Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
File:                     NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft (raw, json)
Hash identifier:          7JHvjpcbwMcAHdMA1xJgsKDR8HDzlPZ2ilmaJ3zxVWM=
Subject key identifier:   90:09:96:1F:13:47:99:8C:0A:89:95:3C:DE:7C:79:67:55:E6:82:FB
Authority key identifier: 34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7
Certificate issuer:       /CN=A915A268/serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7
Certificate serial:       0139
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
Manifest number:          0139
Signing time:             Wed 17 Sep 2025 05:01:06 +0000
Manifest this update:     Wed 17 Sep 2025 05:01:05 +0000
Manifest next update:     Wed 24 Sep 2025 05:01:05 +0000
Files and hashes:         1: NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl (hash: XxCB4d5Vp4JckT2kr9BwOypvD8qarcX813Tyg734oGA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl
                          rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 05:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A268, serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7
        Validity
            Not Before: Sep 17 05:01:05 2025 GMT
            Not After : Sep 24 05:01:05 2025 GMT
        Subject: CN=68ca4091-0272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:04:9e:77:12:db:f8:ee:4e:65:df:a0:5d:68:
                    1c:27:f1:fc:82:a3:20:98:98:74:f4:94:c5:c3:16:
                    96:c1:1e:a0:eb:9a:38:9b:8b:e3:f1:ec:d4:9b:e0:
                    7a:4b:cf:12:22:62:d1:70:90:92:3e:45:a0:05:0a:
                    6f:0c:d0:ca:32:bc:cd:6f:fe:38:9d:e2:19:53:d8:
                    c2:12:95:81:8a:de:12:2b:68:1e:80:96:c9:8b:df:
                    ba:16:54:2e:21:ab:e6:65:08:2e:88:bb:f4:7a:f9:
                    43:fa:59:09:1c:a1:ec:b7:bd:a8:c9:a0:82:d6:18:
                    ff:a9:1e:a4:74:8d:1e:b4:00:6b:e5:b1:97:3d:80:
                    c3:19:22:59:9a:fc:30:e3:13:0a:fd:b5:c0:21:f6:
                    52:08:50:d7:25:66:05:b8:78:04:5a:74:c8:f5:6d:
                    32:de:f6:e4:66:99:30:88:9a:d7:3a:33:c7:d1:84:
                    55:de:82:21:72:f9:83:60:47:c6:02:a9:9b:21:c6:
                    19:b4:0f:b9:6c:87:c7:67:58:d4:bb:c2:a5:a3:e9:
                    81:6e:13:bc:c5:cc:0a:41:13:f4:de:58:9f:d7:1b:
                    61:64:69:51:6c:fd:7a:76:e1:96:20:62:8f:b0:30:
                    32:d6:bf:be:f3:94:e7:35:2f:8e:86:50:60:3d:bb:
                    2d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:09:96:1F:13:47:99:8C:0A:89:95:3C:DE:7C:79:67:55:E6:82:FB
            X509v3 Authority Key Identifier:
                keyid:34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:4e:19:13:f0:45:a4:13:a3:0b:de:1b:c5:5c:d3:9d:55:33:
         26:d2:f7:09:07:82:ff:19:c2:d3:b7:00:c6:54:81:6e:f7:08:
         28:80:6b:b3:90:72:88:bc:1f:b2:0a:c2:72:4b:7b:3e:ce:eb:
         85:0a:1e:4a:0a:d9:58:d0:da:83:b6:98:fc:d7:bb:fc:40:a1:
         32:ee:79:96:61:69:c4:26:fb:40:c9:ba:73:83:7b:ef:86:50:
         1f:f3:f6:10:d9:e0:12:9a:7a:bd:a7:e1:fc:34:ee:ec:0e:65:
         38:cb:3d:ab:e5:3a:f3:39:09:2b:e9:c0:68:45:75:2c:f1:45:
         72:85:99:eb:45:a2:d5:56:25:4c:e2:20:61:7b:16:31:4d:b2:
         c9:80:c3:4d:59:89:01:9a:fe:78:72:a6:04:64:26:3c:5d:9b:
         d9:31:27:dc:96:c6:6d:ce:f9:69:5a:f5:8c:1a:9e:90:30:34:
         54:53:5d:28:ca:15:fe:63:9f:f8:a5:28:47:72:82:f5:bb:86:
         cf:ee:97:88:08:ca:de:ab:41:8b:ae:2f:74:93:70:ca:9c:c4:
         af:bf:e7:4b:a2:b5:30:5c:1e:bc:82:37:60:2d:69:03:2f:4c:
         a2:95:78:d0:29:cf:7f:56:f6:8f:fd:cb:a4:bc:02:eb:7f:80:
         1d:df:09:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:50:37 2025 by rpki-client