Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
File:                     Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft (raw, json)
Hash identifier:          DRPsAGzFagk8ljwuREpU9pY0foAh8+74AK6OKtMBFnY=
Subject key identifier:   0A:80:EC:84:49:D0:F9:7C:7F:73:AF:7F:52:60:09:EB:DA:83:36:A6
Authority key identifier: 36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF
Certificate issuer:       /CN=A913647F/serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF
Certificate serial:       B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
Manifest number:          AF
Signing time:             Tue 09 Sep 2025 06:13:29 +0000
Manifest this update:     Tue 09 Sep 2025 06:13:29 +0000
Manifest next update:     Tue 16 Sep 2025 06:13:29 +0000
Files and hashes:         1: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl (hash: NHEe65zrAS+U7FuXYGgyutRVP7WNwuUmtUaYK+O0iMI=)
                          2: FD3934BC86E211EF8CF27626C4F9AE02.roa (hash: 6re4BPBhdZPlBhJ6P0bUdH0mQEDnXmK+Ed0vP4MQWeU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl
                          rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 06:13:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913647F, serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF
        Validity
            Not Before: Sep  9 06:13:29 2025 GMT
            Not After : Sep 16 06:13:29 2025 GMT
        Subject: CN=68bfc589-88c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5d:ab:79:71:2a:dd:b7:da:0b:25:a9:42:3c:
                    08:46:60:d7:d9:38:4a:de:4b:07:a5:c3:91:5e:85:
                    35:c7:d7:01:f2:f1:69:7a:aa:71:ae:a5:f2:46:b1:
                    b4:34:0a:69:eb:74:97:66:ab:2d:77:54:99:f1:b6:
                    f5:43:73:5f:c7:3c:89:7a:00:e7:f9:ba:b0:db:6c:
                    96:c0:f5:f2:99:89:55:61:b1:4c:b3:c9:ec:d2:dc:
                    44:94:6b:f5:91:fc:0b:13:25:07:3b:07:d2:57:da:
                    c2:52:01:f4:74:8b:49:78:e5:46:e1:83:7e:3f:4d:
                    d8:27:9d:03:50:c5:9d:7c:de:69:a7:5c:f1:04:fd:
                    f2:ab:ab:2d:f5:85:29:b1:0d:6f:27:4b:13:84:d5:
                    e8:b2:b9:ae:6f:61:fb:d2:c7:93:69:10:38:3c:be:
                    da:e4:f1:0e:d2:d8:8a:5d:7c:8c:0e:d5:42:23:73:
                    00:d0:06:e9:64:75:63:28:ae:8f:40:52:09:67:3b:
                    c2:51:a8:cf:42:10:b1:12:16:12:88:43:0f:fb:1e:
                    84:de:ec:d5:7a:5a:7a:33:71:96:4f:2d:22:84:5e:
                    aa:8e:8a:82:c2:24:00:c7:26:9e:97:53:25:d7:21:
                    2c:39:26:3e:2e:c3:5c:fc:37:67:20:85:9e:c5:e2:
                    28:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:80:EC:84:49:D0:F9:7C:7F:73:AF:7F:52:60:09:EB:DA:83:36:A6
            X509v3 Authority Key Identifier:
                keyid:36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:7c:c1:d8:1c:86:1a:ed:fb:11:0f:6d:e8:2b:11:f0:3a:d2:
         d9:80:aa:8c:f4:2d:da:b8:f8:75:63:6c:49:fe:30:3b:20:7d:
         14:68:6b:5b:0c:b6:5d:24:70:49:1c:0e:ea:19:46:2b:73:75:
         0d:28:40:97:48:a4:c9:fa:99:c7:6c:1b:35:13:f7:67:9e:00:
         f8:e3:70:af:45:55:c3:2b:61:cb:b6:00:ff:f7:39:ed:8f:5f:
         86:9f:4a:2c:cf:45:40:ff:a2:33:9a:5e:3a:42:3c:77:59:5d:
         29:0c:49:e7:93:40:ea:dc:96:e2:b2:90:ca:64:23:30:56:47:
         27:9f:36:8e:ec:c2:bf:06:1a:9f:10:84:03:a1:34:16:46:81:
         8b:8d:76:7d:6b:52:75:f8:b8:d7:46:88:38:08:87:fe:c5:31:
         23:94:26:69:4a:39:f8:fd:f1:31:eb:c7:e2:8d:14:4d:c3:49:
         46:31:10:3d:12:89:a4:97:0e:e9:1d:c1:a9:d0:86:b2:90:25:
         4d:60:94:88:b0:e0:92:62:b4:3e:68:ac:04:d9:88:a4:b4:27:
         83:da:b5:3d:62:ab:96:1b:c1:8c:99:6d:f7:14:e9:21:0a:17:
         63:dc:9e:31:aa:79:2c:74:c4:9d:82:4e:58:3b:c9:ea:25:0f:
         b2:ab:4e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:57:47 2025 by rpki-client