Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
File:                     n0mgwprfTYMDB3M9LGCp2TEQogg.mft (raw, json)
Hash identifier:          SuFDggV1SVCv7xKUALin2J2EZ2vXtk8T5sfVvxT3lyg=
Subject key identifier:   E3:DD:4F:29:CE:A5:E7:9D:8C:BF:26:CF:36:7D:F1:A8:92:FE:79:8E
Authority key identifier: 9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08
Certificate issuer:       /CN=A919B393/serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208
Certificate serial:       026B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
Manifest number:          0268
Signing time:             Wed 05 Nov 2025 01:45:56 +0000
Manifest this update:     Wed 05 Nov 2025 01:45:55 +0000
Manifest next update:     Wed 12 Nov 2025 01:45:55 +0000
Files and hashes:         1: n0mgwprfTYMDB3M9LGCp2TEQogg.crl (hash: ARe33h8cNFaWFBqYYWmbA6IJ1fr8we7Uvqk02+mAlsA=)
                          2: 38F69014325B11ED8403A325C4F9AE02.roa (hash: xPxOBcWiHSTAw3zQ7FKJslNCxgd0Xv3rmMHCdbL8JBE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl
                          rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 01:45:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 619 (0x26b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B393, serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208
        Validity
            Not Before: Nov  5 01:45:55 2025 GMT
            Not After : Nov 12 01:45:55 2025 GMT
        Subject: CN=690aac54-e506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:54:6b:51:d8:06:95:e8:77:d0:a0:1e:7f:10:
                    73:4d:21:38:b6:81:2b:81:67:4d:96:2d:7c:e7:bc:
                    21:d9:9b:7b:c6:3c:f8:5f:1b:a6:6b:95:45:99:b7:
                    f1:bc:e6:fd:b7:e8:3d:4d:a4:03:8d:cb:96:21:d6:
                    70:fb:f3:cb:e2:5a:ab:e0:ed:d7:97:34:68:be:6d:
                    39:4c:6d:49:b2:65:76:a8:53:03:63:42:d1:83:37:
                    14:d9:e1:40:34:d9:5c:fa:d6:0b:d0:5a:8e:59:a5:
                    6b:02:5c:d6:62:64:bb:9f:4e:34:6f:b0:b0:c5:b3:
                    7f:2e:49:10:f5:54:7c:ac:9f:e4:44:01:21:4c:a2:
                    75:9f:4b:9a:43:36:ce:f0:af:9a:bf:06:ae:28:6e:
                    e5:f0:08:0a:98:53:04:92:71:96:c9:23:2b:b4:0b:
                    c0:6f:35:72:90:4f:33:b5:8a:69:f1:84:7d:cb:fe:
                    28:31:bb:85:6d:a5:35:7b:fa:28:d9:a8:25:75:7a:
                    25:3a:01:98:d6:7e:e7:bc:68:e0:ce:a6:6c:6d:52:
                    fa:8d:09:47:e4:a9:de:eb:74:77:60:13:87:73:0a:
                    c2:de:88:e5:73:8c:dd:ec:36:29:e9:db:f8:34:01:
                    6c:79:ab:27:07:ba:54:f9:f8:e7:92:5b:a7:91:28:
                    2e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DD:4F:29:CE:A5:E7:9D:8C:BF:26:CF:36:7D:F1:A8:92:FE:79:8E
            X509v3 Authority Key Identifier:
                keyid:9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:47:2d:f7:9a:83:0f:e4:07:35:87:80:9c:b3:27:3a:e9:fb:
         10:ea:97:9f:41:59:47:74:59:c0:47:6b:07:d3:dd:92:e7:f7:
         a7:82:a6:c8:37:3a:a9:68:b5:67:55:77:84:5e:d6:d8:d9:fd:
         e9:e2:49:0c:32:e0:38:16:c5:91:a5:0a:60:b5:0e:73:de:3d:
         33:1c:55:fc:a5:5d:00:70:d5:ef:39:ab:b3:39:93:1d:dc:ab:
         0d:78:b6:35:f1:34:e6:65:75:00:60:f7:0e:39:ef:ed:61:c0:
         91:6c:91:6f:1f:83:ac:aa:91:a1:b6:d4:b9:7b:31:5a:24:b2:
         11:e1:1b:8e:cc:d5:8d:41:4e:d7:d0:df:0e:66:86:63:41:95:
         a4:dc:6d:ab:26:13:23:09:25:a4:91:d0:e6:4a:63:85:c5:d3:
         67:0d:ba:ac:20:1c:e1:c8:f3:a6:cb:46:07:20:dd:15:7d:39:
         31:91:7e:5a:b5:51:c2:2d:ec:ef:e2:3d:65:0a:b7:ed:0b:91:
         b6:f5:62:e5:b8:9e:49:63:94:64:4b:ba:df:66:23:9f:c7:7b:
         ed:69:ca:d8:18:cb:05:ff:4e:1e:03:27:fd:87:5b:7d:56:5a:
         86:63:9a:85:57:15:08:5a:e9:1c:e3:79:1c:0e:5d:23:0b:91:
         21:3c:22:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:29:45 2025 by rpki-client