Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
File:                     nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft (raw, json)
Hash identifier:          xevpjsTRO0xHpJ3qwbs5FKkCTNnAkfA4MmsnNGu3pXE=
Subject key identifier:   39:A8:04:51:0C:07:7E:1C:92:97:B1:BB:CD:85:EF:42:76:C4:94:A7
Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99
Certificate issuer:       /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
Certificate serial:       0E88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
Manifest number:          0DDE
Signing time:             Fri 22 Aug 2025 18:06:23 +0000
Manifest this update:     Fri 22 Aug 2025 18:06:22 +0000
Manifest next update:     Fri 29 Aug 2025 18:06:22 +0000
Files and hashes:         1: nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl (hash: UziDwXFkHoTU0UC90hBq6M2HFgLunH77tta13bg9xWE=)
                          2: 7072DE7601C911EC9286E827C4F9AE02.roa (hash: 7msEvTLtFsUPExajJssY7rK4WVcg4LZn9GJ36tHnfps=)
                          3: 72EB65AAC96511EDB2A13779C4F9AE02.roa (hash: EKrxivQN/ugEIGuNskep3asGKS1SHAvX1FnHQ+xTspc=)
                          4: 88A00388193111EB9E0A6A49C4F9AE02.roa (hash: u3WzgpaL6M5sXXo26nPKh9UHSPFb46VhuO2Q5Fo8Shs=)
                          5: 81CDB96A53F111EB85FBFA19C4F9AE02.roa (hash: NWo/6+CZ9HQYfqESvTvUnv7ahdvIp39DlAFteKyJz6Y=)
                          6: 0741B84C2FFA11EB9544F785C4F9AE02.roa (hash: mTcIHah4w3Vjv+PUpTnmqnHZ/WWcS1sHh5BVs3GE+UQ=)
                          7: 12F0D72E7BC111EA8503D815C4F9AE02.roa (hash: xGtgEmqtoxW1ZnFqrfdXZFVQbRuwiMqE40Ohns82lks=)
                          8: 0D90C6C899BC11EEBF0F7411C4F9AE02.roa (hash: DbQzBvOnAFe3BB3LeWsRDpUaJHvQEKXpReB3hECf9GM=)
                          9: B6A7D6FCCAEA11EE8E1B2D36C4F9AE02.roa (hash: SXM3r93+JAbfUFOgTJZWpNNuc7IK/ZoNqCIsmPIym1s=)
                          10: 378C18A43D3D11EAA59A8012C4F9AE02.roa (hash: HNDIzi1kzv+rbEdjXVJF19/xDZWlePAah9JkFcYlECE=)
                          11: 9F71391C684F11EAB45B6F4FC4F9AE02.roa (hash: jVu5ZnLYMd3KFvMDPxIr2Kr82SJ5+hpIDGoI5dhGF7o=)
                          12: 60B3CD6EAF2E11EEBF12DF45C4F9AE02.roa (hash: 1e5MpWXXLnucpXgA7+/6NcCslKn9LXNV+RznqlHIuF0=)
                          13: D17A895C0C5D11EAB1A29D67C4F9AE02.roa (hash: EZcxncfNl0zD/tSncvn3SUo/vaEA9kPik+cwYMuomd0=)
                          14: 2152FB1650C511EAB566FE61C4F9AE02.roa (hash: qiruACIeUuWCHVE9fSq/awWWHhKH4G60m/pcIC2u5z8=)
                          15: 915FFF14A5AF11EAB039ED67C4F9AE02.roa (hash: 2jainDeXw/J702lQhxkzNdpAlcOPjELdE2rK7IEazhc=)
                          16: 03774914696211EC8A05D115C4F9AE02.roa (hash: /71jeZ/z/bjdOuocI7pJpODjcutgjWmyBXnbScV8x34=)
                          17: EDE3E1EE306D11EB9AEE3E86C4F9AE02.roa (hash: zfIXPPCdkOaknfqYs53DeFIT3TNh9PqHIQnfhYmK5wM=)
                          18: B07EF7408DDD11EA8B5F824BC4F9AE02.roa (hash: SBkKKnAR6IJ2hBnL0p0PNg19RBJEETP5xc3S8pI7apE=)
