Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft
File:                     nhw1MdAEXqOJtoz_koagj7y72L0.mft (raw, json)
Hash identifier:          alFgVBxrAVnGwgviqK0ZFiw6QHZIHHTJzje+JyjaYfk=
Subject key identifier:   8D:CA:2F:C5:C5:77:36:DB:D4:41:EC:E7:1A:AD:49:E6:1A:9D:2C:94
Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
Certificate issuer:       /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
Certificate serial:       1F2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft
Manifest number:          1E5B
Signing time:             Sat 18 Oct 2025 16:25:25 +0000
Manifest this update:     Sat 18 Oct 2025 16:25:24 +0000
Manifest next update:     Sat 25 Oct 2025 16:25:24 +0000
Files and hashes:         1: nhw1MdAEXqOJtoz_koagj7y72L0.crl (hash: 2Ef2uuBdkZOplaPbM79KnJBKZpAAYcVHo3+3DbwMIMY=)
                          2: EE375CF036BD11E7B9B7251EC4F9AE02.roa (hash: ff+yRWpZGVwQu2/+ce6wo5vQ/4ykM8fNsCLeEkORRWk=)
                          3: 36D3DC38AA9311ECB5C88036C4F9AE02.roa (hash: 6AyDnzx5A4AjZFDON1usGiiqlcfarAtQyPrblWg9aSI=)
                          4: C81AC00EB14111EB959D4D3CC4F9AE02.roa (hash: PPz+jo2ZglJLUOgv0BMC7+AH2ZHmEK5hCIx98WW3CQI=)
                          5: 192418F6AA1811EA97BC574CC4F9AE02.roa (hash: XJKFjiP3tvsMhs6LmvK7B6XUUWrtRbubwh2zJ/jKEZ0=)
                          6: AB549D62125711EF94D14874C4F9AE02.roa (hash: u7p+nz5w2jpHdQPlyKnwRdRnTG51oOxdLpI/jwgWuSM=)
                          7: FA4555AA93DC11EEB00AF628C4F9AE02.roa (hash: B0CVo9ry++sVZy/2rBP2AlbhG4hjHy12hERvlOOeEZ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl
                          rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:25:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7978 (0x1f2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
        Validity
            Not Before: Oct 18 16:25:24 2025 GMT
            Not After : Oct 25 16:25:24 2025 GMT
        Subject: CN=68f3bf74-4e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:02:97:67:69:6c:2d:c9:1a:ed:a9:7c:12:72:
                    16:c2:05:6b:36:db:bf:11:75:c7:25:54:a2:2d:03:
                    cb:11:89:0b:a9:0b:40:e9:c9:f3:dc:76:f6:46:55:
                    dc:02:0f:8b:d9:45:7f:ea:02:2f:c8:67:a2:5d:0c:
                    ca:07:9a:a3:35:80:ee:f7:6c:a1:98:9e:a8:20:4d:
                    3b:bc:33:14:4d:3d:0e:e5:a2:6f:07:3b:9d:15:63:
                    57:41:bb:44:9f:04:bf:7a:22:d0:b4:a9:a4:c1:e0:
                    27:3d:a6:24:fc:c9:33:e1:05:28:81:08:1b:da:87:
                    8e:4c:cc:2d:ae:50:8d:ab:4a:80:2d:32:a1:62:c7:
                    a1:39:14:0a:d1:5a:89:06:f3:5a:ba:75:cb:5e:37:
                    aa:1f:2d:dc:a9:3a:9c:62:51:df:cc:b9:35:90:94:
                    a6:68:46:78:93:93:04:2f:c3:b2:76:59:32:fe:53:
                    42:2e:fe:15:5d:ed:bc:4d:e9:ab:58:6f:e2:ea:d8:
