Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
File:                     nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft (raw, json)
Hash identifier:          fzjeVEWUoqqcbVSvNblhluAG8u5Q6bkuKJZzqK8j6bk=
Subject key identifier:   3B:13:EE:73:09:DD:11:28:7F:19:D1:52:EA:7F:50:D1:94:AD:5B:05
Authority key identifier: 9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20
Certificate issuer:       /CN=A91813F1/serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
Certificate serial:       08D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
Manifest number:          08B4
Signing time:             Fri 30 May 2025 20:45:01 +0000
Manifest this update:     Fri 30 May 2025 20:45:01 +0000
Manifest next update:     Fri 06 Jun 2025 20:45:01 +0000
Files and hashes:         1: nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl (hash: SGPrSOyKdK/o5c19W4geF5Qvc+qTMTo/evFsG4fCMwU=)
                          2: B7ACB272A25611EFACD47A47C4F9AE02.roa (hash: vLwsN6XlSbBFyRzXSCrEwO8DAZca1xs9SHlcyqnbxYE=)
                          3: 0A8890FE2F4C11EDB0375D6CC4F9AE02.roa (hash: sSNo+/dLUh/bje18BPzZPQTxMEMoTmVIKuRUAdfqRAo=)
                          4: 096864742F4C11EDB0375D6CC4F9AE02.roa (hash: jla9AG1gExZIQpCD/EW4q3Wp+FwlnerqSvxfxkw43CI=)
                          5: 0834FF2C2F4C11EDB0375D6CC4F9AE02.roa (hash: jsKgrIPw9kysznIIPdP3oqonMHQ5VwN13abO5ggVkg4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl
                          rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 20:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2264 (0x8d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813F1, serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
        Validity
            Not Before: May 30 20:45:01 2025 GMT
            Not After : Jun  6 20:45:01 2025 GMT
        Subject: CN=683a18cd-d884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f4:cb:04:bb:ef:29:0f:f1:ff:7d:a9:e5:8a:
                    1f:ba:1b:77:e1:3a:a5:a7:4c:6c:06:05:8e:6b:14:
                    19:5b:a7:d2:ca:0f:2e:31:e6:51:21:95:16:1f:47:
                    9b:76:5c:c7:42:50:24:fd:29:bf:1e:65:2f:e8:24:
                    6d:21:98:0c:58:10:a6:06:a6:f2:6c:74:02:42:29:
                    95:d8:b4:59:01:ae:51:f1:c1:ca:8f:ec:08:5a:e9:
                    1f:cc:a7:7f:bf:39:b4:0e:2b:4a:6d:c0:0b:f6:3b:
                    70:b5:4a:a5:b5:84:3d:f9:3e:6a:f4:85:fc:49:a6:
                    fc:f1:f5:00:44:6b:8c:2a:98:a7:f0:00:27:83:56:
                    2e:9f:af:2a:ed:4e:80:a6:b1:57:ea:d0:c7:69:d3:
                    62:25:19:1e:8f:b8:31:b1:a6:6e:84:7a:17:bc:2b:
                    79:bd:f6:bf:51:85:e8:bf:54:21:06:98:90:68:79:
                    06:41:18:cc:67:ba:ec:27:ed:63:d7:c7:a4:fd:d3:
                    f4:c7:d2:a8:69:33:38:00:24:a5:62:8c:b5:72:33:
                    38:0d:04:9a:20:78:70:98:ca:06:ac:8a:f1:4d:45:
                    59:2c:f4:e3:98:60:19:af:d4:68:67:66:bf:7c:98:
                    67:bd:57:7e:be:07:0d:8b:c1:ef:0a:80:ab:72:d7:
                    58:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:13:EE:73:09:DD:11:28:7F:19:D1:52:EA:7F:50:D1:94:AD:5B:05
            X509v3 Authority Key Identifier:
                keyid:9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:8c:1d:e1:49:38:39:2e:3f:a2:8d:11:75:7c:46:b4:1e:f5:
         f6:7b:95:f9:62:1d:44:77:33:1b:73:57:f2:ab:72:e0:05:a0:
         b8:d8:b8:d1:8c:37:96:62:4c:2b:7a:10:23:0c:b3:d4:e4:f9:
         cb:fc:af:18:4e:e1:38:24:a7:d9:4c:b8:38:66:97:ca:bc:c2:
         82:1b:40:74:52:19:0e:05:01:9f:9e:cf:e4:44:d0:84:a9:29:
         79:0c:a8:32:88:92:65:a8:1a:a2:d8:48:fb:86:d7:38:d3:77:
         50:a7:59:98:ed:43:48:86:18:3f:97:92:e4:5c:d1:8a:a4:c4:
         7d:2b:0b:bb:dc:2e:41:70:62:17:e6:a2:b9:d9:d6:7b:ff:a9:
         d6:d8:23:f8:fe:ac:51:df:e2:31:76:93:e7:98:33:87:4d:94:
         bf:7e:35:5b:3f:85:ad:de:50:6e:01:ef:90:83:d2:f7:c4:1d:
         2a:fb:5e:17:6b:bd:ba:c4:a8:b4:32:5b:44:4b:c3:2a:cf:d5:
         a2:5f:c0:18:c0:d1:ae:95:36:de:22:ee:1c:ea:76:7f:3e:f0:
         cb:e3:15:08:83:4c:74:bb:0a:ea:01:8a:ec:7a:d5:40:54:49:
         79:dd:82:3f:2e:c1:dc:b4:5a:6b:1f:89:f2:3e:b6:9c:2a:cd:
         24:bb:40:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:53:16 2025 by rpki-client