Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.mft
File:                     nm-wk8ALBix4zOEdID6XGh0H15U.mft (raw, json)
Hash identifier:          cLfsusLSUl/ppkvHaNp+WjCNt3Lcfj1pB0D3kOGhUIY=
Subject key identifier:   70:A4:93:E1:60:B5:83:96:6F:5F:53:EC:2B:C9:93:2E:17:9E:6B:30
Authority key identifier: 9E:6F:B0:93:C0:0B:06:2C:78:CC:E1:1D:20:3E:97:1A:1D:07:D7:95
Certificate issuer:       /CN=A91535A9/serialNumber=9E6FB093C00B062C78CCE11D203E971A1D07D795
Certificate serial:       EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nm-wk8ALBix4zOEdID6XGh0H15U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.mft
Manifest number:          EA
Signing time:             Thu 21 Aug 2025 05:30:27 +0000
Manifest this update:     Thu 21 Aug 2025 05:30:26 +0000
Manifest next update:     Thu 28 Aug 2025 05:30:26 +0000
Files and hashes:         1: nm-wk8ALBix4zOEdID6XGh0H15U.crl (hash: e9zBj5IsQ8X84p8r72ma/QxcEVqO+Ez1nbm3bv5E3es=)
                          2: F2E885E8606D11F0BC4BF772C4F9AE02.roa (hash: FUSwLnOhkkdqLHTPVEfyew8K34UosOQ0YB9/5/JBNDs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.crl
                          rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nm-wk8ALBix4zOEdID6XGh0H15U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Aug 2025 05:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91535A9, serialNumber=9E6FB093C00B062C78CCE11D203E971A1D07D795
        Validity
            Not Before: Aug 21 05:30:26 2025 GMT
            Not After : Aug 28 05:30:26 2025 GMT
        Subject: CN=68a6aef2-adf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2f:00:b3:ff:d3:02:98:3d:37:a0:58:a7:39:
                    92:99:65:59:5c:c5:84:83:a7:bc:15:06:e1:49:14:
                    7b:50:05:45:fb:77:f0:8f:99:5a:4c:b4:5a:aa:d4:
                    19:bc:38:f3:1d:fb:e1:be:1a:5c:4b:42:90:60:e4:
                    87:7c:dd:23:37:0d:91:24:46:55:c3:a4:25:c6:35:
                    cb:a3:1d:26:b6:1f:f2:25:fc:13:ff:60:78:7b:62:
                    93:b3:e1:be:ef:d6:fd:3e:43:5c:4b:57:82:50:5b:
                    b4:99:02:2f:56:d0:0b:8f:04:1a:04:4f:d2:6f:22:
                    06:22:34:86:17:65:99:60:df:75:d2:ea:a9:82:35:
                    15:bc:ae:53:bb:cd:96:8a:8f:a3:28:cf:d9:62:02:
                    82:bc:ba:5c:6c:5b:78:a1:4d:14:bd:47:df:69:34:
                    18:97:c2:da:13:29:de:fc:74:02:c2:cb:05:33:5f:
                    cc:46:7d:f6:97:0f:dc:9a:d2:58:06:d3:b4:d3:3f:
                    60:48:c0:31:cf:3d:6a:6c:be:8c:a9:00:48:6e:d2:
                    a8:fc:fe:b3:5f:6e:da:35:ae:e3:7c:0f:e5:09:9b:
                    7b:c2:5a:18:ea:ed:be:66:87:47:b4:8a:af:70:3b:
                    f1:ac:68:82:d0:87:63:3a:18:c1:62:68:c6:d3:36:
                    c8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A4:93:E1:60:B5:83:96:6F:5F:53:EC:2B:C9:93:2E:17:9E:6B:30
            X509v3 Authority Key Identifier:
                keyid:9E:6F:B0:93:C0:0B:06:2C:78:CC:E1:1D:20:3E:97:1A:1D:07:D7:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nm-wk8ALBix4zOEdID6XGh0H15U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:13:d6:ef:45:c4:7f:95:ed:c7:d4:7a:fd:10:ba:2d:62:7f:
         0a:75:cf:ba:24:a3:01:a4:a1:ea:c9:24:c3:bd:49:ce:38:e7:
         80:c8:07:9d:80:66:98:58:80:60:c5:d9:b7:26:ce:83:37:74:
         8b:6f:f3:67:be:cc:5c:38:db:a2:95:66:68:d8:ad:e3:fe:4d:
         39:a3:66:26:10:65:c2:6b:9d:6a:03:60:a3:dd:71:8f:29:93:
         44:25:96:c9:ed:92:d5:9d:ca:ef:94:3a:ff:a7:8f:f3:21:d3:
         bc:af:18:45:d4:da:3c:b3:d2:34:8b:52:c6:b1:59:9b:14:78:
         e7:fa:c6:ec:e5:72:2d:aa:45:51:99:e3:b4:62:e1:1f:c6:82:
         7d:7e:c7:9f:7a:cb:5f:0f:59:80:cd:ea:e6:b1:a0:f2:92:37:
         2b:de:37:30:52:b1:aa:31:eb:eb:2c:08:c3:86:e1:6d:74:6e:
         71:78:84:1b:f3:f0:ca:43:9f:a6:19:b4:c9:85:fc:ef:2b:07:
         05:b9:0d:07:e0:a7:22:72:92:92:a7:4d:ff:6b:a1:d1:ae:5e:
         3a:2f:e0:41:ad:96:a0:56:4f:69:a1:00:1c:7f:4d:d2:0b:c5:
         be:05:ac:9d:dd:e6:04:a2:0c:3b:8b:3f:b6:06:45:fb:04:1b:
         0e:a5:c9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:32:15 2025 by rpki-client