Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
File:                     np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft (raw, json)
Hash identifier:          19OlXqQdSQkV4EsxS4BoeVk/xHGLQKiO3cAQc1KjevA=
Subject key identifier:   DD:CE:AB:B6:16:09:DF:A9:67:07:16:AD:67:D7:8F:FA:9C:72:8D:DE
Authority key identifier: 9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B
Certificate issuer:       /CN=A9137E65/serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B
Certificate serial:       081D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
Manifest number:          0818
Signing time:             Fri 30 May 2025 21:03:28 +0000
Manifest this update:     Fri 30 May 2025 21:03:28 +0000
Manifest next update:     Fri 06 Jun 2025 21:03:28 +0000
Files and hashes:         1: np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl (hash: rU0aECUmQxd6zpHfOG8Zd8V4IlUoFqDgQlPEP8M0Pr4=)
                          2: 6169DD26D4D411EAA1C20545C4F9AE02.roa (hash: 6oTg1gO/3ny+QZa4fQ+WZlPAQH1Ja82kUyS9omWYpCo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl
                          rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 21:03:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2077 (0x81d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137E65, serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B
        Validity
            Not Before: May 30 21:03:28 2025 GMT
            Not After : Jun  6 21:03:28 2025 GMT
        Subject: CN=683a1d20-0124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:56:da:30:0a:c7:b9:fe:28:26:7e:39:b1:a7:
                    bb:f3:57:61:57:bc:93:24:b3:e6:f3:89:10:4a:41:
                    6b:e5:86:d0:04:4f:0e:5f:e5:74:17:1e:f1:ea:0f:
                    21:26:2c:18:4b:94:fa:34:12:c1:c7:fe:39:5c:a3:
                    c4:e0:9f:1a:af:94:05:af:44:1f:00:e4:ca:27:7f:
                    58:1d:1c:9a:f5:0f:74:f4:01:1e:2a:0e:cb:f3:a6:
                    f1:b4:65:82:dd:33:99:be:15:3e:41:d5:42:99:55:
                    83:da:87:9a:ac:8b:0c:44:16:4e:5e:57:11:df:07:
                    2f:43:47:2d:1a:e7:0c:e0:e3:70:da:d0:7c:26:b6:
                    73:34:ad:43:81:59:d2:26:0f:b3:f0:df:59:0f:6a:
                    bb:f2:93:b1:cf:e5:2f:88:ee:2a:c1:c3:94:c9:64:
                    19:ac:80:07:75:16:e8:73:b8:e2:5f:99:a2:6f:0b:
                    fb:ff:99:99:bf:a2:b8:0b:58:77:8a:1f:15:30:50:
                    95:20:b5:15:9e:47:da:48:04:e5:57:a1:83:ea:d9:
                    37:59:1f:2a:20:38:93:e8:09:3c:14:88:7b:49:e4:
                    20:8e:61:ec:9d:9a:71:39:b0:eb:96:f2:9d:85:64:
                    3d:8a:b7:2f:e4:f0:06:63:39:cd:57:04:3c:b0:68:
                    34:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:CE:AB:B6:16:09:DF:A9:67:07:16:AD:67:D7:8F:FA:9C:72:8D:DE
            X509v3 Authority Key Identifier:
                keyid:9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:73:c4:6b:65:fc:e6:a5:f8:7b:0a:cb:69:20:30:ed:bb:c7:
         15:7c:5f:c8:a8:0d:9d:f4:4e:29:cc:d2:04:3f:44:6c:7d:09:
         bb:50:e9:2b:8a:6f:14:f0:7d:aa:0f:7a:45:c7:af:ad:1b:25:
         1b:3a:63:0e:96:a6:97:45:32:95:64:dc:57:87:6e:fb:5e:39:
         1a:a2:5e:2c:e0:50:56:bf:f5:41:08:6b:f0:33:37:04:e6:78:
         f6:32:98:41:be:f1:d1:40:9a:c1:b2:10:c6:09:17:46:72:ae:
         0c:6c:f4:94:92:16:8c:bd:50:ed:16:cd:d0:a0:9c:53:72:e2:
         7b:cb:77:48:ab:df:e1:c6:72:ad:1b:8e:0a:6b:20:53:5b:a2:
         55:6d:5a:4a:c9:a9:82:52:a8:3e:b7:89:39:72:31:f3:e9:f7:
         a0:36:7d:14:9f:99:d1:93:fc:4e:41:6e:e3:67:8f:04:06:0a:
         8e:9a:ee:8e:5d:a5:6e:7f:05:19:06:b5:98:92:96:86:54:f7:
         68:f2:c7:0c:54:ed:8c:21:d7:86:a0:29:27:ea:08:aa:45:9e:
         97:e5:fa:91:08:a9:1f:82:16:78:de:0b:41:02:01:55:ce:4b:
         ad:a8:30:df:17:82:39:01:99:02:65:04:17:70:8f:cf:89:28:
         ac:1b:61:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:22:08 2025 by rpki-client