Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft
File:                     nN-M6Qv3n4wUjR92H5lNghsknHE.mft (raw, json)
Hash identifier:          B9m/j6KqnNcChrGFVozmBhc1cKwFiqsG2yTCgPkVG2U=
Subject key identifier:   B2:DE:C8:E2:33:66:AB:3B:4D:54:82:AD:D3:09:70:AC:A9:45:B8:95
Authority key identifier: 9C:DF:8C:E9:0B:F7:9F:8C:14:8D:1F:76:1F:99:4D:82:1B:24:9C:71
Certificate issuer:       /CN=A919F450/serialNumber=9CDF8CE90BF79F8C148D1F761F994D821B249C71
Certificate serial:       047D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft
Manifest number:          0478
Signing time:             Sat 09 Aug 2025 00:35:44 +0000
Manifest this update:     Sat 09 Aug 2025 00:35:43 +0000
Manifest next update:     Sat 16 Aug 2025 00:35:43 +0000
Files and hashes:         1: nN-M6Qv3n4wUjR92H5lNghsknHE.crl (hash: 0xVyRTFRfFZan6gBbM1zaej+mOUfFg/8T3vwHmZZXOA=)
                          2: DDE2BB7C534811EC8FFBDB7CC4F9AE02.roa (hash: 9BjSNtNI0t5KFZOPEwLsrwtwuYFD1A/cyJU1JZKxEKU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.crl
                          rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1149 (0x47d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F450, serialNumber=9CDF8CE90BF79F8C148D1F761F994D821B249C71
        Validity
            Not Before: Aug  9 00:35:43 2025 GMT
            Not After : Aug 16 00:35:43 2025 GMT
        Subject: CN=689697e0-506f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:80:37:2c:ca:18:3d:99:b0:0c:00:9a:fe:52:
                    01:14:73:3f:51:3a:b4:66:c9:b7:43:77:f3:66:4d:
                    77:be:0c:04:5d:ea:eb:ad:f4:70:fb:1c:8e:09:b3:
                    14:56:5a:3b:46:82:af:70:39:76:0f:31:c2:85:8e:
                    7a:16:62:b9:e4:9f:bf:22:d6:ed:76:ae:ad:f9:ba:
                    a4:3f:f3:95:39:42:40:07:5a:13:2d:2a:4a:33:be:
                    70:af:e5:fe:a7:31:2c:52:4a:d8:da:75:d9:a6:f5:
                    41:6e:4b:54:ed:6c:5c:58:d8:34:53:45:30:2e:eb:
                    1e:65:62:25:ef:48:cc:26:15:ae:ee:7d:1b:c6:0e:
                    05:ed:dc:04:5f:bf:9f:43:6b:2f:80:39:af:f9:ff:
                    d3:fe:cc:65:5a:16:eb:f0:0d:06:55:e0:ed:58:5b:
                    db:23:af:48:a2:82:24:54:2d:85:69:46:67:54:04:
                    a1:d3:b5:00:f3:7a:20:e5:38:3f:d0:ac:e6:83:19:
                    73:bd:3f:3e:a8:03:89:c2:1e:34:2a:32:17:5c:c1:
                    fa:e8:5d:00:c5:53:79:1f:d3:0f:4f:2b:c1:8c:8f:
                    66:7c:03:15:15:90:06:22:11:cd:f4:8d:f7:12:58:
                    b3:4e:54:6c:41:b6:ae:ef:ff:44:b8:61:03:a2:dd:
                    0e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:DE:C8:E2:33:66:AB:3B:4D:54:82:AD:D3:09:70:AC:A9:45:B8:95
            X509v3 Authority Key Identifier:
                keyid:9C:DF:8C:E9:0B:F7:9F:8C:14:8D:1F:76:1F:99:4D:82:1B:24:9C:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:6d:e0:c7:a6:b5:2a:69:2f:5c:f8:ff:e1:c4:91:d0:f1:c2:
         65:07:19:15:76:91:01:6c:6b:a9:d3:9c:11:f4:c7:36:70:3b:
         4c:6a:75:20:f7:c6:3b:e1:d4:7c:58:77:ce:56:8f:80:a5:b1:
         c8:12:31:ff:6f:47:fb:bf:26:a4:71:10:9a:0b:2a:71:a0:9d:
         34:82:7f:44:c5:95:45:0a:ed:72:a1:1d:de:b9:dc:d6:be:54:
         82:2f:96:35:f6:f8:31:6e:e3:95:75:74:60:fa:28:6d:d3:f2:
         3b:5e:05:d3:b1:85:30:95:86:4c:6b:64:a3:89:ff:1d:5e:d8:
         95:1b:76:e7:0c:72:3f:9f:20:6e:bd:e1:de:a9:bf:52:91:3d:
         2b:1b:eb:52:7a:7a:f1:68:b0:c5:18:c5:2c:e5:8d:b7:da:81:
         f4:9e:ff:04:56:9b:a7:65:d6:e4:ad:f7:d9:73:13:d2:04:0a:
         3b:2a:c2:7a:f4:17:67:2f:6c:42:ed:da:66:65:a8:a8:c7:41:
         60:fa:2c:a7:6a:8a:9f:db:d0:37:d8:b5:ec:0f:8d:03:dd:08:
         d9:7e:f4:2c:21:64:3f:c5:fe:ab:9a:2c:60:56:9f:f4:d9:c0:
         8f:f5:ea:65:ee:74:c4:74:58:db:b7:7c:66:5d:a8:74:3e:56:
         1b:85:e6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:57:21 2025 by rpki-client