Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
File:                     nvPmBKY_LO9L3eN9yokNBFGWeuw.mft (raw, json)
Hash identifier:          RVrIg+lzohJ2E/5n1mN95DXCiMRXQMs8vCU/Leoqnzo=
Subject key identifier:   79:B2:61:3A:00:BE:E2:09:1D:4C:FB:DD:67:A7:62:C4:79:79:78:56
Authority key identifier: 9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC
Certificate issuer:       /CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
Certificate serial:       D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
Manifest number:          CE
Signing time:             Tue 13 May 2025 04:59:08 +0000
Manifest this update:     Tue 13 May 2025 04:59:08 +0000
Manifest next update:     Tue 20 May 2025 04:59:08 +0000
Files and hashes:         1: nvPmBKY_LO9L3eN9yokNBFGWeuw.crl (hash: lf4vCWVPGYFhJh7CVT2/VefEc5hIQKxriD39lohlGCU=)
                          2: A8E08476F1BB11EF9C4FBD41C4F9AE02.roa (hash: wizBRHqAhxq5TDJd9ORO3aI0XD9YwCzlFRUIm/jjcVM=)
                          3: 5A65F048F19211EFA4D9CD34C4F9AE02.roa (hash: 00Gxu/B4q0Oej8/UcNpQ1rIkErXZo9wae3oYgISIoHo=)
                          4: C00BD754F1BB11EF8DC4E241C4F9AE02.roa (hash: gkdI4g/jCDkiZBNQ9fSbLl+77wcKcjbE4DlEqTCL5ew=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl
                          rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 04:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB002, serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
        Validity
            Not Before: May 13 04:59:08 2025 GMT
            Not After : May 20 04:59:08 2025 GMT
        Subject: CN=6822d19c-4707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:79:19:9f:c8:fb:2d:4a:10:5e:1f:26:75:87:
                    ac:86:9c:bc:c6:96:03:70:8a:05:0f:86:e3:02:8d:
                    0b:5b:6e:60:85:2b:2b:1e:3d:55:86:e8:c6:ed:ee:
                    7d:9d:fd:55:54:0e:d1:30:3b:0d:47:3d:78:3d:dd:
                    88:72:ca:85:0d:6c:b0:0b:3b:06:66:08:97:8e:20:
                    cf:0c:d2:04:5b:b7:f2:60:fd:4b:52:3c:74:b9:a4:
                    69:5d:cd:f1:ed:0e:c7:55:d3:9f:5f:eb:6d:4e:c5:
                    41:f1:02:11:e7:a2:30:78:75:05:05:58:58:4d:b2:
                    c9:e7:5b:a5:23:56:90:6e:dc:d4:98:0d:50:ee:e9:
                    8a:c5:80:f3:43:77:dd:9c:3e:72:3f:a6:aa:d2:36:
                    7d:d5:f2:37:23:37:4a:60:8b:95:47:26:a6:0e:76:
                    ba:dd:77:7b:34:9b:6f:0f:04:5c:fb:4c:b0:b1:35:
                    8d:00:5a:87:77:bc:76:09:61:0c:7e:87:7a:93:79:
                    01:ec:77:92:7c:a5:07:71:78:a9:64:3d:6d:36:e9:
                    06:a1:3f:10:32:7e:af:ad:90:25:8d:95:57:66:22:
                    cc:34:b3:d4:2b:5d:a2:d6:f4:35:b0:f7:60:1f:9a:
                    31:9d:46:0a:ce:c4:de:07:24:bf:e5:ca:fe:24:c4:
                    ab:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B2:61:3A:00:BE:E2:09:1D:4C:FB:DD:67:A7:62:C4:79:79:78:56
            X509v3 Authority Key Identifier:
                keyid:9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:85:cc:57:96:e0:f3:97:62:54:8f:97:e3:1f:25:20:1b:c1:
         46:e0:71:8a:68:08:92:70:c3:f6:0f:6e:70:42:7a:7a:de:7f:
         08:1d:d8:9e:ca:4a:d9:55:be:57:63:6a:9b:83:96:58:24:e9:
         75:3a:bc:f6:83:d6:1d:49:63:e0:eb:94:3c:48:d1:4f:35:43:
         a5:b3:e8:e6:d2:ca:41:a7:dc:fe:f0:16:10:c1:44:7e:86:b9:
         4d:92:ae:0f:06:1e:bd:ff:f1:ab:a2:7c:8e:42:59:01:00:29:
         3f:0e:1c:e2:ac:7f:df:e0:82:3b:8d:01:03:1d:25:e7:a6:04:
         3d:69:79:37:95:de:10:de:b5:fa:cb:8e:a0:75:a6:dc:fa:20:
         ba:a7:5f:0f:69:4c:b4:93:60:ba:56:5f:49:e5:0b:fc:0d:27:
         eb:90:7f:d2:2a:41:4d:53:80:ed:73:06:93:1d:b0:63:b7:6a:
         6f:a7:2a:90:c5:3b:06:af:04:d9:26:b8:2f:31:78:36:9a:4c:
         d6:73:37:d2:70:8c:be:67:5e:c2:dd:86:62:68:14:d2:78:92:
         db:04:33:e9:41:99:28:4d:97:08:79:75:89:23:7e:3f:ab:23:
         d3:f9:cc:e1:5c:71:a8:0b:bb:e2:c7:4d:fe:4d:76:89:de:79:
         ca:34:08:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:44:32 2025 by rpki-client