Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft
File:                     0NbEemjLQdEG6wQtcma5y7_Bpzs.mft (raw, json)
Hash identifier:          HbYGG7G1JPDZIHZWQn6o99rt7AwZtiSSHUnJXqIjLcg=
Subject key identifier:   91:4A:C2:A2:4E:6A:69:D4:83:EA:CB:BD:4E:7E:E9:4A:7C:78:B4:1E
Authority key identifier: D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B
Certificate issuer:       /CN=A91EBF76/serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B
Certificate serial:       0681
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft
Manifest number:          067C
Signing time:             Fri 08 Aug 2025 22:46:49 +0000
Manifest this update:     Fri 08 Aug 2025 22:46:49 +0000
Manifest next update:     Fri 15 Aug 2025 22:46:49 +0000
Files and hashes:         1: 0NbEemjLQdEG6wQtcma5y7_Bpzs.crl (hash: CdE+myP3hHb3MiL5LOpEoQUe1r1WkTDMBXCBCGiun0A=)
                          2: 5FBDA400853011EBA1AF1D76C4F9AE02.roa (hash: av1fp+B0Rvyyl/M+tQ87N6LBAVDY2pJUK/6gF5bMDYg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl
                          rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1665 (0x681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBF76, serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B
        Validity
            Not Before: Aug  8 22:46:49 2025 GMT
            Not After : Aug 15 22:46:49 2025 GMT
        Subject: CN=68967e59-9149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b2:7a:cc:43:33:5f:d0:8c:5b:86:3c:6e:4e:
                    3d:c4:16:b2:35:3a:a9:00:4c:2a:66:16:03:a3:49:
                    e8:dc:4e:47:11:21:1c:28:4a:d1:29:05:f0:13:d0:
                    ff:c7:2e:5e:b5:7d:77:1e:53:ad:4b:8c:fc:ec:4f:
                    f0:a6:9c:16:b8:64:ae:af:fd:8d:02:49:62:9d:12:
                    de:43:2c:32:0d:70:fe:a7:5f:08:6f:99:e0:e4:64:
                    ed:9e:d3:30:34:82:77:0c:54:6b:77:64:e6:12:77:
                    f3:7c:d6:bd:48:fa:13:c5:82:84:86:7c:26:c1:07:
                    2c:27:4f:08:a0:0b:4d:a8:ad:9f:5f:89:97:27:4f:
                    1a:4d:8d:8a:e3:f6:38:53:93:77:0b:cf:c6:d2:83:
                    7e:9a:40:9c:55:23:53:26:6c:cb:69:db:45:ec:a0:
                    7e:01:78:37:1a:5e:bc:5f:97:5e:1b:4c:38:b8:64:
                    e7:1b:ec:a1:8b:07:57:7a:91:d1:ac:5a:61:81:72:
                    fa:d1:23:5b:fc:f0:e3:77:86:40:06:6a:fb:4b:fe:
                    3e:ff:62:7a:86:19:13:63:ab:53:2a:f5:cc:50:01:
                    66:3e:17:ec:06:a1:ec:4d:40:94:7a:d4:7c:91:d2:
                    c1:91:e1:ae:38:f8:2e:2c:b7:de:c1:95:4f:17:0f:
                    08:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:4A:C2:A2:4E:6A:69:D4:83:EA:CB:BD:4E:7E:E9:4A:7C:78:B4:1E
