Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
File:                     N2A9suBywKj9cROOJUCZ9MrYwW8.mft (raw, json)
Hash identifier:          I8YJA6MsAlFADOlycoyeeIt1EwrUH8Sll4hctCkWQd8=
Subject key identifier:   09:67:6B:82:98:8A:17:FF:AB:6C:FF:E9:8F:61:03:98:19:CF:4A:14
Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F
Certificate issuer:       /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
Certificate serial:       0268
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
Manifest number:          0255
Signing time:             Fri 05 Sep 2025 02:11:49 +0000
Manifest this update:     Fri 05 Sep 2025 02:11:48 +0000
Manifest next update:     Fri 12 Sep 2025 02:11:48 +0000
Files and hashes:         1: N2A9suBywKj9cROOJUCZ9MrYwW8.crl (hash: UnjOchaICSBFCznp8kMesYQM+qVRrCyMn9p6jSC7ha8=)
                          2: AB68CE76346511EDAC41E081C4F9AE02.roa (hash: me5m52MXo4l0JWieAZh5/5JLHzGNaxm9iecnfymMcU4=)
                          3: 14B312EC3AE711EDBF700472C4F9AE02.roa (hash: jkOQ3dPuDLNPKoML9QUoAglZcGE8mWGDMaT0FDV/Rrk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl
                          rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 02:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 616 (0x268)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD47F, serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
        Validity
            Not Before: Sep  5 02:11:48 2025 GMT
            Not After : Sep 12 02:11:48 2025 GMT
        Subject: CN=68ba46e4-4e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:56:e0:cf:0a:7f:33:9d:ff:21:47:ef:56:48:
                    0f:f5:4b:3b:d2:83:f7:74:f0:25:71:9d:91:f4:ef:
                    31:29:b9:81:57:cd:e9:2c:89:61:0b:9c:6b:f3:8b:
                    b5:b9:c0:c8:6b:db:84:d3:1b:53:af:be:d8:78:50:
                    3d:e4:a3:b3:72:d8:25:7f:e3:ad:3c:1a:ec:11:40:
                    9a:c3:90:fa:bb:cb:69:32:09:58:fe:46:9b:ec:b8:
                    c5:3a:aa:79:e2:27:38:7a:f3:04:81:0a:92:17:d5:
                    55:a9:0c:d1:1c:04:51:33:98:d3:c5:42:d8:e4:ea:
                    da:f2:97:35:dd:b4:87:b6:9e:14:4e:89:b6:05:81:
                    a4:f0:04:1d:2c:68:60:6c:df:35:70:4b:79:5b:11:
                    1f:ac:9d:3f:61:b0:2b:19:52:6d:60:77:33:94:b6:
                    a8:bb:b8:b7:5f:c8:4c:74:db:95:7a:4d:d3:30:2f:
                    1e:38:b0:fe:d9:ec:62:1c:7b:9e:ee:0e:32:86:aa:
                    be:97:df:c3:50:fb:0a:fd:49:63:8b:ae:f0:11:72:
                    87:08:70:75:62:70:77:88:a3:fc:5e:8b:f4:5d:55:
                    37:d7:b2:85:9b:c3:0a:e9:e3:20:c7:66:b2:cf:20:
                    93:74:17:f6:d9:0e:b7:03:6e:3e:ec:77:46:e2:e0:
                    0f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:67:6B:82:98:8A:17:FF:AB:6C:FF:E9:8F:61:03:98:19:CF:4A:14
            X509v3 Authority Key Identifier:
                keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:cf:27:16:74:13:f4:37:58:03:eb:04:ac:2f:f4:5e:a3:2c:
         cb:36:49:ca:85:27:e9:ef:0a:d6:bb:eb:45:27:62:d8:22:85:
         94:bd:1c:4f:0f:a9:44:3c:97:3f:10:b7:24:fe:25:3b:35:59:
         2c:3f:a8:bf:0f:a5:43:76:7a:79:87:26:c1:7c:16:22:27:ad:
         c8:19:13:12:73:f7:8d:13:bd:ef:38:e4:fa:2b:73:db:a3:3b:
         34:32:78:eb:f7:e8:40:d7:db:f9:c4:9b:1b:9c:ed:4e:7c:e6:
         93:bf:91:d3:16:de:c6:11:1b:08:02:36:92:f3:1d:6b:11:6f:
         f0:52:06:fd:7a:de:39:e6:b8:98:a9:34:f5:29:c7:1a:70:a7:
         11:5c:ac:50:b5:f1:41:6e:df:5e:f6:1b:5f:a1:9b:a8:3f:41:
         6f:de:bd:55:5f:04:12:f9:22:6d:c9:8d:97:ab:3a:23:2f:24:
         dd:3d:ee:40:4d:37:b5:e2:ea:f2:49:61:89:ca:d7:f3:f0:a6:
         fc:ef:26:97:9a:06:6c:ca:e1:67:fa:63:37:33:af:9f:c9:7c:
         d2:3a:d1:c9:bb:83:e8:5b:bb:c2:ff:e7:b7:d9:89:5f:39:00:
         d3:fc:0f:88:c5:c7:5c:cb:54:71:cc:60:e5:5e:10:84:31:4c:
         85:b2:82:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 08:14:59 2025 by rpki-client