Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
File:                     nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft (raw, json)
Hash identifier:          udVZLb4+bq4gNWke3vv8yM+zJ5I0OT9I1SdCxFJPgyM=
Subject key identifier:   2D:DE:F9:C4:EF:F5:A7:21:CD:DC:65:86:FC:E4:EB:84:87:86:B1:A8
Authority key identifier: 9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20
Certificate issuer:       /CN=A91813F1/serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
Certificate serial:       08F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
Manifest number:          08D0
Signing time:             Thu 24 Jul 2025 20:38:21 +0000
Manifest this update:     Thu 24 Jul 2025 20:38:21 +0000
Manifest next update:     Thu 31 Jul 2025 20:38:21 +0000
Files and hashes:         1: nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl (hash: YKTmNqbuJz57ETGr089SJHQC+ayXormLkpQhNtCxjrw=)
                          2: B7ACB272A25611EFACD47A47C4F9AE02.roa (hash: vLwsN6XlSbBFyRzXSCrEwO8DAZca1xs9SHlcyqnbxYE=)
                          3: 0A8890FE2F4C11EDB0375D6CC4F9AE02.roa (hash: sSNo+/dLUh/bje18BPzZPQTxMEMoTmVIKuRUAdfqRAo=)
                          4: 096864742F4C11EDB0375D6CC4F9AE02.roa (hash: jla9AG1gExZIQpCD/EW4q3Wp+FwlnerqSvxfxkw43CI=)
                          5: 0834FF2C2F4C11EDB0375D6CC4F9AE02.roa (hash: jsKgrIPw9kysznIIPdP3oqonMHQ5VwN13abO5ggVkg4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl
                          rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 20:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2292 (0x8f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813F1, serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
        Validity
            Not Before: Jul 24 20:38:21 2025 GMT
            Not After : Jul 31 20:38:21 2025 GMT
        Subject: CN=688299bd-5616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:25:15:20:f5:72:89:57:82:35:ea:2f:89:ac:
                    8b:b3:c6:28:4e:1f:c6:e1:e1:25:68:33:3b:65:09:
                    17:b1:87:66:2f:e5:ce:8e:e6:ac:e2:b9:98:53:7e:
                    df:86:9f:36:09:72:1e:10:77:a0:8e:5d:2a:64:60:
                    86:3a:3c:b1:97:55:f5:78:e7:7b:96:0a:2b:1e:d1:
                    e8:d1:35:8f:13:12:86:4b:3b:0e:66:65:31:3f:1a:
                    e4:c0:98:a1:b4:da:89:02:aa:3e:52:52:ba:cb:87:
                    d6:e4:20:6b:79:c1:26:46:a5:a1:d8:31:49:93:18:
                    d4:ce:98:8a:42:52:23:83:11:17:c5:80:ff:f0:6a:
                    51:95:4e:fe:de:0e:62:4b:78:60:21:c6:bc:53:f5:
                    0d:d9:ee:26:4f:f5:a4:3a:a3:72:90:15:f5:fc:5e:
                    03:0a:eb:80:2b:6c:35:c2:89:c9:2e:51:e3:47:c5:
                    eb:61:92:d5:31:5f:76:9f:42:aa:5a:ae:a5:72:ca:
                    45:64:10:95:35:a4:0b:df:06:8a:55:4d:6a:98:4d:
                    4a:e1:f1:0f:4a:19:99:45:a9:de:55:8c:f9:05:be:
                    cb:43:6f:0c:73:a7:8f:cf:5f:a3:d2:de:19:db:f4:
                    d5:d6:44:76:15:85:98:c2:25:aa:8f:a9:76:63:d4:
                    c3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DE:F9:C4:EF:F5:A7:21:CD:DC:65:86:FC:E4:EB:84:87:86:B1:A8
            X509v3 Authority Key Identifier:
                keyid:9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:04:43:8f:80:bd:a5:ed:e3:eb:d4:31:5b:36:49:b5:c6:bd:
         0e:d8:f3:4b:4f:79:ff:fb:1f:e4:c2:fe:a2:e6:bd:a5:f4:74:
         6a:bc:40:9f:fb:58:97:8c:21:e8:26:6b:6b:9b:36:74:b5:d9:
         7e:87:27:2d:db:95:21:3f:4f:55:48:88:05:40:fa:9d:a4:3b:
         1e:f0:f0:65:6e:b8:b6:91:11:16:21:20:b7:12:6b:d3:3b:e8:
         a6:1a:8b:64:78:a7:4e:17:bb:e2:00:c4:af:85:50:34:6a:86:
         e1:9c:14:8b:17:2f:e3:ce:06:e9:23:9e:77:5a:86:d7:ed:03:
         74:02:a6:62:ca:8a:83:86:24:a1:30:17:99:fa:29:77:aa:b9:
         42:db:4b:9f:f2:ad:ca:24:c1:f0:e3:38:13:66:83:6f:ad:14:
         ef:e4:62:77:e4:c6:5d:41:3e:41:c3:ec:af:18:99:5c:2e:9f:
         aa:a2:db:ec:f3:75:8d:b4:00:3a:21:39:52:13:e0:15:e2:53:
         17:ee:24:ba:2c:11:c3:51:cd:06:e9:ae:f1:0d:bf:5a:c4:c8:
         30:6b:4b:f7:05:4c:33:39:45:99:0b:20:4d:55:5c:cc:fd:74:
         9c:80:b3:36:50:8f:5b:95:48:46:9f:f8:8d:fb:bd:0b:af:59:
         b0:a0:60:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 11:17:28 2025 by rpki-client