Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91287DA/089251A87B2611EB8FEBC515C4F9AE02/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.mft
File:                     N50VR7u_SMJTyT6NQyZ9TvvZtoQ.mft (raw, json)
Hash identifier:          gJW8zzROm/YYQKutM8Sf16GmlC5gKhlUX7ffFm94Mcw=
Subject key identifier:   AD:42:FD:CD:31:26:19:58:05:EF:AB:8A:3C:C5:A5:0D:11:8A:26:39
Authority key identifier: 37:9D:15:47:BB:BF:48:C2:53:C9:3E:8D:43:26:7D:4E:FB:D9:B6:84
Certificate issuer:       /CN=A91287DA/serialNumber=379D1547BBBF48C253C93E8D43267D4EFBD9B684
Certificate serial:       0698
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91287DA/089251A87B2611EB8FEBC515C4F9AE02/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.mft
Manifest number:          0689
Signing time:             Wed 02 Jul 2025 22:33:57 +0000
Manifest this update:     Wed 02 Jul 2025 22:33:57 +0000
Manifest next update:     Wed 09 Jul 2025 22:33:57 +0000
Files and hashes:         1: N50VR7u_SMJTyT6NQyZ9TvvZtoQ.crl (hash: BbPKcvbLaT0SNio6hFYhGCG8fdMlzXvUwKeqmtfTgAQ=)
                          2: 9F033492FEAE11ECAA127057C4F9AE02.roa (hash: UiAxwOJGolvvM3wOPBcTvUQJdT8G/g6+C2S/E2Mjv04=)
                          3: E7C01CD0804211EC8FFC2242C4F9AE02.roa (hash: qAxobZOPOW6ajYBJQ68Ayz1K9DTh5cV7QVm0hKTfaj4=)
                          4: 76EF24FE7B2711EBB00AAE16C4F9AE02.roa (hash: 7/KMq5xxyPT3ZAAgdOT1xSgGQbTgyz7GM8dFKeeuB+k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91287DA/089251A87B2611EB8FEBC515C4F9AE02/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.crl
                          rsync://rpki.apnic.net/member_repository/A91287DA/089251A87B2611EB8FEBC515C4F9AE02/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 22:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1688 (0x698)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91287DA, serialNumber=379D1547BBBF48C253C93E8D43267D4EFBD9B684
        Validity
            Not Before: Jul  2 22:33:57 2025 GMT
            Not After : Jul  9 22:33:57 2025 GMT
        Subject: CN=6865b3d5-fea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c4:0f:46:47:f5:71:05:7a:a3:9a:4a:e9:f1:
                    1f:f3:5e:93:fd:f2:a3:37:e5:6a:73:3d:a6:b3:7e:
                    a9:e0:ec:4e:17:c9:14:11:e3:93:b1:dd:54:63:46:
                    6e:14:ea:16:31:55:18:56:6a:0a:de:58:cf:49:20:
                    16:97:f2:d8:be:bb:f8:dd:5b:4d:9c:7e:65:39:9a:
                    0c:57:39:c4:32:d1:5d:84:e5:83:1f:1b:91:84:8d:
                    06:dc:b1:1c:28:6b:4e:ad:0c:06:60:b4:d8:e7:2f:
                    ac:c9:46:90:6d:2a:f5:2d:1d:3d:96:9e:80:ff:ac:
                    1b:85:7b:ca:a4:27:31:fc:7c:a3:a6:57:43:99:83:
                    98:fe:7f:47:7c:0a:2b:b2:b0:f9:0b:b2:88:e9:82:
                    67:b6:8b:8c:bf:cd:62:57:5c:62:57:98:a5:a5:51:
                    59:80:2b:9a:f4:d1:61:be:a1:7a:40:23:6e:de:08:
                    43:ea:4e:fb:d0:23:5b:c5:4c:52:bd:ba:43:de:de:
                    70:f3:72:63:67:cc:c7:e5:4c:47:d9:1a:60:b0:9f:
                    ec:43:60:be:79:b4:7b:7e:49:1a:3b:2f:40:7a:a5:
                    45:0d:a7:0a:63:8c:cf:fa:0e:9b:49:19:ca:03:69:
                    f3:9f:91:2f:ef:50:6e:47:72:d2:c6:2d:80:e1:44:
                    db:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:42:FD:CD:31:26:19:58:05:EF:AB:8A:3C:C5:A5:0D:11:8A:26:39
            X509v3 Authority Key Identifier:
                keyid:37:9D:15:47:BB:BF:48:C2:53:C9:3E:8D:43:26:7D:4E:FB:D9:B6:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91287DA/089251A87B2611EB8FEBC515C4F9AE02/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91287DA/089251A87B2611EB8FEBC515C4F9AE02/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ac:9c:cd:89:68:a7:97:9c:b5:60:45:cd:70:21:ab:90:06:
         ef:b6:97:cc:0a:25:16:f6:ea:f5:fc:e4:92:ef:63:95:53:e4:
         5a:da:c1:c7:b9:26:5d:1a:d4:37:23:fb:5c:b0:40:14:3e:70:
         b9:01:f9:bd:d5:d4:82:0c:3d:fc:2b:61:69:02:b7:cd:76:36:
         17:29:5c:53:fb:f9:9b:f8:7f:ec:cf:96:66:d8:de:a9:c6:f1:
         1d:3b:a8:37:55:69:3c:14:86:93:1c:7f:b9:54:b3:a4:78:66:
         0d:68:be:3f:f1:65:9b:2e:6f:42:d4:22:ab:96:60:4a:5d:19:
         89:f7:b5:38:47:de:a5:f0:76:71:32:90:b4:7f:be:13:da:ed:
         d2:96:26:dc:77:a9:fb:4a:aa:b2:5d:53:73:d5:79:3c:05:70:
         af:8d:ee:35:03:e5:ea:59:f6:0c:4f:5e:40:49:fe:3d:11:42:
         cc:76:11:c0:c2:9d:a1:fb:e7:c8:fc:1e:ff:9e:e3:f4:b8:73:
         7e:7f:c5:cb:00:41:0e:91:31:42:fb:a5:60:76:63:22:51:9f:
         24:5a:ef:31:3b:c9:7c:35:4d:f8:c2:61:e1:ba:63:c9:6e:47:
         90:b4:eb:17:33:73:da:13:6d:35:11:89:d0:51:d3:9d:55:94:
         de:52:db:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjg3REExMTAvBgNVBAUTKDM3OUQxNTQ3QkJCRjQ4QzI1M0M5M0U4RDQzMjY3RDRF
RkJEOUI2ODQwHhcNMjUwNzAyMjIzMzU3WhcNMjUwNzA5MjIzMzU3WjAYMRYwFAYD
VQQDEw02ODY1YjNkNS1mZWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAysQPRkf1cQV6o5pK6fEf816T/fKjN+Vqcz2ms36p4OxOF8kUEeOTsd1UY0Zu
FOoWMVUYVmoK3ljPSSAWl/LYvrv43VtNnH5lOZoMVznEMtFdhOWDHxuRhI0G3LEc
KGtOrQwGYLTY5y+syUaQbSr1LR09lp6A/6wbhXvKpCcx/HyjpldDmYOY/n9HfAor
srD5C7KI6YJntouMv81iV1xiV5ilpVFZgCua9NFhvqF6QCNu3ghD6k770CNbxUxS
vbpD3t5w83JjZ8zH5UxH2RpgsJ/sQ2C+ebR7fkkaOy9AeqVFDacKY4zP+g6bSRnK
A2nzn5Ev71BuR3LSxi2A4UTb7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1C/c0x
JhlYBe+rijzFpQ0RiiY5MB8GA1UdIwQYMBaAFDedFUe7v0jCU8k+jUMmfU772baE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODdEQS8wODkyNTFBODdC
MjYxMUVCOEZFQkM1MTVDNEY5QUUwMi9ONTBWUjd1X1NNSlR5VDZOUXlaOVR2dlp0
b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL041MFZSN3VfU01KVHlUNk5ReVo5VHZ2WnRvUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
ODdEQS8wODkyNTFBODdCMjYxMUVCOEZFQkM1MTVDNEY5QUUwMi9ONTBWUjd1X1NN
SlR5VDZOUXlaOVR2dlp0b1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAUrJzNiWinl5y1YEXNcCGrkAbvtpfMCiUW9ur1/OSS72OVU+Ra2sHH
uSZdGtQ3I/tcsEAUPnC5Afm91dSCDD38K2FpArfNdjYXKVxT+/mb+H/sz5Zm2N6p
xvEdO6g3VWk8FIaTHH+5VLOkeGYNaL4/8WWbLm9C1CKrlmBKXRmJ97U4R96l8HZx
MpC0f74T2u3Slibcd6n7SqqyXVNz1Xk8BXCvje41A+XqWfYMT15ASf49EULMdhHA
wp2h++fI/B7/nuP0uHN+f8XLAEEOkTFC+6VgdmMiUZ8kWu8xO8l8NU34wmHhumPJ
bkeQtOsXM3PaE201EYnQUdOdVZTeUtsI
-----END CERTIFICATE-----
Generated at Thu Jul 3 06:10:58 2025 by rpki-client