Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft
File:                     nN-M6Qv3n4wUjR92H5lNghsknHE.mft (raw, json)
Hash identifier:          vH4Bz4+Uft5rY/EswD0qAby2xBJOCDS6H3dSXRQeRLo=
Subject key identifier:   8F:8D:59:0F:42:23:EA:C3:3D:7E:A3:4D:49:4D:D7:DB:AA:A6:F5:87
Authority key identifier: 9C:DF:8C:E9:0B:F7:9F:8C:14:8D:1F:76:1F:99:4D:82:1B:24:9C:71
Certificate issuer:       /CN=A919F450/serialNumber=9CDF8CE90BF79F8C148D1F761F994D821B249C71
Certificate serial:       0461
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft
Manifest number:          045C
Signing time:             Sat 14 Jun 2025 23:54:32 +0000
Manifest this update:     Sat 14 Jun 2025 23:54:32 +0000
Manifest next update:     Sat 21 Jun 2025 23:54:32 +0000
Files and hashes:         1: nN-M6Qv3n4wUjR92H5lNghsknHE.crl (hash: 3PLbT2P3qftdc81gMZQA7TDmM5hOPP7R2Ps9lsuvdp8=)
                          2: DDE2BB7C534811EC8FFBDB7CC4F9AE02.roa (hash: 9BjSNtNI0t5KFZOPEwLsrwtwuYFD1A/cyJU1JZKxEKU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.crl
                          rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 23:54:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1121 (0x461)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F450, serialNumber=9CDF8CE90BF79F8C148D1F761F994D821B249C71
        Validity
            Not Before: Jun 14 23:54:32 2025 GMT
            Not After : Jun 21 23:54:32 2025 GMT
        Subject: CN=684e0bb8-09e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:22:87:8d:ec:bc:8e:95:65:3e:7b:e7:67:c0:
                    0a:4f:34:e7:16:e0:af:66:e6:c8:2f:59:2c:ee:72:
                    a8:02:fc:5a:c5:e3:8b:4b:53:60:2b:e3:9d:4d:6d:
                    d9:d8:59:ba:c8:2f:66:5f:88:01:49:60:64:a5:a8:
                    ed:d6:cc:27:ae:47:df:ea:6d:57:96:2d:66:c0:02:
                    27:24:27:f8:e5:ac:d8:53:7b:0e:55:16:9a:fe:06:
                    31:b1:1d:f3:26:ef:cd:f6:f9:05:b6:19:2e:26:63:
                    e3:82:a5:3b:b7:39:3e:b0:0e:b2:85:e2:23:a1:41:
                    e0:c6:4b:4e:77:e3:a0:fb:33:76:f5:5c:b4:60:04:
                    f7:e4:60:13:24:35:09:cc:60:b2:65:df:48:34:4b:
                    d4:99:5c:dc:48:70:8a:89:99:ee:64:5d:37:f4:b0:
                    4f:7c:0d:f8:bb:0c:c7:97:14:37:9a:59:2c:f0:14:
                    c2:16:b3:f9:7f:f6:61:6a:b3:ee:b4:00:c7:04:73:
                    4f:cc:1a:1a:24:f1:78:1c:dc:07:3f:55:50:2c:2e:
                    e6:26:59:c5:eb:ed:07:77:b0:42:cb:08:f8:e6:22:
                    db:8c:c5:9a:6d:1c:07:47:ea:62:e6:fd:14:f0:8e:
                    fb:e8:d7:14:ea:64:1d:10:8c:92:84:64:ae:5d:f8:
                    2d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8D:59:0F:42:23:EA:C3:3D:7E:A3:4D:49:4D:D7:DB:AA:A6:F5:87
