Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
File:                     6N-NXkyE2ofXKac8HE6GETgassE.mft (raw, json)
Hash identifier:          elzpvQQakD4A7vsgPygPDrHrcY7lHfPY2pZYdAAhqE0=
Subject key identifier:   FF:14:41:29:B9:F4:7C:6B:28:B2:D7:6D:BF:F1:8A:C9:19:63:C1:FA
Authority key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1
Certificate issuer:       /CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
Certificate serial:       2A51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
Manifest number:          2A2B
Signing time:             Fri 18 Jul 2025 15:41:16 +0000
Manifest this update:     Fri 18 Jul 2025 15:41:16 +0000
Manifest next update:     Fri 25 Jul 2025 15:41:16 +0000
Files and hashes:         1: 6N-NXkyE2ofXKac8HE6GETgassE.crl (hash: 0Z4d3ZM7L6EFCA+ZLPo/AxDCAaFVt705tXHXDvhqf+k=)
                          2: 3785190EF0FE11EEA034D07EC4F9AE02.roa (hash: nsCF4rGbw9XGs9CgJZKLcahJ7vZuzL6jjWzwGBe2QfI=)
                          3: 445DB498796011EFA7E9391DC4F9AE02.roa (hash: dA0s4TToOxTxCGWPhL3CMsQZBEq0Isrnu6dBhBWPJ8w=)
                          4: E86E188A795F11EFBF3B491CC4F9AE02.roa (hash: xkr6cXGQ/p7K1jYKezf1z+xt8LJrbP87Z5GaO3mC9Iw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl
                          rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 15:41:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10833 (0x2a51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B01C7, serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
        Validity
            Not Before: Jul 18 15:41:16 2025 GMT
            Not After : Jul 25 15:41:16 2025 GMT
        Subject: CN=687a6b1c-a3df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4f:54:d2:b9:49:4a:18:38:56:fc:5a:d0:b7:
                    d7:9c:7f:31:06:0d:14:ea:90:de:35:f1:dd:b6:96:
                    d0:d7:65:a3:88:92:2a:3e:8f:5e:56:23:50:ca:01:
                    2f:54:60:76:e3:39:e2:cc:1a:60:92:f5:96:c1:cb:
                    7d:11:d8:c8:a6:5c:24:19:ab:05:50:9b:ff:3b:f9:
                    c3:3f:8a:04:25:0f:5d:d2:39:75:3b:01:30:05:3e:
                    19:6b:0f:1f:e6:06:53:44:96:04:5d:c1:10:5d:88:
                    34:8a:07:75:01:82:64:26:df:d6:ed:22:33:be:c9:
                    88:43:f6:12:4d:cc:f5:46:b1:95:2a:9e:b5:53:5e:
                    e6:96:d9:34:a2:d4:64:ed:b8:f0:c4:f8:0c:a5:f4:
                    e5:de:5a:a6:04:57:6d:7b:54:73:25:c5:a0:d8:f0:
                    8f:1f:bb:24:57:c2:07:00:18:89:0c:d8:d4:0d:e4:
                    be:f4:0b:70:4f:4a:d5:b5:b1:98:43:78:86:c5:db:
                    4a:d7:f7:1b:72:6f:84:87:33:e2:d6:ea:fe:aa:6b:
                    48:02:2e:b4:b5:91:98:e9:f8:72:1d:15:98:47:54:
                    80:28:84:6f:a9:83:66:6c:51:e6:3e:12:94:48:f5:
                    39:c7:01:a0:80:95:95:af:2d:b1:c1:5c:88:bb:ef:
                    a3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:14:41:29:B9:F4:7C:6B:28:B2:D7:6D:BF:F1:8A:C9:19:63:C1:FA
            X509v3 Authority Key Identifier:
                keyid:E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:a2:bc:90:6e:92:35:70:bf:84:68:b7:e6:7e:3f:95:15:c2:
         b6:85:f7:23:ea:b7:e6:17:f3:1d:e7:0c:ce:d8:86:00:7c:ce:
         a0:df:36:a2:b6:0c:50:9d:28:4c:22:78:18:5d:bd:6d:e2:0b:
         29:35:62:8b:e7:71:a6:f2:8a:91:48:c4:86:74:a2:b1:04:20:
         7c:d9:64:a0:f8:9f:5e:f3:10:a4:82:fa:22:c5:db:41:b1:b6:
         c0:57:f8:c3:1d:10:0c:44:f8:4a:89:b7:3a:a5:a8:71:23:ae:
         0a:08:01:02:4a:60:f6:9c:ec:ef:19:5c:a8:85:e1:70:c4:bf:
         36:3f:80:4b:44:fd:3a:e9:64:54:79:17:12:4d:79:19:0a:7d:
         12:3c:2c:a9:0b:dd:70:cc:9e:eb:14:5d:fc:18:b7:15:d9:bb:
         79:59:8d:69:77:35:7b:38:bd:2f:aa:f5:a9:23:d3:44:f0:9c:
         d5:7f:af:de:5d:50:03:a9:20:63:af:e8:15:28:36:a7:20:7a:
         8e:e7:60:11:ac:04:fc:84:fe:a3:23:9d:d0:dd:5f:a4:e6:dc:
         16:77:98:89:37:a4:87:30:ae:fb:8f:00:62:8e:21:93:75:22:
         ca:32:af:09:dd:8e:15:e2:29:2a:b4:e8:c7:1b:3d:32:af:85:
         81:c5:77:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:26:31 2025 by rpki-client