Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
File:                     nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft (raw, json)
Hash identifier:          tvrnjeCTFCpV2uR8ZmMkduidpWDMHZYUr1uz6l6F4yw=
Subject key identifier:   6E:A6:F8:B1:DE:FF:47:8B:02:38:7F:6A:34:2E:5C:A1:CC:D6:53:98
Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99
Certificate issuer:       /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
Certificate serial:       0E5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
Manifest number:          0DB7
Signing time:             Sat 14 Jun 2025 17:55:18 +0000
Manifest this update:     Sat 14 Jun 2025 17:55:17 +0000
Manifest next update:     Sat 21 Jun 2025 17:55:17 +0000
Files and hashes:         1: nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl (hash: 9gkdZeMoBxS/zYVd3sPqQ6+8mGz3mqhJ8kK4S2b090A=)
                          2: 7072DE7601C911EC9286E827C4F9AE02.roa (hash: 7msEvTLtFsUPExajJssY7rK4WVcg4LZn9GJ36tHnfps=)
                          3: 72EB65AAC96511EDB2A13779C4F9AE02.roa (hash: EKrxivQN/ugEIGuNskep3asGKS1SHAvX1FnHQ+xTspc=)
                          4: 88A00388193111EB9E0A6A49C4F9AE02.roa (hash: u3WzgpaL6M5sXXo26nPKh9UHSPFb46VhuO2Q5Fo8Shs=)
                          5: 81CDB96A53F111EB85FBFA19C4F9AE02.roa (hash: NWo/6+CZ9HQYfqESvTvUnv7ahdvIp39DlAFteKyJz6Y=)
                          6: 0741B84C2FFA11EB9544F785C4F9AE02.roa (hash: mTcIHah4w3Vjv+PUpTnmqnHZ/WWcS1sHh5BVs3GE+UQ=)
                          7: 12F0D72E7BC111EA8503D815C4F9AE02.roa (hash: xGtgEmqtoxW1ZnFqrfdXZFVQbRuwiMqE40Ohns82lks=)
                          8: 0D90C6C899BC11EEBF0F7411C4F9AE02.roa (hash: OqGy61SUyKNWplMZ7rgfQmmSj9+s8efrmcgKdf6cAJk=)
                          9: B6A7D6FCCAEA11EE8E1B2D36C4F9AE02.roa (hash: SXM3r93+JAbfUFOgTJZWpNNuc7IK/ZoNqCIsmPIym1s=)
                          10: 378C18A43D3D11EAA59A8012C4F9AE02.roa (hash: HNDIzi1kzv+rbEdjXVJF19/xDZWlePAah9JkFcYlECE=)
                          11: 9F71391C684F11EAB45B6F4FC4F9AE02.roa (hash: jVu5ZnLYMd3KFvMDPxIr2Kr82SJ5+hpIDGoI5dhGF7o=)
                          12: 60B3CD6EAF2E11EEBF12DF45C4F9AE02.roa (hash: 1e5MpWXXLnucpXgA7+/6NcCslKn9LXNV+RznqlHIuF0=)
                          13: D17A895C0C5D11EAB1A29D67C4F9AE02.roa (hash: EZcxncfNl0zD/tSncvn3SUo/vaEA9kPik+cwYMuomd0=)
                          14: 2152FB1650C511EAB566FE61C4F9AE02.roa (hash: qiruACIeUuWCHVE9fSq/awWWHhKH4G60m/pcIC2u5z8=)
                          15: 915FFF14A5AF11EAB039ED67C4F9AE02.roa (hash: 2jainDeXw/J702lQhxkzNdpAlcOPjELdE2rK7IEazhc=)
                          16: 03774914696211EC8A05D115C4F9AE02.roa (hash: /71jeZ/z/bjdOuocI7pJpODjcutgjWmyBXnbScV8x34=)
                          17: EDE3E1EE306D11EB9AEE3E86C4F9AE02.roa (hash: zfIXPPCdkOaknfqYs53DeFIT3TNh9PqHIQnfhYmK5wM=)
                          18: B07EF7408DDD11EA8B5F824BC4F9AE02.roa (hash: SBkKKnAR6IJ2hBnL0p0PNg19RBJEETP5xc3S8pI7apE=)
