Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
File:                     6N-NXkyE2ofXKac8HE6GETgassE.mft (raw, json)
Hash identifier:          V5x0nT5hYQ3fhqsan/WPr0O0D8Nn3Zz9/5rRRJdZ5f8=
Subject key identifier:   92:73:5E:D6:1D:55:85:E1:09:94:B9:B5:33:FA:13:18:6A:19:06:DE
Authority key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1
Certificate issuer:       /CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
Certificate serial:       2A5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
Manifest number:          2A36
Signing time:             Fri 08 Aug 2025 15:39:53 +0000
Manifest this update:     Fri 08 Aug 2025 15:39:52 +0000
Manifest next update:     Fri 15 Aug 2025 15:39:52 +0000
Files and hashes:         1: 6N-NXkyE2ofXKac8HE6GETgassE.crl (hash: cEwHGuZpbML74cTZ/ABfH1zP0S0Q5lbgdJYmgCxptz8=)
                          2: 3785190EF0FE11EEA034D07EC4F9AE02.roa (hash: nsCF4rGbw9XGs9CgJZKLcahJ7vZuzL6jjWzwGBe2QfI=)
                          3: E86E188A795F11EFBF3B491CC4F9AE02.roa (hash: xkr6cXGQ/p7K1jYKezf1z+xt8LJrbP87Z5GaO3mC9Iw=)
                          4: 445DB498796011EFA7E9391DC4F9AE02.roa (hash: dA0s4TToOxTxCGWPhL3CMsQZBEq0Isrnu6dBhBWPJ8w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl
                          rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10844 (0x2a5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B01C7, serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
        Validity
            Not Before: Aug  8 15:39:52 2025 GMT
            Not After : Aug 15 15:39:52 2025 GMT
        Subject: CN=68961a48-e958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dc:b9:86:37:28:bc:34:4d:60:ad:28:d7:79:
                    5b:db:dc:62:7e:f3:25:1b:f4:e2:57:a7:44:a9:5c:
                    89:3c:53:f1:0b:4f:e4:f0:9d:6f:91:a7:47:c0:6b:
                    0f:46:1a:ee:dd:cf:e6:7d:84:ee:ce:d8:3b:ca:7b:
                    33:d5:f5:34:e3:4a:40:c9:f3:3b:32:50:7b:50:fe:
                    7b:1f:13:90:bf:62:52:1f:dd:39:69:d7:0f:52:33:
                    37:9f:47:04:86:fd:71:19:f5:03:bb:15:16:b6:d2:
                    46:6f:c8:7e:66:76:a0:01:85:4e:3f:d2:9a:ad:03:
                    1d:95:a1:e2:34:a1:90:a2:e5:cb:23:13:ee:da:3f:
                    89:ba:1b:c7:5f:03:c4:46:f5:20:a5:76:31:b9:79:
                    c2:a0:16:eb:c3:20:06:38:5d:d0:11:12:26:c0:f8:
                    6c:d9:70:ba:53:b6:ae:32:d1:08:b8:4b:aa:f5:5f:
                    50:73:26:14:5b:88:4f:ee:e1:17:32:51:8e:a2:80:
                    c4:87:79:92:47:84:8b:6f:98:fe:61:7b:30:a5:2d:
                    30:87:f8:0c:47:1d:55:39:4d:b5:6b:97:9f:ba:de:
                    dc:a7:b8:ee:55:d2:3a:57:40:e5:7b:8e:19:9d:c6:
                    4e:00:bd:67:52:3a:f3:92:26:82:40:26:25:fa:a8:
                    65:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:73:5E:D6:1D:55:85:E1:09:94:B9:B5:33:FA:13:18:6A:19:06:DE
            X509v3 Authority Key Identifier:
                keyid:E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:09:a2:39:75:e7:5a:1e:2e:77:a7:ea:7b:5e:4d:ea:76:37:
         51:9e:4b:80:ac:8d:9f:2e:c0:61:6b:49:f0:92:aa:a4:83:ee:
         51:05:e3:27:1a:d3:e9:79:31:4d:87:6f:1e:22:f0:0c:be:4a:
         80:6a:e7:60:7c:99:85:b0:bb:19:ab:a8:0c:1f:7d:e6:89:93:
         1f:be:3f:f7:a8:21:c4:b0:30:91:9c:2a:ba:3c:55:68:2a:1f:
         06:98:8f:f0:13:42:0f:af:c0:c0:c8:e0:f5:05:42:3e:58:35:
         4a:fc:61:b3:9d:03:4a:1d:55:33:f7:d0:5a:0a:0a:b7:87:12:
         b3:36:70:af:da:be:7e:d8:41:71:4b:51:51:e3:88:53:88:5d:
         d0:cd:da:0d:e1:05:fd:96:b4:27:cb:b3:57:81:a4:e4:8e:a5:
         c4:29:a3:c1:6f:1f:0d:00:ce:eb:8b:8e:75:fd:bc:0b:37:01:
         6c:07:09:30:48:73:5a:9d:df:b0:9a:bb:a3:4e:5d:fc:cb:5d:
         65:c9:21:47:24:15:a7:e8:9a:f2:3d:99:9c:b9:b2:18:2a:98:
         30:65:e5:47:bb:11:48:74:0a:88:c9:15:d4:91:b6:33:e7:8f:
         4c:ef:c6:2a:f2:35:67:a3:fc:78:09:fe:bd:ce:10:63:73:38:
         10:02:6e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:48:43 2025 by rpki-client