Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
File:                     NttE1MFZiGc4IVpWELEQwkSGylY.mft (raw, json)
Hash identifier:          az/HkTKBDWdi/1KDnGM3wWZev4vptGWL0NB2X3SxcQE=
Subject key identifier:   24:14:F9:AD:49:14:C5:3A:59:F0:68:9C:E8:F3:2D:1C:3A:95:0C:8C
Authority key identifier: 36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56
Certificate issuer:       /CN=A91C6515/serialNumber=36DB44D4C159886738215A5610B110C24486CA56
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
Manifest number:          06
Signing time:             Wed 23 Jul 2025 08:33:30 +0000
Manifest this update:     Wed 23 Jul 2025 08:33:30 +0000
Manifest next update:     Wed 30 Jul 2025 08:33:30 +0000
Files and hashes:         1: NttE1MFZiGc4IVpWELEQwkSGylY.crl (hash: iLfbmbciK8vOM4UZXit/B10QiRV28iqazdxeE5aw4fM=)
                          2: E5723CA260C111F0A9EB0333C4F9AE02.roa (hash: dgVomHsPjy8dnzAeq1krltAgv8t1jsAsT7S8XSGxsvA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl
                          rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 08:33:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6515, serialNumber=36DB44D4C159886738215A5610B110C24486CA56
        Validity
            Not Before: Jul 23 08:33:30 2025 GMT
            Not After : Jul 30 08:33:30 2025 GMT
        Subject: CN=68809e5a-5493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:72:64:ed:1e:b1:df:37:19:24:4b:56:0b:12:
                    37:07:92:cd:2a:bd:0d:15:d2:8f:a7:37:bb:cc:20:
                    1a:9c:11:0c:cd:20:c2:5c:11:6d:fe:16:e5:7e:44:
                    49:ef:b9:7b:55:dd:ef:aa:f2:e6:9b:ae:b5:56:04:
                    8e:4d:29:28:4b:5d:07:f7:10:61:24:b4:75:ed:e0:
                    6c:0f:eb:0f:0b:55:07:15:58:a5:b0:87:e1:86:a0:
                    56:22:8b:ac:0b:d3:91:f3:bf:9c:93:33:0f:39:fd:
                    a6:d3:b1:28:fb:95:f1:be:c5:ae:11:3a:22:34:47:
                    6b:fd:a9:0e:ac:b6:1b:0f:6a:35:0d:af:53:86:8c:
                    8f:4c:1f:05:d6:26:07:62:ce:86:f4:27:37:8d:93:
                    db:5e:61:1a:69:01:27:72:07:f2:3b:3a:e0:5e:f1:
                    39:cf:6c:ea:b9:c6:89:a9:af:b3:8e:08:9a:db:28:
                    17:d9:d5:94:78:99:22:96:02:29:68:8b:96:a4:be:
                    36:a4:4c:59:6b:71:cb:a7:d2:5f:4b:0b:a2:6f:d4:
                    36:75:6d:5c:23:3b:19:45:75:66:74:45:e6:5e:c5:
                    69:55:86:5f:8b:3a:82:55:31:8e:9e:a6:35:b8:89:
                    a3:f5:93:cd:e6:e5:9f:ca:d9:99:36:9f:d6:75:4b:
                    6b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:14:F9:AD:49:14:C5:3A:59:F0:68:9C:E8:F3:2D:1C:3A:95:0C:8C
            X509v3 Authority Key Identifier:
                keyid:36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:0a:73:e9:1d:f5:20:81:3a:f8:68:5d:6e:ed:af:b7:d1:41:
         e5:2a:b3:a7:ed:5f:d2:2f:59:a2:2d:31:1c:6b:d4:52:ab:0c:
         a8:f0:d1:2d:7a:84:53:5a:22:b4:06:2c:5a:cd:fb:29:d7:7d:
         84:c6:bd:26:ce:56:74:4e:f3:36:6c:a7:94:c9:93:54:94:f8:
         72:b1:f0:d2:db:90:a4:a6:fd:35:d6:ba:cc:ce:e0:22:4e:6d:
         49:12:44:92:23:74:ec:b4:8b:72:da:df:25:56:99:ca:d0:56:
         2d:ee:d2:ae:37:fe:c4:30:ef:8b:79:93:a9:36:db:7e:8b:2b:
         ab:de:57:d0:62:35:0c:e3:29:b3:f4:84:99:18:e9:fa:0f:48:
         7f:86:2b:98:8c:f4:33:fa:17:fb:38:d8:b6:36:b5:87:b9:20:
         65:9c:24:dd:cb:f6:14:21:60:53:1e:63:c4:7c:d0:df:45:1b:
         8e:40:0e:c8:a5:d1:85:42:55:32:2c:13:88:86:2b:6d:78:1f:
         de:dc:05:95:fc:c3:38:8c:c7:db:dd:ba:f5:ba:78:a9:a3:17:
         9d:93:a2:e3:09:30:ef:c5:68:0a:62:a5:b5:10:91:ee:f0:43:
         72:6d:98:54:14:1c:99:20:50:b4:48:a1:8e:5f:9e:99:0f:f4:
         45:b7:c9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 18:10:11 2025 by rpki-client