            X509v3 Authority Key Identifier:
                keyid:9C:DF:8C:E9:0B:F7:9F:8C:14:8D:1F:76:1F:99:4D:82:1B:24:9C:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:3f:eb:d2:23:bd:b1:6d:a0:0f:5b:8f:17:17:e3:2e:2d:c7:
         66:d5:76:90:aa:2c:9c:35:8f:e5:b5:ba:a3:9d:a5:c0:7b:22:
         ae:3c:ff:14:8c:e0:89:a0:64:ad:6f:3e:00:0d:95:ed:5f:89:
         b8:97:90:e0:5d:f4:01:70:f6:12:67:e4:49:22:4c:bc:0d:5e:
         aa:7c:1e:a1:30:2a:64:3d:e4:1b:07:0b:8f:10:61:b1:1a:a1:
         41:1a:71:97:30:30:ad:d0:d1:33:8f:17:bf:d0:e5:8a:ec:f7:
         49:10:3b:83:0f:bb:44:bf:ba:9f:fe:d7:ae:9c:f8:69:03:d2:
         8d:a5:87:1d:58:80:d5:f2:fe:c3:b3:39:50:54:70:8d:05:f9:
         03:8b:c7:30:87:c2:cf:35:c5:aa:8e:c8:f5:40:d8:92:69:6f:
         e3:f6:52:1c:f3:19:be:fd:0f:d0:b4:8a:89:8b:08:10:f5:f5:
         97:e4:50:8f:07:8c:ed:51:b6:4e:f6:9b:22:63:80:72:4e:f2:
         9b:44:53:b4:6f:47:58:6a:e0:7a:3a:5b:62:20:f4:8d:be:b1:
         90:11:08:9a:c9:f2:9f:55:9b:36:e9:3a:7e:79:31:2d:26:24:
         47:29:87:7e:d1:41:0e:b9:ed:94:f7:ac:ef:f5:c4:e7:e3:0e:
         c1:c2:df:d3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUY0NTAxMTAvBgNVBAUTKDlDREY4Q0U5MEJGNzlGOEMxNDhEMUY3NjFGOTk0RDgy
MUIyNDlDNzEwHhcNMjUwNjE0MjM1NDMyWhcNMjUwNjIxMjM1NDMyWjAYMRYwFAYD
VQQDEw02ODRlMGJiOC0wOWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2yKHjey8jpVlPnvnZ8AKTzTnFuCvZubIL1ks7nKoAvxaxeOLS1NgK+OdTW3Z
2Fm6yC9mX4gBSWBkpajt1swnrkff6m1Xli1mwAInJCf45azYU3sOVRaa/gYxsR3z
Ju/N9vkFthkuJmPjgqU7tzk+sA6yheIjoUHgxktOd+Og+zN29Vy0YAT35GATJDUJ
zGCyZd9INEvUmVzcSHCKiZnuZF039LBPfA34uwzHlxQ3mlks8BTCFrP5f/ZharPu
tADHBHNPzBoaJPF4HNwHP1VQLC7mJlnF6+0Hd7BCywj45iLbjMWabRwHR+pi5v0U
8I776NcU6mQdEIyShGSuXfgtUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+NWQ9C
I+rDPX6jTUlN19uqpvWHMB8GA1UdIwQYMBaAFJzfjOkL95+MFI0fdh+ZTYIbJJxx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjQ1MC9COTgxNzFEQTUz
NDYxMUVDOUI5MEE0N0JDNEY5QUUwMi9uTi1NNlF2M240d1VqUjkySDVsTmdoc2tu
SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25OLU02UXYzbjR3VWpSOTJINWxOZ2hza25IRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjQ1MC9COTgxNzFEQTUzNDYxMUVDOUI5MEE0N0JDNEY5QUUwMi9uTi1NNlF2M240
d1VqUjkySDVsTmdoc2tuSEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAEP+vSI72xbaAPW48XF+MuLcdm1XaQqiycNY/ltbqjnaXAeyKuPP8U
jOCJoGStbz4ADZXtX4m4l5DgXfQBcPYSZ+RJIky8DV6qfB6hMCpkPeQbBwuPEGGx
GqFBGnGXMDCt0NEzjxe/0OWK7PdJEDuDD7tEv7qf/teunPhpA9KNpYcdWIDV8v7D
szlQVHCNBfkDi8cwh8LPNcWqjsj1QNiSaW/j9lIc8xm+/Q/QtIqJiwgQ9fWX5FCP
B4ztUbZO9psiY4ByTvKbRFO0b0dYauB6OltiIPSNvrGQEQiayfKfVZs26Tp+eTEt
JiRHKYd+0UEOue2U96zv9cTn4w7Bwt/T
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:03:37 2025 by rpki-client