Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
File:                     nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft (raw, json)
Hash identifier:          G9BspkEWRWohPoiyv5ImY2apC2/QPNRxuDrnLTyrCek=
Subject key identifier:   06:68:9E:E2:25:D6:34:C8:FF:A5:CB:59:E7:38:E6:8D:02:4F:63:BD
Authority key identifier: 9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20
Certificate issuer:       /CN=A91813F1/serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
Certificate serial:       08E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
Manifest number:          08C5
Signing time:             Wed 02 Jul 2025 20:45:56 +0000
Manifest this update:     Wed 02 Jul 2025 20:45:56 +0000
Manifest next update:     Wed 09 Jul 2025 20:45:56 +0000
Files and hashes:         1: nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl (hash: rYCvGt49p9fSOdug9u4U6HJhhPAPRSrPsta37ELE6NE=)
                          2: B7ACB272A25611EFACD47A47C4F9AE02.roa (hash: vLwsN6XlSbBFyRzXSCrEwO8DAZca1xs9SHlcyqnbxYE=)
                          3: 0A8890FE2F4C11EDB0375D6CC4F9AE02.roa (hash: sSNo+/dLUh/bje18BPzZPQTxMEMoTmVIKuRUAdfqRAo=)
                          4: 096864742F4C11EDB0375D6CC4F9AE02.roa (hash: jla9AG1gExZIQpCD/EW4q3Wp+FwlnerqSvxfxkw43CI=)
                          5: 0834FF2C2F4C11EDB0375D6CC4F9AE02.roa (hash: jsKgrIPw9kysznIIPdP3oqonMHQ5VwN13abO5ggVkg4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl
                          rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 20:45:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2281 (0x8e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813F1, serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
        Validity
            Not Before: Jul  2 20:45:56 2025 GMT
            Not After : Jul  9 20:45:56 2025 GMT
        Subject: CN=68659a84-3378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:89:c6:09:c0:53:7d:7e:f4:7f:4a:52:2c:7a:
                    c4:3c:70:25:3e:ba:a0:01:b8:8e:e0:40:10:e6:f4:
                    4f:30:3b:16:f1:0b:5f:fa:af:5a:a8:b6:bc:c2:73:
                    f1:ea:53:e6:ba:3f:ec:a7:61:23:09:cf:8e:bc:18:
                    79:44:8f:f2:fe:71:d3:eb:54:b2:c9:90:c2:e3:14:
                    9b:b0:82:2f:69:1e:37:da:c9:27:fb:ac:60:11:02:
                    3d:3e:47:60:c4:27:c8:c4:3f:08:ec:75:d8:e7:98:
                    fc:c0:c7:b2:0e:9c:cb:91:bb:ec:f4:fd:17:3e:22:
                    44:46:ff:3d:a0:49:3f:da:43:2d:11:2f:9d:68:d9:
                    10:29:b0:88:15:60:25:5c:c0:d7:cc:82:6e:d3:bb:
                    56:ff:37:78:7e:e7:d3:63:58:64:24:2e:94:a3:22:
                    70:c6:08:26:e6:54:20:4c:60:99:03:30:14:18:d4:
                    4b:41:49:25:07:fe:f6:31:fa:b8:a8:9d:9d:24:b3:
                    ae:4a:02:af:2e:df:cf:21:8e:e0:56:33:13:8b:a1:
                    03:75:66:53:65:c7:c4:6b:a1:c4:5c:95:74:f4:ca:
                    af:1c:ad:e8:7e:a8:2a:31:94:76:17:c0:1a:57:33:
                    e2:af:7c:63:d1:7d:4a:bd:22:c8:07:ec:90:78:1d:
                    20:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:68:9E:E2:25:D6:34:C8:FF:A5:CB:59:E7:38:E6:8D:02:4F:63:BD
            X509v3 Authority Key Identifier:
                keyid:9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:60:84:62:28:22:7c:e6:06:76:d4:f3:4e:f7:43:2d:4a:b2:
         92:97:5f:2e:0f:ad:fc:bd:bf:bc:8e:34:35:54:f2:df:55:26:
         d6:ca:44:e6:44:ba:7c:b9:8a:c3:a5:77:48:8a:30:93:4e:0e:
         eb:1d:0b:91:55:91:df:88:8d:c6:dc:f4:ed:f7:9c:ee:2e:68:
         98:5a:6d:6a:0e:e3:fb:25:b4:e6:af:2d:1b:49:9e:45:b2:ee:
         cd:9c:07:a5:69:ed:60:bd:aa:4e:97:eb:c5:92:e5:07:40:5a:
         f9:d8:e6:03:ce:46:b0:f5:f3:f3:41:f2:56:f9:eb:69:26:fb:
         2a:74:19:e6:41:5d:3d:66:ec:7c:8c:1d:b6:7d:c1:9c:2d:ea:
         6e:51:52:e4:df:75:f4:d1:ba:60:21:c1:06:ca:76:99:94:bc:
         4b:e5:03:86:50:13:32:7d:ff:d4:ed:41:a7:42:36:b3:6d:dd:
         ef:1c:b4:bc:12:38:ed:c4:2c:2b:95:c3:ac:ae:72:65:4c:cb:
         92:17:ac:08:7e:8e:76:59:8f:f5:3e:c8:a7:a0:72:ea:f9:3a:
         78:78:1a:35:a9:0a:23:43:ef:49:c5:ed:1e:20:03:b8:0b:c2:
         c7:35:a2:b6:5b:33:4b:51:a5:f2:03:56:8e:e4:9a:9b:c1:52:
         f8:2f:44:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 11:53:05 2025 by rpki-client