Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
File:                     nplO914RM-YPAbmkigkmGVL7G4E.mft (raw, json)
Hash identifier:          RFTRB4EcjbDQATUk+SrTeEuA58O0jXPXp1yAJCw33Pk=
Subject key identifier:   C4:24:AC:4A:7A:DD:11:E7:D3:79:86:20:5A:80:8D:7F:08:C5:E2:45
Authority key identifier: 9E:99:4E:F7:5E:11:33:E6:0F:01:B9:A4:8A:09:26:19:52:FB:1B:81
Certificate issuer:       /CN=A9172154/serialNumber=9E994EF75E1133E60F01B9A48A09261952FB1B81
Certificate serial:       09D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
Manifest number:          09CF
Signing time:             Thu 12 Jun 2025 19:43:36 +0000
Manifest this update:     Thu 12 Jun 2025 19:43:36 +0000
Manifest next update:     Thu 19 Jun 2025 19:43:36 +0000
Files and hashes:         1: nplO914RM-YPAbmkigkmGVL7G4E.crl (hash: kEBRdYow2DOl/zNC2Rio4It+Jej/ZANl3frBg5yOSCA=)
                          2: 95A08652730D11ECAB074439C4F9AE02.roa (hash: 8SZ9w1bXpjgmgqCHhkJA4hqFkmJXaJwJe1y4R5qoWpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.crl
                          rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 19:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2518 (0x9d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172154, serialNumber=9E994EF75E1133E60F01B9A48A09261952FB1B81
        Validity
            Not Before: Jun 12 19:43:36 2025 GMT
            Not After : Jun 19 19:43:36 2025 GMT
        Subject: CN=684b2de8-362a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:63:b5:3c:e4:a5:7e:47:4e:aa:8a:68:8b:f8:
                    34:e7:4e:5e:fa:b6:e7:76:5f:62:6c:c7:b5:c7:28:
                    f9:c6:e1:04:3b:b5:24:96:d5:07:af:0b:89:e0:c1:
                    dd:44:ce:2c:0e:65:10:b2:16:fa:dc:e4:31:c3:50:
                    8d:12:1b:52:ef:7e:1e:8c:98:ff:c4:31:be:24:bb:
                    bf:73:c2:97:64:24:e3:b5:2e:18:73:43:96:85:31:
                    1e:8a:46:b0:ba:39:8b:57:19:4a:44:5c:b4:e1:b7:
                    16:42:81:78:31:ad:5d:dd:92:20:70:fe:c4:d4:d2:
                    d6:f8:a2:53:97:4c:42:78:8b:ca:93:be:eb:bd:58:
                    7c:63:59:2b:ef:29:1b:24:82:85:ec:ba:94:d9:c7:
                    50:0c:fc:70:09:35:31:4b:d2:16:7d:03:f6:e3:4d:
                    bd:fc:01:9a:22:7e:a6:5f:5f:b1:f9:53:16:07:0f:
                    43:03:3c:de:a2:3c:5c:28:71:18:3d:84:43:6a:76:
                    74:86:c5:f2:b8:93:bb:a1:80:2a:f4:93:7a:bf:c9:
                    d5:37:81:6f:f8:4b:7b:d1:74:82:07:2d:a2:bb:88:
                    98:98:27:33:3f:36:ca:11:8d:c0:30:c4:0f:96:ea:
                    0e:f3:8a:3c:75:b7:67:17:70:68:1a:2a:f8:6e:ce:
                    0d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:24:AC:4A:7A:DD:11:E7:D3:79:86:20:5A:80:8D:7F:08:C5:E2:45
            X509v3 Authority Key Identifier:
                keyid:9E:99:4E:F7:5E:11:33:E6:0F:01:B9:A4:8A:09:26:19:52:FB:1B:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:f6:96:a9:57:d1:6e:13:bc:4c:d0:08:95:71:ae:14:ee:41:
         a4:5d:82:c0:50:f7:ff:81:94:88:be:fb:7f:11:ba:75:63:eb:
         0e:33:66:55:45:b2:73:27:07:1a:cf:44:1c:1e:02:28:da:ed:
         49:6c:f9:bb:f0:2d:a3:06:2a:95:bc:47:11:60:35:c3:0d:cd:
         dd:23:e1:47:be:a3:c8:ad:00:a2:0d:18:51:2b:c8:52:7c:49:
         d2:a0:04:5c:c3:0f:54:96:70:22:1d:3c:f6:1c:2c:06:db:93:
         a9:37:1a:55:e0:c9:51:ad:44:70:57:e0:1b:b0:e3:16:92:da:
         21:dd:23:75:f6:c5:ea:4a:32:87:d9:45:de:2d:73:b7:e5:8b:
         07:24:8a:cc:85:36:ac:e4:18:dc:21:c9:6a:61:3d:d1:07:81:
         32:4d:9a:7a:1f:2f:2f:a1:c0:9a:5e:76:2a:64:fe:09:82:e8:
         ee:b3:6f:2c:9e:db:ba:a2:07:67:8a:3f:43:ec:05:1e:dc:61:
         9d:69:e2:3e:ed:af:ab:7c:e1:ab:97:c1:eb:10:d6:9c:0b:b3:
         af:0c:4e:9a:d6:77:b3:24:99:a7:6b:73:39:96:5a:36:56:41:
         8f:fe:6c:83:b0:39:eb:e0:c1:76:a9:de:2e:b5:bc:b3:8f:b4:
         77:d0:ab:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:35:20 2025 by rpki-client