Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
File:                     nberk64z9kYWgi3wP_2Bd2jx6Y8.mft (raw, json)
Hash identifier:          Nh06xt6RTTaNQFN0Ylav88RtMQ1gyxzPzx/y74y6toI=
Subject key identifier:   A7:EF:3B:49:20:A7:09:56:B7:06:58:E2:86:AA:90:D5:D5:D8:18:0E
Authority key identifier: 9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F
Certificate issuer:       /CN=A91810E3/serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F
Certificate serial:       015D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
Manifest number:          0156
Signing time:             Mon 11 Aug 2025 04:18:37 +0000
Manifest this update:     Mon 11 Aug 2025 04:18:36 +0000
Manifest next update:     Mon 18 Aug 2025 04:18:36 +0000
Files and hashes:         1: nberk64z9kYWgi3wP_2Bd2jx6Y8.crl (hash: LSeJmkhRIiN/CXOETmOSt7KATkWxqCXtHkqP5yelEJw=)
                          2: A56F3A8A718811EEADDA430AC4F9AE02.roa (hash: q1gVEbmNzPAYit/PZzlFgDk+Tc1AUGMImEJ9QqP60MQ=)
                          3: 497917BA719B11EEA5D8F416C4F9AE02.roa (hash: RXrmTRENl+7Zg6y5wMLjJWSZiSVWcqVyL1CzU9Mm2gA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl
                          rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 Aug 2025 04:18:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91810E3, serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F
        Validity
            Not Before: Aug 11 04:18:36 2025 GMT
            Not After : Aug 18 04:18:36 2025 GMT
        Subject: CN=68996f1d-2bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4a:ef:46:fd:aa:88:25:67:57:3b:f7:4f:f6:
                    fe:1d:b9:15:d9:2b:2a:42:b2:fe:af:e1:ef:6f:90:
                    6f:eb:4f:a7:44:bf:01:47:f5:24:45:6d:7a:bb:2d:
                    35:bd:d0:fb:50:58:41:d7:57:50:54:57:38:3b:62:
                    d2:6e:a8:96:ca:63:65:2a:65:5d:82:6b:52:6f:c1:
                    43:5f:d8:c3:02:74:46:40:57:d3:41:fb:1e:95:8a:
                    90:56:13:b8:9c:1d:d9:59:30:3a:c5:c6:e0:ce:f6:
                    9d:0a:76:57:1c:9c:97:23:fb:41:b9:ca:09:35:34:
                    69:f1:09:59:42:4f:22:eb:cf:ea:8c:b8:40:a4:3a:
                    06:e5:ba:9c:39:f9:45:77:5c:df:5a:fd:17:3f:ed:
                    ad:de:04:f3:a4:ef:54:f8:df:11:bd:4f:ba:ed:75:
                    06:e0:26:eb:4f:42:c2:d5:21:f0:39:c2:f2:b0:38:
                    75:f0:2e:ce:69:dc:c6:f5:4f:7d:23:b9:da:d4:51:
                    9c:35:01:f6:1b:f2:d5:bf:03:30:d3:f0:c4:77:74:
                    96:92:35:34:4c:8c:58:2a:91:8f:46:5f:00:41:73:
                    73:d5:54:32:ce:c8:95:14:fe:8e:94:d6:9d:79:ce:
                    f2:e5:03:e1:0c:72:20:19:b9:c9:33:70:40:d3:64:
                    23:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:EF:3B:49:20:A7:09:56:B7:06:58:E2:86:AA:90:D5:D5:D8:18:0E
            X509v3 Authority Key Identifier:
                keyid:9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:8f:39:01:1e:5c:69:3e:36:a4:cd:a6:d2:28:f4:89:2f:0d:
         d5:3c:d5:cf:9f:63:20:08:18:2e:ff:59:7e:12:f4:c4:c8:50:
         9f:1f:c7:8e:4d:5f:05:87:15:63:75:d2:e0:a6:2c:e6:b4:45:
         2a:ff:a4:9d:28:db:71:ac:74:3a:0f:9e:d8:8e:2f:35:39:17:
         aa:e5:40:05:14:94:6b:5c:0e:ae:ce:d7:bb:dd:32:6a:81:cd:
         56:57:b5:2b:f1:9b:e5:0f:5f:80:61:41:63:6b:ad:fd:63:fd:
         6c:1e:a8:5f:47:78:99:7d:16:6c:32:d3:29:27:6a:ac:a3:e5:
         d1:a6:ee:79:b6:da:26:e2:aa:57:54:65:70:99:00:0d:70:d7:
         8f:41:bd:f8:db:fc:a1:45:9c:2e:3f:19:ac:3f:31:40:80:89:
         13:0e:87:11:d4:10:4d:3f:f6:51:59:62:f0:1a:a8:6e:9b:4c:
         3b:ed:cd:5f:77:55:bd:6a:9c:cb:d9:e4:93:c7:a4:83:2e:10:
         d4:c6:7f:18:45:51:78:22:cf:b8:c7:e5:62:64:d8:06:1e:37:
         9e:82:c6:42:cd:44:c6:42:cd:79:c7:63:16:ee:4c:1c:c6:b7:
         b7:72:0f:dc:16:97:f0:5f:3f:6e:92:54:86:b5:68:67:15:8a:
         ba:b6:19:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:29:46 2025 by rpki-client