Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft
File:                     NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft (raw, json)
Hash identifier:          vpwNawqvgNb3UYDSSggukAdiuDdUoQjqsxG+qzabPXc=
Subject key identifier:   1B:A5:81:D4:60:30:DE:03:B1:05:EA:BC:8B:9C:C0:DA:F0:92:10:75
Authority key identifier: 34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B
Certificate issuer:       /CN=A91A56E7/serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B
Certificate serial:       0C29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft
Manifest number:          0C22
Signing time:             Mon 04 Aug 2025 18:53:14 +0000
Manifest this update:     Mon 04 Aug 2025 18:53:13 +0000
Manifest next update:     Mon 11 Aug 2025 18:53:13 +0000
Files and hashes:         1: NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl (hash: ZKQLPNNbWPyhreA0rR1fL2ITfg/TWALKsoKy7h/xXcg=)
                          2: 2157C3E011C211EA93417583C4F9AE02.roa (hash: Sb4C6SBlwbEgArJd0mwobbSvCSiB+bY80WW0ZbhEHoI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl
                          rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 18:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3113 (0xc29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A56E7, serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B
        Validity
            Not Before: Aug  4 18:53:13 2025 GMT
            Not After : Aug 11 18:53:13 2025 GMT
        Subject: CN=68910199-cc7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2e:26:a3:1f:53:64:c6:c9:ff:84:c9:a4:ff:
                    3a:05:ed:5a:8e:47:49:c6:66:de:19:52:85:12:f6:
                    54:e0:8c:80:df:28:f8:c5:43:1a:e6:47:54:8d:a6:
                    bf:16:4d:40:73:05:91:e5:fd:88:a5:97:97:27:03:
                    68:20:e3:80:22:98:7c:58:be:8c:c6:8b:47:88:2b:
                    4a:97:b1:bf:bc:eb:6d:ea:0b:1b:56:64:3f:d1:8b:
                    ea:30:95:4b:6c:94:9a:b1:9f:5a:af:b4:11:a6:95:
                    ab:57:97:a5:86:f1:96:8d:d1:58:2f:a0:91:ed:65:
                    cc:42:d4:44:ea:41:44:f2:83:10:ff:30:16:f0:d8:
                    dd:28:d0:37:59:a2:f7:17:ce:41:6e:78:87:ef:50:
                    e5:27:98:ce:64:2b:03:01:c9:6b:17:ba:7d:de:48:
                    73:62:27:ab:fb:f5:e1:8c:a1:66:93:ab:35:88:c2:
                    95:e6:e6:5e:73:64:ba:b4:56:4d:64:6d:8f:0b:c1:
                    06:4b:cc:9d:80:1c:af:b2:83:06:d5:1c:57:61:81:
                    32:bc:fb:82:58:73:cb:1c:f4:92:63:59:c3:08:27:
                    51:dd:8c:4c:6c:c0:a8:c3:da:04:28:d3:59:a9:86:
                    54:45:56:c7:fa:e2:5f:77:c7:38:2d:ef:82:c4:81:
                    a7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A5:81:D4:60:30:DE:03:B1:05:EA:BC:8B:9C:C0:DA:F0:92:10:75
            X509v3 Authority Key Identifier:
                keyid:34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:12:70:98:32:7e:95:b9:bb:75:8b:80:49:1c:9e:27:14:f0:
         fe:8c:8e:27:84:2d:ae:f2:bb:0b:6e:04:e8:ec:1b:28:d9:c2:
         2e:4e:48:e2:64:de:e8:e2:7c:49:c8:49:6a:f0:9c:3f:c2:be:
         88:33:a9:18:75:c8:7f:f3:9d:43:d6:8c:0e:35:4a:50:f9:4c:
         dd:39:68:76:49:a7:aa:20:2d:5a:a0:c8:92:ef:40:20:79:86:
         59:07:bd:14:2f:20:0a:b3:b0:5b:70:ef:7f:cb:d8:47:f9:d1:
         76:c7:41:62:4b:43:82:6e:9c:fe:95:96:60:30:88:5b:03:42:
         15:dc:03:2e:18:7a:c1:61:51:7f:7b:f3:4f:45:3f:2b:fd:5d:
         86:32:ef:48:54:ef:32:e9:35:50:a4:2a:16:14:19:21:06:4f:
         87:c7:7b:e7:a3:8a:8e:a8:b5:16:33:33:90:4a:7a:6e:ce:f9:
         ac:7b:fc:a4:a8:a8:c8:17:55:05:59:10:c7:55:c8:5a:2c:4c:
         15:65:ba:26:d5:d7:a8:57:a2:59:ea:e8:2f:d7:f5:a2:8a:65:
         52:49:cc:f2:a7:60:1c:d2:49:26:22:eb:35:f3:82:ab:9a:40:
         f3:5b:6b:39:77:96:92:20:26:f8:49:78:cd:a9:4f:b9:27:b2:
         93:43:bf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:30:40 2025 by rpki-client