Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
File:                     n0mgwprfTYMDB3M9LGCp2TEQogg.mft (raw, json)
Hash identifier:          HFWcAu4jnY8nph4WTKHrb/bcWk5r+PCwKUp4KcV3G9w=
Subject key identifier:   48:02:C3:51:AA:B2:7D:9D:8B:28:B9:E9:BD:84:D4:46:A7:52:22:DC
Authority key identifier: 9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08
Certificate issuer:       /CN=A919B393/serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208
Certificate serial:       0225
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
Manifest number:          0222
Signing time:             Thu 19 Jun 2025 01:45:43 +0000
Manifest this update:     Thu 19 Jun 2025 01:45:42 +0000
Manifest next update:     Thu 26 Jun 2025 01:45:42 +0000
Files and hashes:         1: n0mgwprfTYMDB3M9LGCp2TEQogg.crl (hash: 9wULlW+AR2t06TGc44+NtxxyPsY2pdhfAoLNUnih8D4=)
                          2: 38F69014325B11ED8403A325C4F9AE02.roa (hash: xPxOBcWiHSTAw3zQ7FKJslNCxgd0Xv3rmMHCdbL8JBE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl
                          rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 01:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 549 (0x225)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B393, serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208
        Validity
            Not Before: Jun 19 01:45:42 2025 GMT
            Not After : Jun 26 01:45:42 2025 GMT
        Subject: CN=68536bc6-599e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:66:37:7e:7c:c9:71:83:4c:c8:bd:69:63:e0:
                    5b:a4:50:d9:01:37:10:24:d4:0b:71:88:87:95:52:
                    df:e4:5c:a3:32:bb:c7:fc:13:4b:f6:6a:a6:59:75:
                    14:a3:c5:4e:fa:8a:c3:af:05:c1:d3:53:21:92:65:
                    8c:ea:5a:75:82:8f:0b:0a:3a:03:fd:41:f0:d4:d1:
                    c3:f3:47:2c:0b:c8:2d:12:61:28:3e:88:fa:9d:f2:
                    a4:81:78:d4:d3:0d:8d:35:d2:d5:ae:e5:fa:e9:5d:
                    79:cf:92:2e:7a:82:6b:ac:49:a6:23:83:80:d2:75:
                    1a:11:7a:3f:5b:be:94:95:2f:b0:3f:b7:2b:2f:ee:
                    22:dc:6d:42:29:08:bb:20:4d:e4:71:e6:f5:e6:d1:
                    a1:b3:2a:c1:f3:82:fb:6d:92:9d:e8:72:10:57:c7:
                    96:b5:77:06:0e:63:6e:cb:f4:45:a2:81:13:70:07:
                    3b:91:b3:c6:06:cc:d0:7b:a8:ec:93:4a:96:12:01:
                    42:0a:ab:25:9d:b2:56:c8:24:02:18:f6:fe:bf:15:
                    ae:07:1b:b9:db:06:f8:2a:f1:bb:06:76:df:4e:98:
                    fe:4f:45:a6:e2:77:1e:86:b5:58:e7:56:ed:01:d1:
                    95:39:d2:f9:0e:33:bb:f6:ea:bc:e9:9f:a1:bd:df:
                    6d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:02:C3:51:AA:B2:7D:9D:8B:28:B9:E9:BD:84:D4:46:A7:52:22:DC
            X509v3 Authority Key Identifier:
                keyid:9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:e3:dc:33:dd:58:8e:4c:98:d4:89:28:24:11:02:f5:d2:5b:
         da:60:fd:09:99:73:1d:11:02:f7:41:bd:5c:2b:c9:bf:7a:c2:
         be:6c:27:53:c8:24:84:c9:9e:23:b9:19:6f:29:31:ed:e6:5b:
         49:65:d5:d3:ef:c0:3f:82:f4:c9:6f:3e:5d:8e:77:53:6e:b0:
         2e:8d:48:5b:d1:d1:a2:6b:5c:20:a2:81:30:0d:8c:4d:d1:a1:
         c7:f0:6d:f6:81:f5:63:01:2e:17:5a:13:b1:3f:99:fb:60:42:
         dd:c6:01:72:e6:41:59:91:7a:3a:5e:a6:ec:2a:6c:66:6a:80:
         08:b3:42:82:66:99:db:c1:d7:fc:0c:63:e8:d6:50:0f:df:9b:
         6b:ef:08:bb:86:87:5d:b4:bd:51:29:a4:dd:ac:a4:7b:87:8f:
         0d:90:3b:2f:a6:8c:14:98:92:3e:c4:1b:a1:1d:66:11:5e:ec:
         fa:04:53:da:88:62:76:9d:f9:5d:07:f9:3f:dd:a3:4f:79:28:
         cb:56:79:b6:54:87:3d:ad:95:07:82:0c:95:bf:1d:19:80:67:
         a9:16:69:3e:42:94:10:0b:ae:47:89:d9:2e:8b:00:0b:31:9d:
         9f:b0:54:de:db:d4:ac:d3:26:df:3b:4b:61:4a:e1:a7:1a:9f:
         d1:e7:4c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 20:53:31 2025 by rpki-client