Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft
File:                     NvLl_YZ1AzcwumM6RQCvVQIFnww.mft (raw, json)
Hash identifier:          uNoKIVpVdxhgtrxELRe7e6ER5kdiW+ErQgbv3IEUqXQ=
Subject key identifier:   12:E5:71:5F:9C:05:58:85:15:DE:AA:9F:FF:D5:91:94:3F:43:5D:A0
Authority key identifier: 36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C
Certificate issuer:       /CN=A91983A2/serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C
Certificate serial:       0A55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft
Manifest number:          0A4E
Signing time:             Mon 04 Aug 2025 19:57:09 +0000
Manifest this update:     Mon 04 Aug 2025 19:57:09 +0000
Manifest next update:     Mon 11 Aug 2025 19:57:09 +0000
Files and hashes:         1: NvLl_YZ1AzcwumM6RQCvVQIFnww.crl (hash: 2F+5NPs3yhI4gKuGjyubNZJzDFMWphRTZ4UgDaXh6sA=)
                          2: 57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa (hash: yFLJX5cGNnLNBjcWaB+6vNc0GccMnifOVWqoab16Zkg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl
                          rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 19:57:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2645 (0xa55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91983A2, serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C
        Validity
            Not Before: Aug  4 19:57:09 2025 GMT
            Not After : Aug 11 19:57:09 2025 GMT
        Subject: CN=68911095-9a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f4:ad:b3:31:45:d0:af:f1:b9:ea:41:62:67:
                    fc:db:db:d0:10:41:d4:6c:8c:54:79:f2:b8:4d:b1:
                    0b:4d:99:6b:7f:db:74:6a:84:ce:84:d0:79:b4:25:
                    17:b0:55:f8:34:8a:b2:ef:88:c2:46:37:05:bf:52:
                    1f:82:c2:c5:80:0f:fb:b3:18:da:f7:1f:86:45:dd:
                    73:59:2b:89:97:16:ce:3d:72:a1:6f:cb:ac:18:1d:
                    6d:63:b6:2b:95:f6:21:25:b1:c3:4c:14:25:6c:91:
                    c9:4b:ff:8c:91:a1:00:93:ba:d8:03:3d:4f:1e:9c:
                    60:8d:c6:16:32:22:19:92:e2:7e:9e:37:08:8b:25:
                    29:a0:05:71:15:91:91:c5:e6:6f:4a:23:da:17:f2:
                    2d:8b:1a:76:d4:a0:fd:57:9e:23:26:13:95:74:3e:
                    87:61:74:7e:20:2b:25:c3:69:b7:c6:71:5b:d2:c1:
                    b3:50:61:99:ab:60:bc:8d:df:99:63:0b:b1:5d:e9:
                    c5:92:1e:71:ab:70:20:f2:3b:17:a9:7a:58:cb:f4:
                    7d:43:c1:ab:f2:34:4a:f3:7e:c2:8b:e2:f2:9f:40:
                    2d:93:0b:3d:0c:02:5b:b9:e7:38:f4:4c:54:3d:29:
                    24:36:f4:96:f7:2c:87:36:89:5e:f1:29:38:48:6a:
                    5d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E5:71:5F:9C:05:58:85:15:DE:AA:9F:FF:D5:91:94:3F:43:5D:A0
            X509v3 Authority Key Identifier:
                keyid:36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:39:6a:88:d5:6f:1f:a9:68:ad:34:b5:a8:c6:0b:52:55:90:
         eb:e7:e9:e8:2f:38:22:1b:1e:bc:89:83:bc:86:ec:51:cf:7f:
         a7:80:95:d4:da:70:91:8c:7a:c3:5a:8b:09:62:43:2a:0b:e0:
         9e:62:25:de:54:53:4c:c3:a0:a6:d3:32:4c:71:73:e2:22:d6:
         34:5c:37:a1:63:bd:ac:3e:4f:71:b1:e4:35:80:4a:c8:ba:6a:
         1c:5d:f4:aa:2b:19:15:fe:28:2c:1c:a1:20:5c:52:39:c3:c3:
         01:1d:f4:71:21:8f:d7:d0:ed:23:48:8e:c8:0d:13:ea:46:05:
         76:76:74:ec:b2:33:b0:a1:71:ed:bb:a0:72:62:99:f2:38:ac:
         27:e9:11:23:ec:f7:3c:9b:d6:9e:53:be:64:23:69:8a:32:9f:
         b7:c2:51:51:81:89:60:c7:ca:56:25:34:d4:e6:7d:91:e0:f8:
         68:88:7a:be:c3:1e:fe:77:fc:2a:45:26:2c:bd:3e:ef:fa:04:
         5b:8b:21:d8:de:b9:88:7c:c3:ec:b3:d3:ae:b1:3d:91:f1:88:
         65:80:d7:3b:f8:25:f5:2d:5d:8d:df:d1:83:82:92:f5:58:27:
         5c:58:7f:96:24:f0:09:71:0b:fb:a0:b8:0a:2f:95:fb:d0:b6:
         7d:77:6a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:30:11 2025 by rpki-client