Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
File:                     nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft (raw, json)
Hash identifier:          8x46Cs3RBFSNtX9uRvypK7zRsqSXohRrk8jQwXhYl7E=
Subject key identifier:   7A:CF:28:87:3D:9A:45:76:20:59:BA:12:91:FF:4B:6F:B5:2D:0C:8A
Authority key identifier: 9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20
Certificate issuer:       /CN=A91813F1/serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
Certificate serial:       0926
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
Manifest number:          08FE
Signing time:             Sat 18 Oct 2025 21:28:02 +0000
Manifest this update:     Sat 18 Oct 2025 21:28:01 +0000
Manifest next update:     Sat 25 Oct 2025 21:28:01 +0000
Files and hashes:         1: nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl (hash: 4LIqrn1rrva/uy9p/E8xVvxPrR6cLnGQ+Poes/vcxLM=)
                          2: B7ACB272A25611EFACD47A47C4F9AE02.roa (hash: vo1vQ06IWtOVdoqh+RNSWgatLNqDP616NDuTmCTqgBM=)
                          3: 0A8890FE2F4C11EDB0375D6CC4F9AE02.roa (hash: x+qXnpZHzZY+dh94g38SoTHaDPy2ifolaZ4sk7Pctiw=)
                          4: 096864742F4C11EDB0375D6CC4F9AE02.roa (hash: Qm2aLJkxdL/ExAF+KC+FyvUngFAR4g1LlNO2Ye9aSlg=)
                          5: 0834FF2C2F4C11EDB0375D6CC4F9AE02.roa (hash: zDo3tedfdMOEsVe84vVrZx7v1JGUP/8LspCoxSCfVr8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl
                          rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2342 (0x926)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813F1, serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
        Validity
            Not Before: Oct 18 21:28:01 2025 GMT
            Not After : Oct 25 21:28:01 2025 GMT
        Subject: CN=68f40661-9670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fb:f9:f3:b0:d3:cb:ef:b4:d1:fe:14:a3:8d:
                    ad:ab:b7:33:9c:ae:24:ff:d2:26:3c:4e:fc:fc:e6:
                    cc:28:04:a7:45:8f:02:3b:d9:ce:8a:ea:04:2e:ca:
                    62:7b:7d:7a:15:bc:d4:1e:23:ff:e8:df:84:93:69:
                    ab:e2:da:38:0d:f8:4e:e5:56:c7:5b:77:67:94:94:
                    8c:7c:1b:2c:a2:0d:65:bc:c9:2c:e6:2d:cb:a5:88:
                    97:d6:b3:10:fb:22:1e:ff:3a:6d:68:89:73:3a:7f:
                    7f:dd:5a:fb:27:ab:83:24:e5:53:02:af:c7:3a:25:
                    99:a9:d9:9c:d8:6f:9f:34:2f:2f:ec:b8:cf:70:8f:
                    de:22:fb:ef:1d:dd:1c:79:82:e2:39:ab:8a:ab:5e:
                    49:99:41:4e:4b:5f:dc:7b:81:5f:5a:5a:57:41:40:
                    10:84:1a:15:3c:01:28:72:ec:e5:d2:85:31:d4:82:
                    40:c7:03:da:c7:7a:d9:04:c6:51:b0:3a:6f:20:88:
                    e0:f3:45:e4:30:3d:54:fc:fd:92:85:9a:45:56:42:
                    1c:b7:13:f6:2a:54:ce:d2:b2:d4:ff:99:c6:ae:90:
                    91:54:0c:ea:8c:90:1d:7e:45:49:d9:6a:74:0e:43:
                    8c:ba:9b:82:4a:5a:1e:b2:e2:68:de:9f:22:f3:f9:
                    8f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CF:28:87:3D:9A:45:76:20:59:BA:12:91:FF:4B:6F:B5:2D:0C:8A
            X509v3 Authority Key Identifier:
                keyid:9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:0c:41:bc:1a:45:86:ca:98:d9:0a:50:a7:f2:09:67:e5:5b:
         46:25:90:40:27:9d:78:75:fe:29:24:3e:ce:35:fa:86:48:b5:
         5e:54:5c:56:66:d5:32:ec:71:a4:c5:e2:d0:b2:8c:a9:22:d1:
         90:a4:a7:ed:61:7b:2e:e7:42:4d:57:f1:22:83:62:23:6d:94:
         1e:3f:e3:15:e7:f7:95:84:a5:5b:89:01:f6:21:c8:f4:4a:4d:
         6a:dd:22:12:69:d8:3c:a3:4e:77:74:2b:0a:ba:76:54:2a:9e:
         29:0f:35:08:86:66:05:28:d5:cb:15:04:ca:22:91:ae:76:91:
         ec:4f:98:d0:41:00:ab:6d:ab:e7:68:a6:98:e7:ff:46:c9:8f:
         10:c1:61:c9:d1:ca:a8:8e:c6:59:67:77:38:65:1f:e2:66:34:
         68:20:89:90:f1:e5:91:17:b2:07:44:cc:fa:ee:a0:47:58:3e:
         f6:23:2a:07:85:43:dd:df:e4:dc:f9:4a:89:45:96:ae:d6:bb:
         7a:27:16:9c:d1:0a:db:61:ec:5b:1d:57:c6:f7:1f:1d:50:e9:
         0d:6f:10:88:39:7a:c1:36:8d:c6:09:a2:14:0b:05:3f:7d:d5:
         fb:9c:44:23:b5:c6:4c:ce:23:0c:94:5d:63:ef:2b:cc:3e:af:
         57:c0:f9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:37:29 2025 by rpki-client