Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
File:                     nN366rxkvM14iClikQ7BkqLSKDg.mft (raw, json)
Hash identifier:          NfKHJjHFbZh10YeN0aWtdFFZ86ZjmFG+1xss/DKVuYE=
Subject key identifier:   C7:D5:18:80:F3:79:B7:64:2B:1C:BA:F9:00:04:9B:AD:8A:7A:87:A7
Authority key identifier: 9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38
Certificate issuer:       /CN=A91D6F21/serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
Certificate serial:       8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
Manifest number:          8A
Signing time:             Thu 07 Aug 2025 07:08:08 +0000
Manifest this update:     Thu 07 Aug 2025 07:08:08 +0000
Manifest next update:     Thu 14 Aug 2025 07:08:08 +0000
Files and hashes:         1: nN366rxkvM14iClikQ7BkqLSKDg.crl (hash: 5ismypUg40CaYaKu3CvYLsBuUjZseU5eyQgBK+X5o/E=)
                          2: 6EBBA0F4A1AD11EF8A984349C4F9AE02.roa (hash: 4TxOvtXO/ZobHaFuZq+jlbsn4MEouHzffnZwxkoUjpM=)
                          3: 685DC124EC7B11EFAF014776C4F9AE02.roa (hash: HNlIYD/ULKjSdzSST5l7khzVoaw7HPjUFT3q9CFffJQ=)
                          4: 6F25556CA1AD11EF8A984349C4F9AE02.roa (hash: 9vy2sRLiVK7gv+Iu4032kUkO8gYn31dF49cn6btcuzY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl
                          rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6F21, serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
        Validity
            Not Before: Aug  7 07:08:08 2025 GMT
            Not After : Aug 14 07:08:08 2025 GMT
        Subject: CN=689450d8-af60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dc:d1:20:d7:b4:23:27:ed:2b:52:ed:a4:55:
                    f3:b2:ba:83:14:46:da:f7:2c:78:f7:4a:cc:f0:4e:
                    2b:d8:0c:a5:94:05:af:70:58:9f:ae:2e:39:26:8d:
                    9b:64:44:3a:a9:a1:fc:b0:9f:36:cd:47:09:25:92:
                    bf:f7:48:7e:69:25:6e:7e:e5:9a:88:eb:94:97:a1:
                    47:96:45:1c:00:c6:9a:d1:fb:c8:84:58:91:6b:1b:
                    61:5f:2c:db:f0:4f:45:05:f0:98:32:67:03:5a:83:
                    1b:26:0e:b3:6e:26:ae:67:56:c9:09:49:ce:07:34:
                    1d:20:85:bb:1c:ca:9d:8e:3b:1f:7d:65:95:e5:9d:
                    68:e2:df:3a:41:16:7f:5f:45:2d:fd:de:fa:7f:77:
                    a5:a5:f9:04:4d:23:b6:81:2f:da:9c:b0:c6:6c:9c:
                    b6:20:ab:cc:11:c4:bc:60:74:45:52:75:4d:ca:83:
                    02:88:74:c7:59:a1:30:40:8f:62:3e:09:78:0b:06:
                    22:5a:25:76:f6:aa:32:02:90:48:9a:85:8c:6f:0c:
                    e6:61:66:af:b8:2a:d3:68:b8:f0:5b:fd:84:40:75:
                    b7:17:50:10:2b:56:22:cc:37:bc:18:ae:f8:2f:d2:
                    47:52:89:f0:89:84:42:fe:a4:8b:b9:d6:0e:81:77:
                    74:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D5:18:80:F3:79:B7:64:2B:1C:BA:F9:00:04:9B:AD:8A:7A:87:A7
            X509v3 Authority Key Identifier:
                keyid:9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:9d:84:d1:29:0d:b9:72:ef:9d:b5:58:fa:c8:f7:26:88:1c:
         53:60:13:a8:a9:04:37:1d:f0:cd:22:aa:00:ae:bb:a9:c0:78:
         eb:67:b5:62:ed:ad:91:59:d4:41:91:23:03:06:71:85:82:43:
         a4:48:08:ee:f4:11:8c:c8:0b:03:d3:57:95:e9:04:99:1f:eb:
         2f:7b:cb:dd:17:46:01:bc:6f:82:ac:76:02:b6:b0:19:3d:03:
         58:f1:da:71:75:52:59:bb:39:33:99:68:9a:15:91:cb:f4:fd:
         f3:c9:48:51:b9:23:84:fa:d1:15:09:f5:e7:4a:e3:70:87:af:
         b6:d7:b9:63:c4:9d:06:48:b6:5c:e5:0c:69:63:9f:b8:1a:60:
         6e:7d:b6:ff:e2:dd:4e:c6:e5:b3:e0:f5:b9:1d:75:6a:b3:fd:
         00:56:10:78:01:88:7d:bc:b4:b8:78:4d:13:2a:e5:3f:02:16:
         39:75:3f:2d:ce:cb:cb:76:df:09:10:d5:e7:e1:7b:96:70:ba:
         a2:09:9b:0c:08:d1:19:20:ff:74:79:5d:67:8a:50:b7:d3:f0:
         42:3a:78:bb:8d:28:3b:2f:fc:69:42:b2:1a:da:2f:cb:1f:9f:
         bd:72:b8:bc:b9:d1:39:97:36:45:9f:52:c9:c7:1c:a2:98:6b:
         57:7e:d2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:48:07 2025 by rpki-client