Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
File:                     N0X7n36iweJS0pvv2GphV3YNiMA.mft (raw, json)
Hash identifier:          d45oFePzqFjXMDM3v2byMdenQKcdOs2DXyT2mLmq76U=
Subject key identifier:   5C:67:5F:DC:8E:2C:10:BE:F3:56:E5:B9:D5:40:2A:3D:B4:E4:5D:83
Authority key identifier: 37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0
Certificate issuer:       /CN=A91EEAD3/serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0
Certificate serial:       E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
Manifest number:          E3
Signing time:             Sat 09 Aug 2025 05:51:33 +0000
Manifest this update:     Sat 09 Aug 2025 05:51:33 +0000
Manifest next update:     Sat 16 Aug 2025 05:51:33 +0000
Files and hashes:         1: N0X7n36iweJS0pvv2GphV3YNiMA.crl (hash: JXj0TgVS9RsHctmCn1jnUo/Zu1JshSkwp+PNwneVQcA=)
                          2: E989DE0C1E2E11EFB8D12A2BC4F9AE02.roa (hash: PkN1Jtt374CIHLZsHPqXl9liocYOPeAQiQHQB34mvOQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl
                          rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEAD3, serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0
        Validity
            Not Before: Aug  9 05:51:33 2025 GMT
            Not After : Aug 16 05:51:33 2025 GMT
        Subject: CN=6896e1e5-0b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a6:c2:03:86:0e:38:dc:fa:f2:59:22:92:5f:
                    74:b1:2f:56:8a:51:b6:bf:07:69:f0:16:25:4f:2d:
                    1c:c9:11:7f:46:34:07:03:27:e3:82:82:6b:28:c9:
                    e9:ab:38:93:50:df:5e:ee:17:99:7a:23:a2:5e:18:
                    8a:06:80:58:6d:68:a1:b1:ab:f0:20:d0:97:c3:f8:
                    71:e2:a8:3c:c7:28:a2:e1:62:02:1a:5a:21:7c:51:
                    ab:77:72:8c:7b:09:4d:b5:c6:93:73:9c:62:17:a5:
                    5f:6b:75:ef:95:be:d7:33:15:5f:2e:7a:f8:0f:81:
                    c6:97:12:e4:32:b5:70:8a:d8:5d:13:d9:b4:32:16:
                    14:07:2d:72:e1:63:0e:37:7d:c3:6f:33:90:14:46:
                    dc:40:66:f8:08:60:6c:79:b4:8c:ba:10:87:1a:9d:
                    ac:e9:03:be:71:dc:7f:84:17:29:60:9d:17:c8:ae:
                    72:1e:81:d4:b1:7b:b8:2f:19:87:f3:95:54:1d:d7:
                    67:85:75:15:b1:cc:08:96:91:ac:45:53:4f:3d:ce:
                    f8:45:ff:a5:9d:77:db:b8:cd:1b:a9:bd:04:68:0c:
                    0f:a4:68:c5:65:d3:06:34:59:fe:f3:27:18:8a:b4:
                    d4:a5:37:bb:0a:93:fc:5d:79:41:08:13:4d:31:83:
                    8f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:67:5F:DC:8E:2C:10:BE:F3:56:E5:B9:D5:40:2A:3D:B4:E4:5D:83
            X509v3 Authority Key Identifier:
                keyid:37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:87:30:b7:e2:66:66:0f:27:78:18:11:6a:04:1b:af:8b:14:
         39:c1:20:f2:38:45:dc:24:f1:46:be:48:9d:1f:2e:b0:62:8f:
         68:2d:a2:8d:bd:c8:9a:bd:6e:a9:9a:3c:9e:36:36:5a:07:b1:
         89:e4:7f:31:7c:c2:ad:2a:22:1b:af:a2:87:95:43:e3:e0:06:
         bb:4a:61:a0:72:b6:04:9d:49:12:f2:5c:5d:28:14:06:e7:86:
         76:d1:52:c4:e9:32:e2:c5:02:df:2f:cd:14:bd:32:87:f3:d3:
         b8:18:51:c6:96:2d:ed:9a:d9:32:52:80:19:4b:27:20:04:1f:
         90:98:87:7d:43:fc:5e:59:8b:c0:85:bf:1f:a9:8b:aa:0f:9f:
         db:6a:c9:04:da:c1:c1:77:12:90:fe:8e:53:30:1a:c2:99:2e:
         90:9d:f9:d8:31:16:94:ea:26:56:30:5d:48:04:31:e1:ba:4b:
         0c:2d:cd:77:94:11:e2:26:1d:c4:f1:6d:50:af:54:41:d9:72:
         17:e4:6a:d9:53:67:57:00:77:11:ca:54:82:6f:80:d0:b3:2c:
         80:95:fd:e0:74:c1:4f:7c:fe:be:db:d5:86:2a:49:7f:db:d3:
         b8:06:41:e2:7b:18:72:ae:07:b4:37:df:cd:00:a0:1b:79:62:
         e1:c3:d4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:37:43 2025 by rpki-client