            X509v3 Authority Key Identifier:
                keyid:D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:4c:47:b4:49:1c:cd:e1:e1:a5:a3:4b:a0:93:6e:fb:81:f4:
         3e:06:ef:77:97:e0:1f:9d:72:ea:8a:2f:07:68:d7:37:98:1c:
         d4:2e:8b:66:4d:fb:3b:60:e2:84:70:cb:bc:31:17:87:f0:3b:
         46:d7:78:f0:1a:dc:d2:4f:de:37:39:60:11:0c:7a:74:51:69:
         6d:e3:f6:26:04:a8:8b:f2:0a:c3:08:ca:c2:92:c5:9d:2d:a1:
         5b:9b:e7:6d:36:da:29:75:0f:bf:a9:c4:33:c0:5a:44:da:14:
         b3:3b:ca:ca:22:8a:8b:26:26:7b:8b:f2:04:46:0f:5c:0e:7b:
         08:80:0d:28:f6:46:bc:94:58:e1:74:55:cd:fe:fe:0c:7a:4f:
         ce:df:76:74:ce:2f:e7:b9:0b:6d:1b:af:c9:19:60:32:53:d4:
         cb:13:e4:d9:ef:e2:ff:85:be:1c:17:cb:4f:ba:16:1e:74:75:
         c1:79:3a:5b:5d:5c:38:95:f3:be:a2:9b:f3:c2:f0:df:44:62:
         86:b4:49:4d:5e:56:5e:a3:d8:56:8b:9b:94:7a:f7:e2:48:83:
         43:5f:00:c0:e1:c9:67:99:65:61:f3:6c:58:92:f6:02:13:69:
         ac:f5:76:44:42:86:27:59:75:78:d0:51:77:38:69:3f:d7:30:
         ec:1b:5f:c6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUJGNzYxMTAvBgNVBAUTKEQwRDZDNDdBNjhDQjQxRDEwNkVCMDQyRDcyNjZCOUNC
QkZDMUE3M0IwHhcNMjUwODA4MjI0NjQ5WhcNMjUwODE1MjI0NjQ5WjAYMRYwFAYD
VQQDEw02ODk2N2U1OS05MTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAubJ6zEMzX9CMW4Y8bk49xBayNTqpAEwqZhYDo0no3E5HESEcKErRKQXwE9D/
xy5etX13HlOtS4z87E/wppwWuGSur/2NAklinRLeQywyDXD+p18Ib5ng5GTtntMw
NIJ3DFRrd2TmEnfzfNa9SPoTxYKEhnwmwQcsJ08IoAtNqK2fX4mXJ08aTY2K4/Y4
U5N3C8/G0oN+mkCcVSNTJmzLadtF7KB+AXg3Gl68X5deG0w4uGTnG+yhiwdXepHR
rFphgXL60SNb/PDjd4ZABmr7S/4+/2J6hhkTY6tTKvXMUAFmPhfsBqHsTUCUetR8
kdLBkeGuOPguLLfewZVPFw8I+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFKwqJO
amnUg+rLvU5+6Up8eLQeMB8GA1UdIwQYMBaAFNDWxHpoy0HRBusELXJmucu/wac7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkY3Ni9BNkRFMDk3Qzg1
MjMxMUVCQjdFOUYzODNDNEY5QUUwMi8wTmJFZW1qTFFkRUc2d1F0Y21hNXk3X0Jw
enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBOYkVlbWpMUWRFRzZ3UXRjbWE1eTdfQnB6cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QkY3Ni9BNkRFMDk3Qzg1MjMxMUVCQjdFOUYzODNDNEY5QUUwMi8wTmJFZW1qTFFk
RUc2d1F0Y21hNXk3X0JwenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAETEe0SRzN4eGlo0ugk277gfQ+Bu93l+AfnXLqii8HaNc3mBzULotm
Tfs7YOKEcMu8MReH8DtG13jwGtzST943OWARDHp0UWlt4/YmBKiL8grDCMrCksWd
LaFbm+dtNtopdQ+/qcQzwFpE2hSzO8rKIoqLJiZ7i/IERg9cDnsIgA0o9ka8lFjh
dFXN/v4Mek/O33Z0zi/nuQttG6/JGWAyU9TLE+TZ7+L/hb4cF8tPuhYedHXBeTpb
XVw4lfO+opvzwvDfRGKGtElNXlZeo9hWi5uUevfiSINDXwDA4clnmWVh82xYkvYC
E2ms9XZEQoYnWXV40FF3OGk/1zDsG1/G
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:23:14 2025 by rpki-client