Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft
File:                     nL-xN0vpMpetwbIdvTeY0VvSdN8.mft (raw, json)
Hash identifier:          AVjaYfxKlrA9S514kNZ5tJZ81UuSHULdeeOlWSruExA=
Subject key identifier:   CF:9B:59:9E:37:58:07:9A:A6:79:C8:30:28:4C:6D:0A:50:0B:F6:C6
Authority key identifier: 9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF
Certificate issuer:       /CN=A9152696/serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF
Certificate serial:       0C46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft
Manifest number:          0C3F
Signing time:             Sun 08 Jun 2025 18:18:01 +0000
Manifest this update:     Sun 08 Jun 2025 18:18:00 +0000
Manifest next update:     Sun 15 Jun 2025 18:18:00 +0000
Files and hashes:         1: nL-xN0vpMpetwbIdvTeY0VvSdN8.crl (hash: y/bPBFXlecNMNJCAAzDOqZjYKi9ekcYUXhvAGibh30k=)
                          2: E905CD5808F111EA8E4F1D51C4F9AE02.roa (hash: Ykh/ajdiEQ6UqJC1nIow2mRMlvxbjVdtujI4Th0ysiU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.crl
                          rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 18:17:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3142 (0xc46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152696, serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF
        Validity
            Not Before: Jun  8 18:18:00 2025 GMT
            Not After : Jun 15 18:18:00 2025 GMT
        Subject: CN=6845d3d8-e2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:18:ca:62:e8:7e:5f:6a:96:a3:93:06:17:23:
                    a3:da:bb:8f:cf:98:00:83:8c:e7:f1:a3:7f:fb:d4:
                    3b:25:b9:54:2e:ce:8c:d6:46:95:76:bc:04:90:bc:
                    bb:21:9a:93:32:0e:80:26:bf:cd:de:ab:55:f8:1c:
                    76:74:d5:75:af:5c:ed:80:0b:96:2a:ab:2a:04:b2:
                    4b:d9:ec:fb:33:4e:88:25:fe:11:a7:53:da:f7:b0:
                    55:2f:ab:d7:7e:51:d2:b2:dc:e4:db:2c:90:32:a6:
                    ed:00:6e:c2:94:94:f8:e9:8a:f0:f2:f9:ef:98:7e:
                    56:07:04:79:d6:39:b3:00:96:e8:49:b0:19:ae:b6:
                    03:22:d6:91:7c:12:9a:69:d4:29:24:c3:56:7c:de:
                    db:4e:19:a6:2b:b1:1e:68:31:57:6b:5c:29:09:84:
                    ef:cc:85:00:4d:4c:76:f1:1e:da:76:da:76:d5:24:
                    8a:3f:37:93:3e:b3:57:e3:90:e8:e3:fd:e9:fa:67:
                    65:22:79:ae:53:8b:91:0f:84:67:43:6c:f5:97:98:
                    0d:0c:0f:24:9e:bd:1c:86:fe:4d:22:85:4e:49:e0:
                    1a:db:0a:62:0c:8c:88:d3:cb:33:d9:6f:1e:b6:e9:
                    7e:fa:a5:c6:e0:d4:83:0c:f0:19:4d:c4:4a:9d:63:
