Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.mft
File:                     nm-wk8ALBix4zOEdID6XGh0H15U.mft (raw, json)
Hash identifier:          RM/sjaiP4e+1NrZMOag1cJuuKv50aG+f4Rqz6xm17JY=
Subject key identifier:   A3:93:4B:0B:12:26:68:26:12:DF:AB:05:93:16:D0:6E:67:4F:19:F8
Authority key identifier: 9E:6F:B0:93:C0:0B:06:2C:78:CC:E1:1D:20:3E:97:1A:1D:07:D7:95
Certificate issuer:       /CN=A91535A9/serialNumber=9E6FB093C00B062C78CCE11D203E971A1D07D795
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nm-wk8ALBix4zOEdID6XGh0H15U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.mft
Manifest number:          EB
Signing time:             Sat 23 Aug 2025 05:28:54 +0000
Manifest this update:     Sat 23 Aug 2025 05:28:53 +0000
Manifest next update:     Sat 30 Aug 2025 05:28:53 +0000
Files and hashes:         1: nm-wk8ALBix4zOEdID6XGh0H15U.crl (hash: xkD0xpsszdP/o5xfSbZNYwW/EajhV9kwy9T5n6WYD10=)
                          2: F2E885E8606D11F0BC4BF772C4F9AE02.roa (hash: FUSwLnOhkkdqLHTPVEfyew8K34UosOQ0YB9/5/JBNDs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.crl
                          rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nm-wk8ALBix4zOEdID6XGh0H15U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91535A9, serialNumber=9E6FB093C00B062C78CCE11D203E971A1D07D795
        Validity
            Not Before: Aug 23 05:28:53 2025 GMT
            Not After : Aug 30 05:28:53 2025 GMT
        Subject: CN=68a95196-5f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8e:8e:68:40:36:29:42:81:87:09:b2:7a:82:
                    63:ec:22:2b:52:4b:7d:7b:e0:3f:bd:ac:6a:02:39:
                    a0:02:e1:bd:aa:65:40:a9:f5:0c:e6:b8:c4:d2:30:
                    f8:8f:d3:d7:04:84:a1:78:34:37:70:1d:aa:17:57:
                    22:8b:5e:d5:5e:6f:33:f9:94:ce:cb:da:dc:99:de:
                    42:7b:96:3c:fb:07:ad:75:68:a1:32:2f:37:ae:33:
                    d1:1d:cc:2e:58:7f:b2:d6:77:2e:02:e1:a8:e3:30:
                    0d:d4:f6:32:86:51:8a:b7:c6:08:dc:86:35:34:a1:
                    47:59:69:56:41:c2:ea:b6:63:09:c4:d7:d0:0a:dc:
                    01:01:b2:8e:54:18:ba:52:ce:a3:81:13:22:6e:74:
                    70:a5:86:90:69:77:87:e2:60:00:60:c9:2b:74:b0:
                    3b:35:c9:89:9f:1e:af:72:bd:39:21:8b:f0:e9:e9:
                    37:3c:fc:88:5d:dd:c5:bd:cf:6c:99:d2:37:a6:c2:
                    68:76:38:5f:2e:21:8a:dd:75:60:e6:83:33:75:5b:
                    f5:b2:a0:4b:ec:3a:10:4e:e1:fd:e2:96:93:f4:3e:
                    07:7b:7e:d0:f1:1d:0f:ea:62:c2:6e:29:d8:dd:9a:
                    56:f3:83:e1:05:a8:a2:45:b4:c7:58:53:8e:fb:89:
                    35:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:93:4B:0B:12:26:68:26:12:DF:AB:05:93:16:D0:6E:67:4F:19:F8
            X509v3 Authority Key Identifier:
                keyid:9E:6F:B0:93:C0:0B:06:2C:78:CC:E1:1D:20:3E:97:1A:1D:07:D7:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nm-wk8ALBix4zOEdID6XGh0H15U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:57:12:bc:72:51:5a:d5:0b:8a:d9:5b:c6:a1:72:80:b3:80:
         be:8f:e7:51:39:43:03:c3:fe:c5:08:f6:1d:0b:be:6e:bc:47:
         94:c5:2e:97:56:a5:39:bc:b6:d1:e4:64:cb:65:20:53:e7:cb:
         f5:a1:41:32:4d:a1:16:39:ae:8d:15:e9:e9:5b:77:68:87:44:
         c1:1f:19:b9:0f:32:e7:1e:4f:b0:79:03:aa:2f:98:f7:de:0f:
         61:23:3b:6f:d1:bb:f0:4c:8b:1a:9a:e2:76:d4:aa:c0:dd:11:
         4c:97:5b:12:ef:72:cd:fe:b5:4f:cd:70:56:5e:2f:08:64:9f:
         72:cc:b5:ea:e9:51:1c:91:bd:e1:ca:10:a1:37:01:f9:1c:bb:
         4b:df:1c:ca:3d:6e:58:9e:54:55:54:c1:91:5f:f4:4b:14:8b:
         14:91:d8:97:f1:01:b3:24:e5:8a:0b:c4:a7:e1:ae:1a:58:b4:
         44:b2:cf:df:a7:18:6e:23:27:0c:6e:0e:b9:e6:29:88:4c:13:
         a6:01:6b:a3:0f:e1:c8:88:37:8f:72:44:d9:ef:7f:2f:ce:01:
         19:fe:50:90:f9:38:2b:9d:94:99:33:0f:22:4a:51:70:f9:6d:
         86:ea:57:0e:6f:f3:c1:e4:84:e7:ac:de:81:08:19:84:58:ba:
         d5:5e:cf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:38:21 2025 by rpki-client