Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
File:                     nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft (raw, json)
Hash identifier:          OfizIFxaveq+0M5tDpxeJ9EBcsDTg1ujHG43yYjKj9M=
Subject key identifier:   16:2F:77:D9:CA:50:96:C8:C0:31:29:DB:64:B9:38:FE:64:DF:17:36
Authority key identifier: 9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20
Certificate issuer:       /CN=A91813F1/serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
Certificate serial:       092F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
Manifest number:          0907
Signing time:             Tue 04 Nov 2025 20:25:28 +0000
Manifest this update:     Tue 04 Nov 2025 20:25:28 +0000
Manifest next update:     Tue 11 Nov 2025 20:25:28 +0000
Files and hashes:         1: nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl (hash: Wkf4pUNZwiTb98pryAeUzzSiAtN8w5zpFjr8cpPPcIo=)
                          2: B7ACB272A25611EFACD47A47C4F9AE02.roa (hash: vo1vQ06IWtOVdoqh+RNSWgatLNqDP616NDuTmCTqgBM=)
                          3: 0A8890FE2F4C11EDB0375D6CC4F9AE02.roa (hash: x+qXnpZHzZY+dh94g38SoTHaDPy2ifolaZ4sk7Pctiw=)
                          4: 096864742F4C11EDB0375D6CC4F9AE02.roa (hash: Qm2aLJkxdL/ExAF+KC+FyvUngFAR4g1LlNO2Ye9aSlg=)
                          5: 0834FF2C2F4C11EDB0375D6CC4F9AE02.roa (hash: zDo3tedfdMOEsVe84vVrZx7v1JGUP/8LspCoxSCfVr8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl
                          rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 20:25:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2351 (0x92f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813F1, serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
        Validity
            Not Before: Nov  4 20:25:28 2025 GMT
            Not After : Nov 11 20:25:28 2025 GMT
        Subject: CN=690a6138-bacc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7b:71:4f:f8:4b:0e:cf:00:05:27:68:f9:3f:
                    1f:7a:89:39:0a:16:dd:1a:36:44:97:39:d9:d5:55:
                    38:df:03:28:90:e1:13:c6:a6:14:df:40:6c:aa:b2:
                    43:86:b3:80:c3:2a:a5:36:3f:f2:4e:d0:d5:17:13:
                    10:0f:35:4b:d8:88:a8:e0:1a:ba:1d:9e:10:a0:8e:
                    d3:1d:eb:26:57:2f:95:04:09:7d:2e:97:31:33:fc:
                    50:05:fe:26:76:ff:7e:50:06:21:ed:7b:e4:4d:c7:
                    c3:a8:1c:a3:c0:ba:aa:d0:11:42:7e:fd:72:2f:95:
                    2f:35:76:59:2a:2d:a8:0f:b2:b2:a9:59:84:7c:2f:
                    c1:f5:e4:8b:0c:17:60:9d:54:c3:68:21:d3:03:63:
                    95:96:a9:98:33:d3:a8:fc:19:3a:9b:68:ee:8f:3b:
                    4b:7e:2f:04:6d:9d:09:3c:49:e0:b0:86:8e:1c:b3:
                    eb:bc:71:2e:20:5e:cf:70:b2:38:cc:4c:14:c6:22:
                    7e:23:b2:3f:a0:9f:20:d7:19:58:d5:d2:1f:48:3e:
                    c2:85:0a:e1:be:1b:94:77:02:04:18:da:1c:59:bd:
                    70:10:e1:60:fa:1a:cc:6a:6d:8b:b2:9d:19:f2:7f:
                    67:b9:49:67:05:32:c5:72:64:2b:e7:de:6b:18:ae:
                    22:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2F:77:D9:CA:50:96:C8:C0:31:29:DB:64:B9:38:FE:64:DF:17:36
            X509v3 Authority Key Identifier:
                keyid:9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:b0:dd:8f:87:a6:54:dc:d9:b9:ea:00:9b:74:89:56:9f:2c:
         39:2e:0f:05:9f:96:95:9e:e1:0d:fa:6f:69:01:67:fe:84:1a:
         08:a2:83:2c:16:37:b0:24:54:73:48:77:a3:3f:6e:0c:c4:04:
         bb:fd:91:40:ea:fa:d8:1a:36:c2:a1:e0:63:19:6a:b0:c7:68:
         fe:ad:8e:0c:e2:a0:a4:e9:a0:53:b4:c4:0c:01:06:a2:2c:75:
         74:f0:1a:63:4f:21:06:43:89:8f:3a:9c:71:39:9b:64:2f:45:
         72:77:38:96:bb:ba:d0:24:55:92:21:14:86:04:50:a6:68:ca:
         a6:ce:4a:70:4d:60:dc:f2:38:73:a3:0f:ba:48:13:23:f1:e2:
         a2:b6:6a:69:94:6d:be:89:4e:50:8c:f4:84:44:02:f5:9f:ab:
         26:5b:ee:f7:21:d2:f2:78:ea:cc:45:9d:ee:1d:20:11:3d:a4:
         76:16:e8:dc:48:01:00:bf:0f:2f:d3:bc:5b:bd:a0:44:5d:68:
         31:aa:1b:13:35:ea:5c:21:23:51:36:dc:a5:2b:73:22:99:18:
         3f:7f:fa:ca:0c:ff:7d:21:0d:e1:a3:e3:ca:5b:76:be:d2:2e:
         cd:3b:b2:04:63:aa:52:46:2f:8e:9e:9c:49:54:32:93:ca:ef:
         e3:a7:94:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:55:25 2025 by rpki-client