Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
File:                     Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft (raw, json)
Hash identifier:          SwxQ63xVXrOk0q8keym/IiCJCm6okHgeW434HEHaSW4=
Subject key identifier:   0C:79:F6:E0:58:0D:9E:37:06:12:D5:90:33:20:48:CA:D4:D8:73:CC
Authority key identifier: 36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF
Certificate issuer:       /CN=A913647F/serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF
Certificate serial:       97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
Manifest number:          95
Signing time:             Mon 21 Jul 2025 06:35:58 +0000
Manifest this update:     Mon 21 Jul 2025 06:35:57 +0000
Manifest next update:     Mon 28 Jul 2025 06:35:57 +0000
Files and hashes:         1: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl (hash: p1xoF14dHSiJKvQ9Dz6m2EbKWooR4tax60r09LfcEAE=)
                          2: FD3934BC86E211EF8CF27626C4F9AE02.roa (hash: 6re4BPBhdZPlBhJ6P0bUdH0mQEDnXmK+Ed0vP4MQWeU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl
                          rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 06:35:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913647F, serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF
        Validity
            Not Before: Jul 21 06:35:57 2025 GMT
            Not After : Jul 28 06:35:57 2025 GMT
        Subject: CN=687ddfcd-ebda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d9:2d:9c:4c:fd:f8:d6:e5:b3:49:a5:b1:b0:
                    85:53:9e:dc:d1:c7:ff:f1:4a:4b:6f:c3:60:cc:3f:
                    c7:d8:55:14:17:0b:3d:0b:56:69:58:e4:85:43:68:
                    ad:b4:cc:b4:6b:79:1e:e8:7a:45:b1:47:cb:9c:e3:
                    74:ed:4d:3f:56:e0:c6:5a:e2:cf:2e:b6:f3:0e:ee:
                    90:19:96:77:3d:e4:96:4c:15:80:60:0d:10:af:77:
                    dc:d2:6a:6f:e4:7b:8c:ad:fc:03:b9:99:d7:06:1f:
                    32:14:78:15:38:89:c1:ea:1f:f5:4c:20:87:20:4e:
                    6e:b1:23:32:23:76:4e:13:31:37:18:f6:e7:01:97:
                    6b:29:2f:6f:b4:97:46:a6:a9:70:94:d6:4d:97:e2:
                    d5:ab:f0:46:d0:27:13:9f:b3:13:54:a5:95:de:12:
                    a7:b3:d1:d1:44:14:dd:75:f7:15:3c:4f:ed:f8:5f:
                    66:7e:0e:77:4c:f6:32:74:e4:dd:79:7a:a7:6b:3c:
                    6d:39:e1:b6:2b:3a:cb:c7:72:3e:56:e9:3d:42:6d:
                    e1:ec:e9:ed:1d:b5:3e:94:5b:e9:84:27:d3:2c:17:
                    d5:7d:b7:03:54:73:1b:c9:6a:3c:64:b5:c0:7c:bb:
                    44:18:f9:67:80:a2:f4:72:89:73:5d:c8:4e:8d:26:
                    de:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:79:F6:E0:58:0D:9E:37:06:12:D5:90:33:20:48:CA:D4:D8:73:CC
            X509v3 Authority Key Identifier:
                keyid:36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:87:6b:bf:11:a0:89:f3:c5:a2:f1:1c:d0:1c:89:b5:ee:bf:
         fd:91:a3:d8:f2:85:66:57:ad:59:d3:62:01:36:58:73:19:46:
         10:96:d8:0b:66:36:7c:d5:1a:6c:71:fb:18:70:87:d8:cf:ba:
         ee:fc:75:61:c6:04:06:42:c2:a4:bb:a1:6e:a1:94:d8:a5:8d:
         bb:89:03:0f:70:ee:73:88:93:32:4e:74:54:17:22:26:4c:69:
         51:4a:77:7a:c3:59:02:f2:7a:63:37:c3:09:78:29:1d:76:d4:
         00:c2:ff:b7:d6:fd:43:b8:ca:63:07:df:5f:98:6e:ea:76:cc:
         c1:75:3c:1f:cd:b2:d7:3f:39:23:51:3b:e2:0c:41:12:d5:4a:
         6c:0b:9b:fe:c6:d5:8a:81:ce:f9:d3:b7:82:c6:89:0f:7b:92:
         13:10:2a:2f:7d:63:ce:08:1b:9e:21:c1:2c:99:f5:36:d3:6d:
         18:58:2a:2b:d3:a4:3f:5c:23:15:2d:95:fb:f4:b5:f2:e7:bb:
         df:f1:b9:b1:24:a3:be:7b:24:86:8a:e1:36:dd:a3:ef:f7:eb:
         b9:7c:48:a1:e2:5d:14:3f:d4:72:68:ef:4f:8b:5b:ce:3f:70:
         f7:d6:f5:59:06:a5:9d:3a:f2:4b:56:36:14:06:4f:54:25:72:
         07:6e:80:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:35:36 2025 by rpki-client