                          19: 45F4DDA265CF11EB9E3CFA6FC4F9AE02.roa (hash: IXKoMwA1CHlc+rwm36botjnh/fDCInGR5gYfUdLmCvQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl
                          rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 18:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3720 (0xe88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
        Validity
            Not Before: Aug 22 18:06:22 2025 GMT
            Not After : Aug 29 18:06:22 2025 GMT
        Subject: CN=68a8b19f-63af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c0:d0:b7:4e:a5:55:d2:38:99:1d:58:1b:7f:
                    de:ad:f0:af:a9:3b:96:f8:f0:b1:a6:40:03:73:90:
                    b1:0a:12:26:d6:95:6c:09:f4:29:b6:70:33:f3:f4:
                    fc:27:67:88:50:46:7a:97:69:18:6c:c2:97:ae:59:
                    13:e4:42:cc:b8:c9:28:87:80:b6:89:13:9c:31:95:
                    60:50:7e:bf:ba:ea:76:d7:d4:5a:eb:4a:49:6e:28:
                    4b:ea:78:51:e2:48:2c:70:41:14:93:59:94:22:41:
                    54:3c:3e:1d:90:17:0f:c9:30:9c:8d:72:32:c3:37:
                    a5:d2:3e:df:69:be:23:af:31:25:95:59:ca:be:d3:
                    73:97:56:d8:f9:1c:83:ad:43:ac:f9:13:d2:40:0c:
                    73:50:07:23:7b:b3:7a:79:08:d1:41:8a:44:40:e6:
                    ca:a4:cf:c3:9a:aa:65:4e:ac:5e:0c:60:8b:93:e0:
                    6a:3d:c3:e9:3f:c3:a3:a7:48:bd:a2:b8:3c:60:af:
                    6d:b9:52:e9:a7:bd:67:51:a3:d3:41:da:42:fa:a0:
                    99:c2:87:8c:2e:bd:eb:98:ce:21:01:87:18:98:89:
                    0d:e9:7a:d2:09:50:3a:23:47:27:cd:ff:c3:6d:94:
                    44:8e:93:b8:8b:5d:fd:44:f5:56:2c:23:9a:c5:22:
                    85:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A8:04:51:0C:07:7E:1C:92:97:B1:BB:CD:85:EF:42:76:C4:94:A7
            X509v3 Authority Key Identifier:
                keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:69:18:b6:0d:e3:db:d6:8a:5e:76:a5:bf:27:38:7d:66:07:
         16:fc:d6:94:ca:35:a9:f0:9c:10:0f:d4:45:97:e9:69:0b:a8:
         ac:51:d4:e9:76:76:05:fb:83:75:02:22:82:8d:5b:f8:b6:2e:
         d7:ea:95:a9:e8:1e:ef:18:81:70:2f:b4:ca:62:53:f6:e6:38:
         1e:77:c5:9d:a5:48:c1:7a:47:52:4c:2d:ce:48:7f:a6:22:97:
         7f:51:7d:47:96:7d:07:fc:4c:31:8d:86:12:fd:d4:b2:7a:63:
         20:6b:27:fc:1b:e7:ab:77:db:7b:92:55:4a:3c:e3:6c:8e:43:
         f4:cb:f9:3d:b9:dc:53:7f:39:7a:fc:75:6d:f2:66:d6:d4:3f:
         5d:ff:b8:a7:6d:2e:62:bf:d3:0d:34:36:17:90:6c:12:ba:35:
         aa:44:9d:12:23:b1:16:94:c5:e5:46:a2:13:64:4f:7c:b8:d7:
         f6:df:0c:6d:2e:fe:a2:6c:ba:e9:68:0c:fc:a3:14:5b:b8:7f:
         6c:2c:04:85:19:d3:c3:97:ca:69:ce:1b:37:07:14:a4:04:2e:
         d5:87:d3:4c:f8:33:e0:f7:81:cc:a9:ed:d4:1d:10:33:19:47:
         a3:2c:21:2c:41:18:9c:92:a0:b5:15:c9:11:eb:20:fa:ae:ac:
         fa:33:ff:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:46:52 2025 by rpki-client