                          19: 45F4DDA265CF11EB9E3CFA6FC4F9AE02.roa (hash: IXKoMwA1CHlc+rwm36botjnh/fDCInGR5gYfUdLmCvQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl
                          rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 17:13:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3679 (0xe5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
        Validity
            Not Before: Jun 14 17:55:17 2025 GMT
            Not After : Jun 21 17:55:17 2025 GMT
        Subject: CN=684db786-93e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a1:bf:e9:6a:d1:73:33:7e:a1:c4:68:f8:dd:
                    89:78:b0:4d:67:11:e1:42:a2:8d:6c:14:73:a5:9a:
                    25:43:ce:93:23:0a:c2:19:6d:cc:c7:ed:bc:54:18:
                    3e:f9:f7:26:6b:ea:b4:b4:49:ea:35:54:c2:4f:cc:
                    2b:05:c7:48:92:93:47:38:11:a3:63:8e:82:3c:83:
                    f0:55:d5:25:0d:f0:9c:a3:62:2b:04:2a:03:6a:fb:
                    cd:9e:a0:04:01:11:d5:0a:ac:e1:ed:3f:08:de:a5:
                    fa:f2:0e:6e:ac:ca:26:bd:89:be:cb:9c:78:92:5f:
                    05:aa:2f:27:81:73:94:13:b0:ab:1d:08:a9:48:35:
                    42:02:aa:00:21:f7:61:04:6a:d9:23:82:92:b8:6d:
                    60:80:11:1f:37:3d:73:b0:03:98:5b:e9:a1:90:a1:
                    58:57:5b:7e:8f:d9:cf:72:6b:6a:03:5a:6b:91:32:
                    6c:73:99:f9:a2:da:f4:ee:c4:e6:4c:87:97:0e:a7:
                    25:df:66:bc:3c:c0:7d:ff:47:ca:c5:d4:bc:25:cc:
                    ed:40:34:9d:90:c3:64:52:a2:9b:a0:1e:2a:78:97:
                    93:a9:a0:1b:f0:2a:b9:be:f3:31:ea:25:58:31:39:
                    18:fb:db:74:ab:ec:9e:75:83:84:a7:70:3b:c6:80:
                    87:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A6:F8:B1:DE:FF:47:8B:02:38:7F:6A:34:2E:5C:A1:CC:D6:53:98
            X509v3 Authority Key Identifier:
                keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:bc:bf:f9:43:7e:e2:a4:b9:b5:b9:5c:7e:e8:4a:95:7a:86:
         a8:c7:15:58:b2:fe:9a:f0:a0:64:fa:04:8d:d8:f9:25:9d:b1:
         95:ea:77:eb:4e:89:9c:cc:6c:95:19:04:91:29:a2:ec:df:6d:
         a2:72:52:2c:e4:c0:93:f0:cf:fd:d0:0f:6d:08:7c:d1:82:d0:
         a4:5f:73:43:eb:6a:9d:8d:9b:4d:03:b8:c1:6e:85:ef:41:fa:
         ab:76:64:a5:1d:22:38:59:bf:f3:3b:ce:01:7a:fc:a4:dc:b5:
         4a:2c:f7:63:84:a9:7c:66:2f:38:68:d3:69:59:8f:73:64:a5:
         15:80:80:e9:ba:03:33:d1:9b:e1:cb:52:b4:5e:a3:17:3e:c4:
         2f:04:93:6d:83:11:ef:23:07:02:0c:82:3a:55:00:54:db:53:
         70:71:6e:a7:34:df:37:88:e7:d5:bb:6f:46:c4:4f:e6:15:0a:
         8c:03:63:a6:1b:dc:3d:00:74:9a:a7:e4:01:04:b3:34:f6:6f:
         72:4e:02:70:26:c6:19:f0:30:a3:88:a0:b4:04:0d:a3:d9:74:
         81:82:25:4a:b1:0a:17:20:f0:a0:73:c3:a1:b8:3c:64:7e:c1:
         6f:eb:ca:da:3a:7b:0d:8d:f0:d2:71:d4:03:30:84:9f:21:66:
         c7:16:89:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:32:29 2025 by rpki-client