Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.mft
File:                     nm-wk8ALBix4zOEdID6XGh0H15U.mft (raw, json)
Hash identifier:          MZaTlqJ4/mUci06tWuvsWts0G6xQTY1xdgmpnoope/o=
Subject key identifier:   CE:E3:CC:22:5B:A0:11:0D:65:C1:80:2F:7F:26:E5:42:AE:77:75:83
Authority key identifier: 9E:6F:B0:93:C0:0B:06:2C:78:CC:E1:1D:20:3E:97:1A:1D:07:D7:95
Certificate issuer:       /CN=A91535A9/serialNumber=9E6FB093C00B062C78CCE11D203E971A1D07D795
Certificate serial:       E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nm-wk8ALBix4zOEdID6XGh0H15U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.mft
Manifest number:          E4
Signing time:             Sat 09 Aug 2025 05:49:24 +0000
Manifest this update:     Sat 09 Aug 2025 05:49:24 +0000
Manifest next update:     Sat 16 Aug 2025 05:49:24 +0000
Files and hashes:         1: nm-wk8ALBix4zOEdID6XGh0H15U.crl (hash: z+tFm089ko438/thl4cAB/98ngnOzA37upbbnh3K+K4=)
                          2: F2E885E8606D11F0BC4BF772C4F9AE02.roa (hash: FUSwLnOhkkdqLHTPVEfyew8K34UosOQ0YB9/5/JBNDs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.crl
                          rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nm-wk8ALBix4zOEdID6XGh0H15U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91535A9, serialNumber=9E6FB093C00B062C78CCE11D203E971A1D07D795
        Validity
            Not Before: Aug  9 05:49:24 2025 GMT
            Not After : Aug 16 05:49:24 2025 GMT
        Subject: CN=6896e164-2f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7e:fd:f8:05:b3:e1:17:9a:0f:cf:1b:26:bd:
                    42:a6:2b:bd:55:da:f7:2b:48:ae:52:49:09:16:6d:
                    8b:0e:a5:5c:a9:11:54:0b:90:ec:9a:47:9d:f7:2b:
                    4c:4e:dd:f8:b5:b7:51:a0:f3:f3:63:e8:95:94:2c:
                    e4:db:44:27:f6:57:8b:ed:2c:3b:c5:64:ef:ad:30:
                    fd:05:e1:54:0f:f2:0f:ab:d7:b4:de:b8:38:db:4d:
                    86:d9:7e:d6:2c:7c:68:58:fd:cd:15:39:2c:16:5d:
                    5d:10:8d:ab:89:ba:b3:76:3f:c6:4c:ff:4a:db:60:
                    a1:30:86:78:40:4c:3d:e9:25:23:61:80:9e:5a:c9:
                    10:47:c1:68:af:66:02:ad:b0:65:c2:b0:fc:34:a2:
                    da:8f:ff:a4:f8:6f:4a:eb:28:d3:8d:aa:54:47:56:
                    49:c8:d4:d3:46:62:ad:fb:3f:cc:ea:98:11:6c:26:
                    9f:ab:da:1e:9d:50:ae:76:a9:5c:f8:5d:a0:0e:38:
                    f1:7d:3a:7e:e3:1c:db:70:64:0a:52:af:6d:5a:ce:
                    e8:c9:d9:27:6d:a5:fa:39:22:aa:20:76:d8:4d:7b:
                    fd:d5:5b:3d:f8:0a:3b:e5:d0:bb:f7:ba:25:62:16:
                    38:ac:5c:36:6a:07:0d:e8:88:b5:28:61:6a:45:e6:
                    93:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E3:CC:22:5B:A0:11:0D:65:C1:80:2F:7F:26:E5:42:AE:77:75:83
            X509v3 Authority Key Identifier:
                keyid:9E:6F:B0:93:C0:0B:06:2C:78:CC:E1:1D:20:3E:97:1A:1D:07:D7:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nm-wk8ALBix4zOEdID6XGh0H15U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:4c:75:85:40:94:8b:80:4d:c9:76:c0:1f:73:56:ef:c7:77:
         84:09:b8:50:0c:60:61:b2:21:51:1f:a0:9e:a9:36:f7:91:6e:
         38:b8:32:81:d4:ab:1c:bb:31:c4:33:5b:0e:66:a1:cf:11:18:
         a7:0a:f2:f3:a4:a1:d2:9d:f5:7b:17:61:c0:a2:1b:ff:fb:86:
         9b:6e:2a:62:a2:c6:8a:5b:5f:f6:4f:65:0d:0a:7a:58:0f:87:
         03:a8:cb:7e:cb:6b:e6:f7:b2:e9:94:36:d5:09:f6:87:ab:17:
         2b:cb:c9:88:83:ed:c3:1f:8f:a0:90:7d:ec:28:1e:21:cb:b4:
         ec:d7:40:8f:9e:b4:7e:c9:2a:1a:95:cd:5c:1a:f4:91:81:c8:
         af:9f:75:b6:b3:a6:a1:14:09:e0:bc:32:9b:63:30:c0:6c:ce:
         87:85:c0:83:5b:06:39:14:5a:8c:76:4a:05:cb:f3:68:12:19:
         91:67:38:5e:1b:fb:99:98:6c:b1:0a:eb:6e:1f:ba:8b:24:d4:
         0a:78:a5:ed:15:99:92:3e:a6:4f:ef:97:b0:ea:5a:ef:de:aa:
         5e:04:b5:28:6d:ab:6e:c6:8d:df:88:bb:ab:2e:66:de:d7:69:
         a1:e7:86:07:17:9b:b4:95:b3:09:95:32:88:9f:a6:eb:69:12:
         ef:0e:5a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:07:37 2025 by rpki-client