:a2:15:f1:
                    be:64:5e:f8:89:90:78:f5:fe:66:99:ac:43:f2:90:
                    4c:56:b7:1a:d9:2d:54:7f:d4:a4:b2:32:9f:0b:46:
                    81:bd:c9:1b:a0:8e:6a:56:f6:ca:13:27:6e:18:fb:
                    33:f6:da:6b:68:10:84:37:72:ac:f8:8d:da:c4:a5:
                    4b:2d:f6:91:2c:f0:7e:a0:72:72:10:15:f9:59:90:
                    28:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:63:D7:12:02:06:3F:61:C8:57:68:22:36:EC:3A:AF:5F:9A:FA:F7
            X509v3 Authority Key Identifier:
                keyid:35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:bd:3c:f4:15:c1:4e:b7:d7:dc:04:37:0f:bc:a3:35:2c:f1:
         09:ac:bd:c6:d6:9f:91:bd:2a:d5:36:46:63:71:47:2b:65:f1:
         bc:9b:1e:47:e6:41:6a:43:f0:e2:41:e9:f1:9e:10:f3:9d:c8:
         4e:63:b1:85:e7:68:27:90:fe:71:97:f8:ae:1a:4c:dc:dd:fa:
         9d:a2:77:44:1a:d3:fb:96:66:73:30:d3:4b:4c:0e:66:aa:8e:
         44:67:38:1d:56:b7:ba:d9:76:75:29:e4:ae:7c:b4:d6:fd:ed:
         02:a7:26:b7:8b:78:b7:85:c6:d2:d2:01:05:55:ee:71:6d:12:
         3d:3b:c6:ea:bd:c9:3a:1c:bd:99:8b:9e:60:96:45:14:b7:37:
         a0:c8:c4:fd:bd:37:d1:de:a3:40:a4:2c:41:91:35:2c:e1:b3:
         a8:72:86:e1:67:f1:ee:59:36:99:9b:d3:8e:b9:df:66:e3:38:
         56:d6:cf:33:22:fe:f6:ba:71:e8:ce:c0:7a:ce:71:01:fe:b7:
         ef:a3:bd:85:2a:cc:73:2e:a3:d0:16:d7:4a:2e:f6:81:76:74:
         51:43:49:cf:40:c8:b0:4e:60:84:b0:de:81:3e:63:cf:fc:2c:
         3a:18:ad:37:b2:ea:11:24:c3:99:11:83:30:4d:20:24:e7:85:
         0d:3d:b9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:51:59 2025 by rpki-client