Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
File:                     n0mgwprfTYMDB3M9LGCp2TEQogg.mft (raw, json)
Hash identifier:          FMjjaYbzSVnOJrrsWoJ749cp8IZk2Cv49i+WsjSMRhc=
Subject key identifier:   1D:51:FA:25:D2:96:0B:A4:83:CD:DC:57:5E:99:71:B9:63:8B:B3:48
Authority key identifier: 9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08
Certificate issuer:       /CN=A919B393/serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208
Certificate serial:       026A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
Manifest number:          0267
Signing time:             Mon 03 Nov 2025 01:36:57 +0000
Manifest this update:     Mon 03 Nov 2025 01:36:56 +0000
Manifest next update:     Mon 10 Nov 2025 01:36:56 +0000
Files and hashes:         1: n0mgwprfTYMDB3M9LGCp2TEQogg.crl (hash: dodbg2g1jdzjdiy99wosCbtlCxgnQBI7fRSZUjUbXwQ=)
                          2: 38F69014325B11ED8403A325C4F9AE02.roa (hash: xPxOBcWiHSTAw3zQ7FKJslNCxgd0Xv3rmMHCdbL8JBE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl
                          rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 01:36:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B393, serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208
        Validity
            Not Before: Nov  3 01:36:56 2025 GMT
            Not After : Nov 10 01:36:56 2025 GMT
        Subject: CN=69080739-5b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a8:18:8f:1d:bd:29:7c:2f:c3:a1:e2:30:a2:
                    9e:79:e5:dd:ea:88:6c:dd:97:4e:fa:e0:72:c9:cb:
                    f0:1a:fa:34:15:93:80:ba:0f:68:d5:4c:0c:e8:3a:
                    bd:07:8d:87:57:a4:b6:9a:b3:4a:f2:ff:d9:c6:78:
                    ef:29:fe:86:7d:89:58:00:9a:ce:01:d9:99:28:1d:
                    8d:50:54:12:87:18:11:c0:20:c5:38:41:01:7e:4b:
                    a8:26:ab:97:85:4f:7a:7b:cf:2e:3c:79:64:7f:71:
                    cf:f3:a3:99:1c:7d:da:45:1e:6f:e4:f0:cd:41:7b:
                    b9:e3:1b:a7:14:c3:20:72:df:94:de:0b:33:b9:f4:
                    ca:6d:c6:47:89:48:c4:c3:47:ac:a8:4b:e6:73:8d:
                    b0:50:08:2e:3e:6e:f8:40:c1:12:9f:0a:90:d4:11:
                    64:48:1e:c5:f7:7c:b6:cf:57:53:70:bf:71:01:37:
                    3b:ab:da:c5:fd:38:46:d7:37:ff:a4:65:fb:50:4f:
                    1c:c0:c0:12:1a:55:7a:72:d9:46:34:66:33:90:38:
                    a4:de:30:cc:bb:51:9e:d1:05:f8:97:c8:2c:7c:80:
                    1d:b4:51:28:15:8e:85:0f:10:9b:36:ce:9f:21:81:
                    5a:26:2a:bf:60:9f:d7:ec:54:2b:04:20:6b:83:0c:
                    82:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:51:FA:25:D2:96:0B:A4:83:CD:DC:57:5E:99:71:B9:63:8B:B3:48
            X509v3 Authority Key Identifier:
                keyid:9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f8:40:ff:7a:c9:c1:25:09:16:77:7f:41:79:61:5d:49:bf:
         47:67:fe:7c:ca:63:f2:6c:b5:df:ba:d7:3c:c3:5d:e9:a7:0e:
         8e:f2:46:51:09:01:b0:83:a3:dc:79:a3:a8:e5:53:c9:8f:ca:
         69:7f:a8:1e:5d:1d:c8:28:83:de:4a:76:92:f7:16:72:e9:e5:
         71:32:ab:67:a6:a2:03:92:53:f2:f9:f2:3d:32:d8:0a:af:30:
         29:ef:e1:d0:16:e7:91:6c:73:f0:05:ac:0b:e1:9e:d9:20:a8:
         94:b6:9f:80:28:ec:b6:b1:74:f6:76:a7:75:44:68:21:16:04:
         e3:c8:88:88:d8:16:28:6a:e2:72:2d:f5:67:ed:72:35:27:e7:
         62:72:0d:8b:91:75:84:62:57:0e:a3:29:41:1c:76:25:f5:9e:
         5e:be:cb:8a:d1:4f:72:bb:04:59:19:c6:3c:e5:a6:ad:88:e9:
         a6:3b:3f:59:e1:bc:ef:0f:12:8d:9a:5a:b0:ab:02:37:bd:ec:
         85:bb:07:07:bf:9e:28:66:b0:4a:72:90:ef:7a:ed:74:bd:4b:
         0a:d9:dd:53:63:19:28:ea:3e:7e:dc:44:97:a5:96:e7:81:ef:
         94:97:bc:b8:a7:66:18:8f:83:c1:ac:ec:7e:36:d9:4a:ad:5b:
         1a:58:b6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:35:14 2025 by rpki-client