Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
File:                     nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft (raw, json)
Hash identifier:          Q2D6h07S3HBMLW8qiVeYc1gLq0Gnk+GSfbBQVapG5WE=
Subject key identifier:   A9:B7:3E:74:58:28:0C:68:5F:DC:7E:EA:DA:70:26:48:88:5A:F8:0F
Authority key identifier: 9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20
Certificate issuer:       /CN=A91813F1/serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
Certificate serial:       08FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
Manifest number:          08D9
Signing time:             Sun 10 Aug 2025 20:27:15 +0000
Manifest this update:     Sun 10 Aug 2025 20:27:15 +0000
Manifest next update:     Sun 17 Aug 2025 20:27:15 +0000
Files and hashes:         1: nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl (hash: XIyxPhF8t8l7PsUM32iBQl91mFbM3+iDD9FGJ7WmfTI=)
                          2: B7ACB272A25611EFACD47A47C4F9AE02.roa (hash: vLwsN6XlSbBFyRzXSCrEwO8DAZca1xs9SHlcyqnbxYE=)
                          3: 0A8890FE2F4C11EDB0375D6CC4F9AE02.roa (hash: sSNo+/dLUh/bje18BPzZPQTxMEMoTmVIKuRUAdfqRAo=)
                          4: 096864742F4C11EDB0375D6CC4F9AE02.roa (hash: jla9AG1gExZIQpCD/EW4q3Wp+FwlnerqSvxfxkw43CI=)
                          5: 0834FF2C2F4C11EDB0375D6CC4F9AE02.roa (hash: jsKgrIPw9kysznIIPdP3oqonMHQ5VwN13abO5ggVkg4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl
                          rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2301 (0x8fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813F1, serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
        Validity
            Not Before: Aug 10 20:27:15 2025 GMT
            Not After : Aug 17 20:27:15 2025 GMT
        Subject: CN=689900a3-c790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bb:f1:9a:dd:e6:11:8d:a8:40:ef:82:ad:13:
                    5e:e7:44:38:d6:b8:20:0d:88:96:45:81:b0:c7:b5:
                    57:c6:1b:31:29:eb:52:21:01:79:cf:97:95:3e:a3:
                    5b:d7:d7:16:4d:9b:b3:8f:37:2d:0f:e8:60:3e:e1:
                    f0:40:34:86:de:26:ca:43:db:3c:94:d0:16:d5:87:
                    38:05:f5:6b:a9:e8:d2:75:7d:f4:6b:af:06:8a:df:
                    2a:b3:84:bf:5d:5a:09:d7:91:4d:b0:8e:b8:f4:d2:
                    7e:b3:2a:b5:94:f8:67:5b:34:ad:89:fa:a9:3e:e1:
                    36:3b:23:5d:43:73:0c:1a:c8:22:c5:6b:ea:04:2c:
                    09:fc:f3:99:ae:21:86:c7:64:63:20:cb:b6:52:ae:
                    d3:0b:77:28:c6:f4:42:d5:cb:aa:d5:67:02:ff:ae:
                    14:fd:63:fd:6c:6b:b5:39:a3:3c:c6:38:87:41:5b:
                    4b:8d:bb:c5:db:1d:e1:27:60:a6:90:6d:83:2a:00:
                    7d:17:7f:48:1d:c0:da:07:d1:cb:09:ee:ef:47:fa:
                    c0:39:18:a4:9b:02:4c:01:77:2f:2f:6f:10:cd:0b:
                    d3:cb:7e:37:07:5c:68:12:b4:27:0f:6a:ac:90:19:
                    5b:18:83:2a:eb:5b:b9:74:36:0d:ed:59:cc:b2:c8:
                    eb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B7:3E:74:58:28:0C:68:5F:DC:7E:EA:DA:70:26:48:88:5A:F8:0F
            X509v3 Authority Key Identifier:
                keyid:9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:b7:bc:7d:53:a2:00:fb:ea:8c:18:04:64:12:d9:79:ea:e0:
         7c:f2:dd:2f:18:f8:b8:bc:2f:6a:c6:a1:c4:d6:e2:0f:e7:7c:
         9c:61:a8:c0:23:88:66:ba:d0:2a:73:60:f7:ac:25:07:16:44:
         79:47:de:bb:e6:39:c1:6c:49:ef:05:ef:e6:a3:f1:83:00:a2:
         b9:c1:0f:06:b1:40:1a:57:ee:03:98:58:5e:83:27:4e:fb:e9:
         10:69:5e:75:4b:e8:92:13:61:26:42:99:9a:1b:67:89:6f:14:
         76:18:04:59:c8:a9:52:f0:b1:3d:bf:3e:21:cb:c5:b1:b4:40:
         4c:9c:4e:6d:82:c8:ec:e4:46:46:58:13:b3:85:ae:43:54:fa:
         e7:64:bc:1b:99:14:be:54:9e:13:a2:8c:c6:c7:57:35:ec:2c:
         4d:39:1a:8b:83:73:97:e9:2f:b0:a3:b0:ea:fc:2b:62:69:78:
         31:3b:b9:ec:a3:90:c9:49:0a:b4:cb:f0:1f:37:89:09:98:30:
         f0:98:05:73:2c:09:08:c1:cb:87:69:ed:a1:a7:72:32:32:41:
         48:d8:41:17:38:d0:53:26:93:0a:fd:41:b8:7b:53:2c:ed:11:
         a8:e7:47:d0:b9:30:19:c9:fd:7c:e4:e9:6a:0a:18:73:54:32:
         08:63:54:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:29:03 2025 by rpki-client