Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft
File:                     n6-DQWde9DiWQZk2JUJXLIkoVAw.mft (raw, json)
Hash identifier:          Yv+ABtz51viVj51ZGK++C9dG/duxCUo3RSnTSLA+dJg=
Subject key identifier:   AD:BA:DE:B5:FC:D1:91:BD:10:4F:6F:34:FE:1D:FB:8C:D1:7C:2D:8F
Authority key identifier: 9F:AF:83:41:67:5E:F4:38:96:41:99:36:25:42:57:2C:89:28:54:0C
Certificate issuer:       /CN=A91B517C/serialNumber=9FAF8341675EF438964199362542572C8928540C
Certificate serial:       0123
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6-DQWde9DiWQZk2JUJXLIkoVAw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft
Manifest number:          011A
Signing time:             Sat 23 Aug 2025 05:02:58 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:57 +0000
Manifest next update:     Sat 30 Aug 2025 05:02:57 +0000
Files and hashes:         1: n6-DQWde9DiWQZk2JUJXLIkoVAw.crl (hash: 4bRbGMvVEIp2bkpoiHKG3gkpg5vM6dg+lalizriUOEw=)
                          2: 86019882E2A311EEA6A97425C4F9AE02.roa (hash: yaqGJ55mUP3MHEApA47X+44ZI9rv9+pSI8dIE6Q7v10=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.crl
                          rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6-DQWde9DiWQZk2JUJXLIkoVAw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B517C, serialNumber=9FAF8341675EF438964199362542572C8928540C
        Validity
            Not Before: Aug 23 05:02:57 2025 GMT
            Not After : Aug 30 05:02:57 2025 GMT
        Subject: CN=68a94b81-1723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b3:aa:3d:48:5d:e8:ee:10:c4:59:e3:db:d9:
                    40:c8:84:40:72:f4:f2:24:8f:2b:e9:e7:09:2f:71:
                    f6:f1:d8:d5:e6:e2:82:18:3e:17:95:d2:42:09:d9:
                    e7:5a:c7:00:c6:3c:fa:e2:c4:2c:e3:72:02:7e:47:
                    c4:7e:23:22:5b:42:63:9b:73:cb:e1:40:41:b5:e8:
                    52:67:23:08:66:b1:ef:5e:71:53:6a:de:a3:6f:d1:
                    73:b4:25:bc:cf:29:8c:4a:48:dd:e1:e6:79:ce:59:
                    c5:93:03:6e:56:0d:dd:c7:28:a3:a0:47:ae:bd:82:
                    80:a7:d9:01:4e:06:db:cf:53:00:ba:72:2a:79:3e:
                    0a:01:9b:72:65:1e:5e:3e:74:c7:96:ff:d0:bf:c5:
                    db:c0:b6:77:ed:a6:4d:7a:1c:d0:ab:29:1a:af:ab:
                    fe:d6:62:2d:27:be:75:70:60:81:0e:ad:67:03:22:
                    d7:26:55:06:b2:c2:f1:36:8b:40:cd:90:50:63:8e:
                    31:33:b9:0f:e2:78:5d:5e:c7:4f:48:ae:1e:f4:f3:
                    9a:89:8d:07:c9:c0:6f:10:f5:e4:23:73:64:fd:9e:
                    be:dd:a4:48:cc:f2:34:0d:50:8f:a8:1e:94:45:66:
                    8a:d0:01:ed:97:a4:e8:f0:1b:32:a4:22:d8:9c:9b:
                    9a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BA:DE:B5:FC:D1:91:BD:10:4F:6F:34:FE:1D:FB:8C:D1:7C:2D:8F
            X509v3 Authority Key Identifier:
                keyid:9F:AF:83:41:67:5E:F4:38:96:41:99:36:25:42:57:2C:89:28:54:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6-DQWde9DiWQZk2JUJXLIkoVAw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:98:ee:19:c0:8a:03:f3:3c:7b:58:b7:91:51:23:1f:41:03:
         bd:bd:21:06:be:c0:fc:36:be:ff:e1:58:ec:24:65:f9:52:b3:
         ce:e0:e8:a4:27:cd:76:f1:54:11:13:4a:50:e5:8d:84:39:41:
         7a:93:ab:14:75:77:a2:42:25:b4:d4:c5:b9:58:f7:21:e5:e6:
         11:87:b9:1d:c9:cb:c3:d7:55:c1:e4:55:f8:d4:6e:ed:d7:18:
         26:e0:a9:34:bd:60:36:aa:f5:2b:c4:13:bb:14:ab:79:82:97:
         2b:bf:1b:06:6a:c3:1a:21:7e:14:09:8d:a0:a5:bc:59:a5:37:
         ee:7f:8e:de:7e:7e:94:d7:ba:e9:e9:d8:41:38:23:6c:e1:90:
         d6:43:1a:d0:93:ef:bf:b9:c5:07:da:e3:43:28:2c:4a:a3:d0:
         96:5b:4f:e5:56:4e:8e:75:5b:12:2b:a2:e5:d6:18:05:07:a1:
         39:20:7b:e9:7c:37:76:00:68:bf:55:91:5c:70:6e:28:67:06:
         25:cf:f8:a1:9f:fa:2d:08:18:0d:83:5d:fe:ef:7b:b4:94:a6:
         1e:2b:79:ba:a6:a3:a1:ea:16:01:4d:f3:9a:a2:9d:12:22:82:
         a4:b5:3a:65:71:bb:56:8a:6c:5f:77:59:28:ec:51:69:c1:9c:
         43:58:f0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:26:58 2025 by rpki-client