Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
File:                     nN366rxkvM14iClikQ7BkqLSKDg.mft (raw, json)
Hash identifier:          eRRnvbcjVAFREgqEIxx//XhXckB4pby2dKc4U/tCsNo=
Subject key identifier:   14:55:B2:32:54:AE:93:02:D5:E9:9F:D2:DA:8D:7D:4C:2F:0C:14:0D
Authority key identifier: 9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38
Certificate issuer:       /CN=A91D6F21/serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
Certificate serial:       95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
Manifest number:          92
Signing time:             Sat 23 Aug 2025 06:41:04 +0000
Manifest this update:     Sat 23 Aug 2025 06:41:03 +0000
Manifest next update:     Sat 30 Aug 2025 06:41:03 +0000
Files and hashes:         1: nN366rxkvM14iClikQ7BkqLSKDg.crl (hash: ZD8cuozLlfo+0B8fb+4cZ2dlolKVTs829QRQP+Oi0yw=)
                          2: 6EBBA0F4A1AD11EF8A984349C4F9AE02.roa (hash: 4TxOvtXO/ZobHaFuZq+jlbsn4MEouHzffnZwxkoUjpM=)
                          3: 685DC124EC7B11EFAF014776C4F9AE02.roa (hash: HNlIYD/ULKjSdzSST5l7khzVoaw7HPjUFT3q9CFffJQ=)
                          4: 6F25556CA1AD11EF8A984349C4F9AE02.roa (hash: 9vy2sRLiVK7gv+Iu4032kUkO8gYn31dF49cn6btcuzY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl
                          rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6F21, serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
        Validity
            Not Before: Aug 23 06:41:03 2025 GMT
            Not After : Aug 30 06:41:03 2025 GMT
        Subject: CN=68a9627f-1639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:79:12:5f:81:a6:1d:40:69:c5:3f:34:eb:16:
                    14:9c:ff:b5:4b:63:00:a5:9b:3b:27:03:de:a3:30:
                    17:26:72:f9:50:56:ae:b0:7b:47:4b:bc:f2:2f:be:
                    8e:ef:70:dd:32:e0:dd:7e:4c:4e:b7:ea:b5:a4:99:
                    e0:79:e6:0c:43:9c:6a:1b:36:7a:51:2c:d2:ef:b2:
                    b0:c3:24:7b:c4:b7:6e:d7:35:c2:49:94:60:25:09:
                    a2:57:52:bb:01:93:a9:12:51:c0:f8:9c:11:9f:f3:
                    56:04:35:f4:9b:87:eb:d3:4c:9e:9e:58:55:94:40:
                    77:a5:28:c8:5a:7a:9c:b6:d3:f0:db:91:c3:dc:b5:
                    96:ec:a9:59:4d:95:d7:a9:cc:97:ab:a8:77:be:8e:
                    ba:4e:51:36:b1:8b:d5:21:ce:45:db:98:aa:7d:eb:
                    0a:4f:96:a6:e5:cf:1b:e2:fc:17:c4:95:d4:96:11:
                    2c:48:b7:04:98:54:5d:c7:07:73:b2:ea:bb:c7:fd:
                    6a:eb:43:99:6e:dc:0c:cd:4f:42:a4:a0:7e:c1:0b:
                    9f:f9:7d:0d:c2:88:d4:ab:d7:48:a3:ae:c5:1d:17:
                    32:9e:8f:04:18:4b:7d:2d:ee:c3:58:8e:2a:4e:24:
                    99:d5:a1:d4:fb:79:92:93:84:52:c1:99:f8:83:a4:
