Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
File:                     N2EhKhZwpXGatx-iA7kuxobyEXc.mft (raw, json)
Hash identifier:          RMMWlAEAnrInyn1p0o09LgrPGkXgxQxnX+VXRuapjSQ=
Subject key identifier:   E3:A1:A9:E1:65:0F:4E:76:0B:30:66:52:97:0D:02:E4:2D:BF:12:BF
Authority key identifier: 37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77
Certificate issuer:       /CN=A9142037/serialNumber=3761212A1670A5719AB71FA203B92EC686F21177
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
Manifest number:          74
Signing time:             Wed 17 Sep 2025 07:33:04 +0000
Manifest this update:     Wed 17 Sep 2025 07:33:04 +0000
Manifest next update:     Wed 24 Sep 2025 07:33:03 +0000
Files and hashes:         1: N2EhKhZwpXGatx-iA7kuxobyEXc.crl (hash: sONYNTeFEeakZML1pMLfuwhDyfrxCvt5Kf4d8o/u1CM=)
                          2: 191B6DA2E41811EF8E3F233AC4F9AE02.roa (hash: vcq+JOCdxjFG1D5wGuVH3+pI9poPc4zyyjKKMXsqhWE=)
                          3: FAEA8E38E41911EFA96DA35FC4F9AE02.roa (hash: RxRZ1dH5JkRHUJw1N/ksvTcKPSxp60O8KTnJFH3sluU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl
                          rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 07:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142037, serialNumber=3761212A1670A5719AB71FA203B92EC686F21177
        Validity
            Not Before: Sep 17 07:33:04 2025 GMT
            Not After : Sep 24 07:33:03 2025 GMT
        Subject: CN=68ca6430-ab4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b3:61:82:dd:cd:69:9b:76:e2:8f:d9:7c:3d:
                    a3:4a:a3:38:14:76:2b:0f:21:0b:f2:9e:c8:3e:84:
                    2e:a6:08:86:49:34:01:a4:3d:5a:05:5a:75:38:a7:
                    a5:7a:e7:44:25:90:80:d1:d0:d3:35:31:af:dd:86:
                    29:ce:63:72:64:21:14:35:df:35:11:3e:03:39:fa:
                    d5:03:cb:20:35:8f:b2:a1:6e:f1:7c:fb:95:67:f7:
                    97:f5:80:1b:57:ed:33:30:0e:ec:c6:10:d1:71:e6:
                    ae:72:40:a4:0c:95:b0:d3:c3:bf:00:b5:d0:88:4b:
                    4a:18:90:50:91:d9:18:d1:d3:fc:63:61:6a:eb:1d:
                    31:81:6c:f8:b6:44:dd:68:c1:b8:bb:0c:f9:2c:6c:
                    19:c6:4d:28:0c:89:bd:ca:b9:4c:3b:e2:ad:42:9c:
                    49:2a:b8:32:ab:45:e2:51:35:68:86:ef:63:e0:fe:
                    86:da:1e:19:75:3a:f6:fd:3c:26:4a:9e:14:e5:4b:
                    d0:a4:49:af:18:82:60:cc:81:17:89:8f:92:cb:9d:
                    c3:73:09:42:9a:66:c2:22:07:c4:6d:19:ed:e2:97:
                    55:80:52:b1:7f:ea:d8:cd:64:b4:ac:fb:8c:a0:78:
                    a9:2f:8e:ce:a0:8d:75:3a:08:db:df:ee:ef:08:a1:
                    e7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A1:A9:E1:65:0F:4E:76:0B:30:66:52:97:0D:02:E4:2D:BF:12:BF
            X509v3 Authority Key Identifier:
                keyid:37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:95:1e:d3:fe:7f:65:ec:0b:77:13:9e:13:f2:a1:43:b2:c8:
         f8:cb:fc:43:85:9c:f4:db:4f:c8:b3:7a:64:ea:24:46:58:b3:
         6f:95:5c:1c:cd:53:d8:cf:ab:8c:7d:ab:dc:a0:d6:e8:fe:89:
         aa:fd:30:c5:f6:ce:25:51:74:45:48:66:53:e4:0d:56:83:ed:
         11:b8:5b:96:1c:80:3f:dd:b1:e2:fd:ac:48:01:29:bd:a8:16:
         39:ff:28:f7:f8:5c:98:24:7b:73:47:fc:31:f2:88:86:61:57:
         48:ea:34:07:b5:01:57:cf:8c:cd:89:06:ec:6c:46:72:9d:f1:
         aa:6c:f7:b9:3e:6e:f8:71:11:c6:f1:e2:01:b5:14:f8:79:85:
         51:9e:af:a5:73:51:47:64:39:bb:f1:5e:94:b6:97:2e:75:3f:
         1f:ce:16:3a:1f:df:7c:55:41:2d:82:02:51:a4:d0:ca:13:7d:
         69:0d:9b:1f:d2:5c:a2:9f:7d:c9:83:7c:2c:af:c2:c2:94:fc:
         99:69:ff:f2:91:c3:6b:49:e0:f7:ea:43:e1:35:21:21:f3:db:
         0f:87:ab:47:0b:71:20:df:5f:47:e1:88:dc:b6:e4:bd:cd:b4:
         cd:0f:ec:73:64:39:49:63:18:f3:2f:b2:88:4e:b1:1b:64:b6:
         a3:1c:8a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:13:50 2025 by rpki-client