Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft
File:                     0NDWzWh3DDh4O764QbES0FYBdKI.mft (raw, json)
Hash identifier:          bA5DG1ZtsivLX6bnvbK+wdfLh92hux+z2yn/1yVwAhM=
Subject key identifier:   7E:CC:50:2F:D3:48:C7:F1:13:98:1A:03:90:5A:84:67:64:E1:0F:5A
Authority key identifier: D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2
Certificate issuer:       /CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
Certificate serial:       08AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft
Manifest number:          087B
Signing time:             Fri 08 Aug 2025 21:02:40 +0000
Manifest this update:     Fri 08 Aug 2025 21:02:40 +0000
Manifest next update:     Fri 15 Aug 2025 21:02:40 +0000
Files and hashes:         1: 0NDWzWh3DDh4O764QbES0FYBdKI.crl (hash: coUpmOEY1HMvOlD4tlHwIb9xJ7rTKQjLK/vgwTsIGkA=)
                          2: 577FD5BE067C11ED882FC127C4F9AE02.roa (hash: FZgwTWzQksQtmk/Nfe/JqxwRHSDF1+BlazvC8MqkPtA=)
                          3: 4EF79184489411ED86987260C4F9AE02.roa (hash: a8Efs0GAW5Tg39h9an5o87GfSDA70jqZExOy2QFYQOc=)
                          4: 12FD08CAC88411ECAAB5BD09C4F9AE02.roa (hash: Rk9fezvR7MLf0U22xpSZ4jUyV+Jwv2bIeNDcvnRfGXA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl
                          rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2221 (0x8ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91998BE, serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
        Validity
            Not Before: Aug  8 21:02:40 2025 GMT
            Not After : Aug 15 21:02:40 2025 GMT
        Subject: CN=689665f0-c8d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:98:6b:30:5c:60:7c:d3:71:0c:ed:13:6c:fd:
                    2b:e7:1e:48:a8:55:b4:e7:19:67:5c:a9:1f:d3:bf:
                    9b:5d:cd:d5:1b:66:8b:e5:ae:cf:df:2d:41:4a:57:
                    af:76:0f:d5:89:55:37:3d:8e:2e:04:73:f5:39:7a:
                    98:40:c1:3f:e7:4b:c5:cb:66:0c:74:ff:fd:2c:29:
                    37:be:b2:17:96:1f:62:d7:b7:ef:53:91:da:bc:3b:
                    20:d4:03:d5:b7:cc:96:bd:38:93:42:cc:98:a5:09:
                    18:69:b2:5d:cc:87:81:02:f0:64:39:44:e9:77:c1:
                    e4:c3:23:63:53:f0:33:cb:01:3a:6a:87:86:14:9e:
                    48:fb:a3:78:08:56:f9:d0:4c:61:00:c1:0c:e4:99:
                    ab:b1:a0:cc:63:c9:a6:5a:bf:25:46:c7:22:3e:1e:
                    10:52:e4:cb:4a:f3:74:28:c2:49:66:9a:31:46:78:
                    20:0a:c6:09:f2:37:55:87:54:ae:4b:df:f8:24:47:
                    f4:ae:74:61:2f:9a:aa:96:6e:2d:dc:e0:d8:33:60:
                    90:6d:44:32:84:b5:52:67:51:1b:26:f5:f1:e3:3c:
                    4e:82:41:e6:92:fe:c2:59:3e:26:83:3b:20:a0:4c:
                    15:6c:7e:32:69:60:54:2f:63:8d:49:78:44:f9:f9:
                    a4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CC:50:2F:D3:48:C7:F1:13:98:1A:03:90:5A:84:67:64:E1:0F:5A
            X509v3 Authority Key Identifier:
                keyid:D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:82:6c:77:47:d9:f3:e3:4c:75:d5:21:26:32:94:a4:fe:3c:
         2b:0b:c0:8b:9d:b5:66:0b:67:67:76:81:14:a3:0b:db:e6:d3:
         2c:60:35:01:fb:69:2a:4b:37:97:70:4e:8a:dc:8e:4e:59:48:
         e6:86:bb:57:1f:b2:98:34:24:49:9b:06:c4:c2:11:cd:22:8f:
         08:40:8e:41:69:02:39:16:4b:12:01:31:47:21:39:95:b1:1b:
         5f:45:48:ac:49:a9:21:c3:7d:44:6c:0f:d4:fe:39:07:aa:24:
         03:e0:a7:83:55:ab:6b:77:40:3d:a4:e1:9e:ac:ba:5c:8b:84:
         1e:5a:1f:97:0e:49:41:f7:fc:96:ae:e3:a7:43:fe:8d:0d:e7:
         49:51:ce:3d:36:83:e2:4e:db:9a:d0:5d:3a:1e:27:71:b1:17:
         a4:18:d8:36:9c:94:8c:c3:40:b1:40:3a:0d:3d:5b:40:1a:d7:
         e0:99:3e:e5:b8:ef:d5:ae:7d:ce:57:0d:3f:de:94:18:f3:63:
         8d:2c:7c:5f:e2:b1:bc:39:82:76:e3:88:e0:f6:c5:78:82:9c:
         92:81:8a:40:9f:04:a7:9d:54:d3:bf:27:cf:f2:de:c0:79:2f:
         4c:e9:d6:df:59:0b:4d:1f:1e:64:ac:17:50:e4:8c:05:fe:2e:
         f3:42:8e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:55:33 2025 by rpki-client