                    c8:2f:97:56:8e:eb:f0:45:87:36:24:c8:89:fc:aa:
                    ef:f7:34:40:12:7a:53:48:86:78:1f:79:02:55:4d:
                    ec:02:90:6a:d5:04:08:44:bc:a3:62:d2:eb:84:c2:
                    7e:e9:51:6a:28:90:1b:77:2c:5d:0f:1b:17:3c:58:
                    46:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CA:2F:C5:C5:77:36:DB:D4:41:EC:E7:1A:AD:49:E6:1A:9D:2C:94
            X509v3 Authority Key Identifier:
                keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:76:d5:fd:76:8c:24:58:7a:e1:86:00:42:18:f9:7f:a9:d2:
         ec:79:bc:bb:a5:30:87:db:82:7f:86:f5:a0:86:25:aa:07:d7:
         d3:a7:b9:bf:74:9e:6d:7f:00:32:d6:0e:40:a4:54:4c:cc:c2:
         dd:c5:d4:8e:1d:37:03:a0:f3:2e:92:e0:4d:8e:81:49:20:05:
         f3:cd:ec:fc:a5:87:b2:94:3e:7d:a7:5f:71:76:73:2a:62:af:
         98:ff:4b:04:11:a3:ce:ed:ab:f0:82:28:32:3b:40:5c:1b:0b:
         8f:00:be:00:c8:26:49:d8:21:0f:e5:15:5f:85:3a:78:56:b8:
         99:95:b2:8e:ba:f4:7e:6c:26:c7:fb:d8:da:ed:00:09:c3:2b:
         93:92:92:35:fc:fd:63:de:b3:49:77:a0:14:4e:13:0e:98:21:
         2d:f4:aa:d5:aa:da:86:7e:d6:9f:f6:69:f6:0f:91:61:2d:85:
         d7:c3:8c:6f:20:48:4f:28:2c:b9:ca:13:0b:15:a9:f3:aa:d5:
         7f:cf:69:e3:64:6a:75:6c:f1:b4:f3:f8:5c:89:45:17:25:31:
         67:44:29:71:11:38:60:35:6a:7a:51:a6:d7:2a:af:e5:52:6c:
         53:1f:cc:90:12:69:37:2d:80:59:7a:7f:17:4d:21:1a:e2:88:
         f3:d1:80:a8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG
QkNCQkQ4QkQwHhcNMjUxMDE4MTYyNTI0WhcNMjUxMDI1MTYyNTI0WjAYMRYwFAYD
VQQDEw02OGYzYmY3NC00ZTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3wKXZ2lsLcka7al8EnIWwgVrNtu/EXXHJVSiLQPLEYkLqQtA6cnz3Hb2RlXc
Ag+L2UV/6gIvyGeiXQzKB5qjNYDu92yhmJ6oIE07vDMUTT0O5aJvBzudFWNXQbtE
nwS/eiLQtKmkweAnPaYk/Mkz4QUogQgb2oeOTMwtrlCNq0qALTKhYsehORQK0VqJ
BvNaunXLXjeqHy3cqTqcYlHfzLk1kJSmaEZ4k5MEL8Oydlky/lNCLv4VXe28Temr
WG/i6tjIL5dWjuvwRYc2JMiJ/Krv9zRAEnpTSIZ4H3kCVU3sApBq1QQIRLyjYtLr
hMJ+6VFqKJAbdyxdDxsXPFhGJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3KL8XF
dzbb1EHs5xqtSeYanSyUMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC
QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy
TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTE5OC85OTNGMjA5MEFCQzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhx
T0p0b3pfa29hZ2o3eTcyTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBOdtX9dowkWHrhhgBCGPl/qdLseby7pTCH24J/hvWghiWqB9fTp7m/
dJ5tfwAy1g5ApFRMzMLdxdSOHTcDoPMukuBNjoFJIAXzzez8pYeylD59p19xdnMq
Yq+Y/0sEEaPO7avwgigyO0BcGwuPAL4AyCZJ2CEP5RVfhTp4VriZlbKOuvR+bCbH
+9ja7QAJwyuTkpI1/P1j3rNJd6AUThMOmCEt9KrVqtqGftaf9mn2D5FhLYXXw4xv
IEhPKCy5yhMLFanzqtV/z2njZGp1bPG08/hciUUXJTFnRClxEThgNWp6UabXKq/l
UmxTH8yQEmk3LYBZen8XTSEa4ojz0YCo
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:42:47 2025 by rpki-client