                    42:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:55:B2:32:54:AE:93:02:D5:E9:9F:D2:DA:8D:7D:4C:2F:0C:14:0D
            X509v3 Authority Key Identifier:
                keyid:9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:e9:ba:77:a9:1c:01:0d:98:27:58:30:c4:33:79:59:20:c1:
         4f:f5:9b:82:0b:12:29:bd:ea:d1:36:63:00:89:fb:8a:a8:a7:
         6d:73:dc:5e:6b:34:de:3f:25:8e:43:16:5a:82:15:f9:a9:61:
         86:14:64:28:b0:95:37:b0:32:d6:fc:c0:b7:e8:37:47:86:c6:
         3e:82:c1:d4:ca:89:68:01:8d:05:7e:b9:06:13:79:c8:b0:a3:
         77:10:68:ac:e2:3d:86:d0:f3:be:a2:18:dd:cc:d4:07:9e:e1:
         45:3a:4e:eb:7d:20:7c:2d:a5:fd:d7:56:e9:96:58:98:1c:b2:
         ad:16:8b:80:09:60:e5:bf:6f:7b:6a:85:33:08:51:4b:5a:98:
         3c:cf:eb:44:58:24:0e:84:ce:2e:ae:13:be:25:bf:29:34:95:
         ac:2f:79:2f:5e:9e:58:b2:c4:b7:d6:0d:cf:f6:e0:a2:89:22:
         91:71:71:64:5f:47:76:7e:de:a6:7a:2e:5a:f3:06:75:46:3d:
         35:e4:d3:42:de:2b:f9:c3:ad:b6:ca:e5:57:21:13:4d:e1:9c:
         6f:82:dc:aa:4d:05:92:62:1a:6d:72:6a:2c:f2:73:e7:8d:23:
         0b:42:3a:94:ad:80:ab:5d:d0:6b:1a:1e:19:2a:16:08:1e:02:
         fc:92:81:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDZGMjExMTAvBgNVBAUTKDlDRERGQUVBQkM2NEJDQ0Q3ODg4Mjk2MjkxMEVDMTky
QTJEMjI4MzgwHhcNMjUwODIzMDY0MTAzWhcNMjUwODMwMDY0MTAzWjAYMRYwFAYD
VQQDEw02OGE5NjI3Zi0xNjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAunkSX4GmHUBpxT806xYUnP+1S2MApZs7JwPeozAXJnL5UFausHtHS7zyL76O
73DdMuDdfkxOt+q1pJngeeYMQ5xqGzZ6USzS77KwwyR7xLdu1zXCSZRgJQmiV1K7
AZOpElHA+JwRn/NWBDX0m4fr00yenlhVlEB3pSjIWnqcttPw25HD3LWW7KlZTZXX
qcyXq6h3vo66TlE2sYvVIc5F25iqfesKT5am5c8b4vwXxJXUlhEsSLcEmFRdxwdz
suq7x/1q60OZbtwMzU9CpKB+wQuf+X0NwojUq9dIo67FHRcyno8EGEt9Le7DWI4q
TiSZ1aHU+3mSk4RSwZn4g6RCawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRVsjJU
rpMC1emf0tqNfUwvDBQNMB8GA1UdIwQYMBaAFJzd+uq8ZLzNeIgpYpEOwZKi0ig4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkYyMS9GRTM3RTNFQ0Ex
QUMxMUVGQjY3NTg1NDhDNEY5QUUwMi9uTjM2NnJ4a3ZNMTRpQ2xpa1E3QmtxTFNL
RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25OMzY2cnhrdk0xNGlDbGlrUTdCa3FMU0tEZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NkYyMS9GRTM3RTNFQ0ExQUMxMUVGQjY3NTg1NDhDNEY5QUUwMi9uTjM2NnJ4a3ZN
MTRpQ2xpa1E3QmtxTFNLRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAa6bp3qRwBDZgnWDDEM3lZIMFP9ZuCCxIpverRNmMAifuKqKdtc9xe
azTePyWOQxZaghX5qWGGFGQosJU3sDLW/MC36DdHhsY+gsHUyoloAY0FfrkGE3nI
sKN3EGis4j2G0PO+ohjdzNQHnuFFOk7rfSB8LaX911bplliYHLKtFouACWDlv297
aoUzCFFLWpg8z+tEWCQOhM4urhO+Jb8pNJWsL3kvXp5YssS31g3P9uCiiSKRcXFk
X0d2ft6mei5a8wZ1Rj015NNC3iv5w622yuVXIRNN4ZxvgtyqTQWSYhptcmos8nPn
jSMLQjqUrYCrXdBrGh4ZKhYIHgL8koFx
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:45:47 2025 by rpki-client