                    45:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9B:59:9E:37:58:07:9A:A6:79:C8:30:28:4C:6D:0A:50:0B:F6:C6
            X509v3 Authority Key Identifier:
                keyid:9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:1c:af:ff:2b:50:fc:58:e4:47:5f:dd:ab:78:a4:80:0b:b4:
         eb:4b:6b:13:89:15:2e:f4:b6:c4:6c:40:36:ab:49:58:94:2a:
         2e:2a:63:71:eb:a4:f1:a5:5d:98:49:a3:3b:bc:aa:50:50:03:
         08:e0:41:d1:00:51:9e:16:39:5f:e0:ff:92:7c:87:92:b6:ec:
         30:ab:cd:a4:11:20:f4:40:0e:93:ec:80:ee:f4:5d:8d:54:dc:
         f6:c1:34:f2:96:4a:31:8d:66:7e:58:f6:c0:68:9f:07:0a:5a:
         b1:24:73:d8:b8:4a:3e:08:6d:37:7b:24:4c:a9:35:ed:33:75:
         93:02:82:61:8e:23:e2:9e:e4:e5:5e:17:76:e9:4f:28:04:03:
         2c:98:3a:59:bd:bc:09:a1:3a:ac:d3:90:ed:45:93:85:75:35:
         1b:cd:f0:ac:16:80:bc:85:56:c3:5c:42:98:6a:79:e2:9b:e3:
         c5:dc:39:68:cf:56:ed:4f:4c:eb:62:3a:98:61:b7:81:7a:dd:
         73:38:d6:a1:ea:38:c6:11:b2:ee:5a:1c:2c:ff:fb:52:e5:5a:
         73:75:1f:4f:55:0d:51:e0:9c:7e:0e:5f:96:50:cb:b3:05:38:
         16:01:3a:4a:d7:61:87:cc:85:28:fa:57:ee:77:67:50:df:0f:
         93:19:9f:81
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTI2OTYxMTAvBgNVBAUTKDlDQkZCMTM3NEJFOTMyOTdBREMxQjIxREJEMzc5OEQx
NUJEMjc0REYwHhcNMjUwNjA4MTgxODAwWhcNMjUwNjE1MTgxODAwWjAYMRYwFAYD
VQQDEw02ODQ1ZDNkOC1lMmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArhjKYuh+X2qWo5MGFyOj2ruPz5gAg4zn8aN/+9Q7JblULs6M1kaVdrwEkLy7
IZqTMg6AJr/N3qtV+Bx2dNV1r1ztgAuWKqsqBLJL2ez7M06IJf4Rp1Pa97BVL6vX
flHSstzk2yyQMqbtAG7ClJT46Yrw8vnvmH5WBwR51jmzAJboSbAZrrYDItaRfBKa
adQpJMNWfN7bThmmK7EeaDFXa1wpCYTvzIUATUx28R7adtp21SSKPzeTPrNX45Do
4/3p+mdlInmuU4uRD4RnQ2z1l5gNDA8knr0chv5NIoVOSeAa2wpiDIyI08sz2W8e
tul++qXG4NSDDPAZTcRKnWNFewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+bWZ43
WAeapnnIMChMbQpQC/bGMB8GA1UdIwQYMBaAFJy/sTdL6TKXrcGyHb03mNFb0nTf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjY5Ni83MjVDQTFENDA2
Q0QxMUVBQUU1RTc5MzRDNEY5QUUwMi9uTC14TjB2cE1wZXR3YklkdlRlWTBWdlNk
TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25MLXhOMHZwTXBldHdiSWR2VGVZMFZ2U2ROOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MjY5Ni83MjVDQTFENDA2Q0QxMUVBQUU1RTc5MzRDNEY5QUUwMi9uTC14TjB2cE1w
ZXR3YklkdlRlWTBWdlNkTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAkHK//K1D8WORHX92reKSAC7TrS2sTiRUu9LbEbEA2q0lYlCouKmNx
66TxpV2YSaM7vKpQUAMI4EHRAFGeFjlf4P+SfIeStuwwq82kESD0QA6T7IDu9F2N
VNz2wTTylkoxjWZ+WPbAaJ8HClqxJHPYuEo+CG03eyRMqTXtM3WTAoJhjiPinuTl
Xhd26U8oBAMsmDpZvbwJoTqs05DtRZOFdTUbzfCsFoC8hVbDXEKYannim+PF3Dlo
z1btT0zrYjqYYbeBet1zONah6jjGEbLuWhws//tS5VpzdR9PVQ1R4Jx+Dl+WUMuz
BTgWATpK12GHzIUo+lfud2dQ3w+TGZ+B
-----END CERTIFICATE-----
Generated at Mon Jun 9 13:19:56 2025 by rpki-client