Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
File:                     nPapYQAMl2lHu76x0XPCPpCflUQ.mft (raw, json)
Hash identifier:          FUz8pFDKARY2+hRX7Xnt7jwVd5Tclox7lNdhz0DVANU=
Subject key identifier:   E7:1D:59:66:5C:0A:27:8E:41:85:05:46:B6:5C:32:C0:A1:79:E5:85
Authority key identifier: 9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44
Certificate issuer:       /CN=A912FA65/serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544
Certificate serial:       06C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
Manifest number:          06C2
Signing time:             Fri 18 Jul 2025 22:23:37 +0000
Manifest this update:     Fri 18 Jul 2025 22:23:36 +0000
Manifest next update:     Fri 25 Jul 2025 22:23:36 +0000
Files and hashes:         1: nPapYQAMl2lHu76x0XPCPpCflUQ.crl (hash: DhiFN6wHqEPUYSGUAAZaFr2Kck0mnWhLetAeJVoRXDE=)
                          2: E14DB058662411EBADFEB364C4F9AE02.roa (hash: AGJnIVMVxGCqhPBai/J+rGCznBK2uUe21t16AbPm6pM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl
                          rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 22:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1735 (0x6c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FA65, serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544
        Validity
            Not Before: Jul 18 22:23:36 2025 GMT
            Not After : Jul 25 22:23:36 2025 GMT
        Subject: CN=687ac969-9dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:70:63:86:9a:af:75:51:19:df:67:36:fc:bf:
                    e0:0c:21:9c:43:62:3c:62:9b:d4:c3:9a:5c:fa:e4:
                    c0:e9:0a:42:70:4b:0e:b7:f4:e8:71:5f:55:67:a3:
                    5d:10:c5:85:68:e3:25:c8:56:17:b8:af:6e:50:49:
                    c3:0f:0b:7d:03:8c:9e:f2:2b:7c:d6:78:87:3d:c0:
                    42:f0:5e:61:a8:0e:e4:d3:15:fc:37:c9:18:e1:b4:
                    ca:51:e1:e2:15:60:9f:47:69:91:8e:c7:47:c7:25:
                    9a:ae:a8:12:56:e0:cd:8d:d4:d1:d6:35:a4:38:58:
                    ac:61:10:63:c4:5e:bd:d7:52:b1:b2:1c:31:5a:49:
                    64:a1:71:55:38:5b:48:65:ee:3a:6e:83:1b:12:6b:
                    0b:2e:91:c4:e0:df:68:be:37:5a:df:bd:a8:d3:fa:
                    9f:f2:e9:fd:35:ef:50:de:aa:90:b6:58:75:4e:7f:
                    3f:eb:85:9e:f5:08:d2:d5:b3:f4:09:61:6c:10:ef:
                    30:d4:84:3b:21:01:e3:12:14:86:62:95:c4:81:27:
                    53:51:1b:be:7c:47:67:5c:14:a6:e3:b8:12:f4:17:
                    8a:36:0a:c6:52:dd:31:24:71:f2:e0:11:45:f5:bf:
                    7d:4e:43:60:99:0b:9d:01:f1:77:b4:a6:31:e7:a8:
                    7d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1D:59:66:5C:0A:27:8E:41:85:05:46:B6:5C:32:C0:A1:79:E5:85
            X509v3 Authority Key Identifier:
                keyid:9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:8e:c1:41:aa:22:91:c4:d7:3d:17:67:3c:84:b0:71:67:f0:
         0c:c8:58:4d:7f:35:c5:ac:4c:36:46:09:f5:41:f0:88:09:f2:
         a9:62:7c:ea:58:d4:23:44:b9:5b:f1:34:16:b8:3f:58:67:dc:
         65:65:01:22:32:60:19:54:81:f1:17:22:81:77:ef:df:d3:48:
         49:92:7a:e8:3b:87:59:d5:ab:f1:6b:68:a6:54:21:7f:9b:4f:
         45:13:5b:71:13:f7:62:f0:f4:c4:59:0e:53:00:0e:4f:78:74:
         9f:8c:4c:f8:17:c0:af:1f:f0:a9:4f:1f:6f:c5:04:15:bf:ec:
         06:bb:52:ec:c1:68:c5:9e:63:69:bc:ab:db:b1:39:dc:b9:ce:
         34:f3:47:e5:6a:75:69:26:db:2d:4a:70:b8:76:c6:ac:41:5e:
         5f:00:2b:73:5d:d0:ac:31:f1:db:69:3d:bc:73:f2:b9:43:83:
         12:02:3a:f6:fb:7a:12:9f:75:8d:55:57:19:ef:15:e3:c3:7c:
         cf:b7:55:a6:d3:b0:eb:72:1f:0f:1c:2a:8c:d2:e8:82:1a:76:
         00:69:1b:c4:e1:df:aa:f2:74:86:a3:22:a1:db:ca:6e:90:5b:
         4b:89:fc:57:d4:c1:f7:5d:66:f9:ff:de:e6:98:20:ae:c6:74:
         a4:1e:44:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:57:06 2025 by rpki-client