Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
File:                     fCqWpakDTN8qeG9kvfJ_2KxRySs.mft (raw, json)
Hash identifier:          izlndIyvrpvWD6Xby515rLYio5raMeHpwoWtJcO9i6Q=
Subject key identifier:   8B:15:03:F3:54:94:2D:DD:87:27:A2:FA:01:B2:57:8A:1B:5B:3E:ED
Authority key identifier: 7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B
Certificate issuer:       /CN=A9125E89/serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B
Certificate serial:       0615
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
Manifest number:          0610
Signing time:             Sun 10 Aug 2025 22:55:01 +0000
Manifest this update:     Sun 10 Aug 2025 22:55:01 +0000
Manifest next update:     Sun 17 Aug 2025 22:55:01 +0000
Files and hashes:         1: fCqWpakDTN8qeG9kvfJ_2KxRySs.crl (hash: TBFAQ5u7u9LaJ/UzQeqp5yUauF3J1dOKp3lrZLCLBZE=)
                          2: 12CC9D1857A711EDB284106DC4F9AE02.roa (hash: IJ+fkHbxBE1SHSjZ2ko97tJx/Im9hMimIC1imqln5xg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl
                          rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 17 Aug 2025 22:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1557 (0x615)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125E89, serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B
        Validity
            Not Before: Aug 10 22:55:01 2025 GMT
            Not After : Aug 17 22:55:01 2025 GMT
        Subject: CN=68992345-930c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:67:fc:0e:f3:16:4e:92:89:3f:4d:0e:04:82:
                    02:57:44:d4:68:ec:f0:9b:e1:19:ee:03:ec:90:47:
                    4a:a1:9d:6b:1d:56:3d:f0:38:61:2e:72:8a:e5:a7:
                    b9:cc:fb:1d:ba:be:29:14:ff:0c:e0:3e:a6:07:10:
                    f1:c5:19:82:a8:aa:73:bb:ab:6e:65:71:91:6e:e7:
                    a5:be:45:26:22:ee:02:cf:ba:01:e8:41:03:36:eb:
                    21:a6:57:8a:e7:a9:95:09:43:46:b5:ec:b7:27:aa:
                    79:93:38:98:b4:24:7f:03:de:c4:b7:59:56:4f:82:
                    6a:4f:19:46:dd:04:09:5f:93:0f:92:a8:bc:2d:c8:
                    44:68:17:d9:bb:2f:bf:0e:4e:bb:b0:d2:7f:68:08:
                    35:cf:9f:3a:58:d8:3f:96:c9:20:1d:76:1f:ce:61:
                    08:f5:4f:a3:96:b6:b0:bc:bf:6e:9e:70:4f:33:00:
                    fa:cc:ef:9e:d3:92:4c:66:e1:6b:46:ca:a9:7a:47:
                    14:3a:7c:9c:89:98:d3:a2:a5:eb:7b:2f:69:f0:3f:
                    50:c2:23:c2:75:5b:8c:b6:3b:6b:97:b7:19:6b:40:
                    31:ff:57:17:76:dd:bf:bc:c2:c3:0e:a6:51:59:b1:
                    95:84:9f:92:f0:b8:0e:b3:84:cf:29:d4:5c:8b:3d:
                    e6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:15:03:F3:54:94:2D:DD:87:27:A2:FA:01:B2:57:8A:1B:5B:3E:ED
            X509v3 Authority Key Identifier:
                keyid:7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:cf:f1:88:0c:e1:28:24:c0:62:5c:6f:b9:48:c1:e4:68:ba:
         9b:cb:88:4a:9a:b5:42:17:60:35:c3:a5:61:c3:af:f8:30:72:
         3c:3a:2f:01:f7:87:47:9f:57:ae:71:4f:20:e8:aa:0c:45:e4:
         ec:d7:28:c7:3a:c7:61:59:5c:c7:c6:69:ee:b4:86:11:5f:a9:
         9d:46:6d:ee:2e:a1:f3:15:e1:1a:2f:dc:4f:7c:f8:80:50:fa:
         d5:72:6a:a4:1d:1f:ed:77:70:68:41:9e:de:fc:91:86:e2:80:
         ea:f9:f3:a2:2f:f0:b6:35:3c:cf:51:b0:d2:1b:c9:7a:6b:92:
         8c:d4:6e:ff:8a:84:3c:34:7a:dc:17:d3:01:12:1c:f4:13:00:
         df:92:d7:13:29:95:72:d3:41:79:97:cc:bf:66:57:4b:3f:8a:
         c4:6b:96:bd:7b:6f:6d:1d:f6:c4:72:cb:20:00:e2:e1:72:e1:
         50:7e:d3:23:91:a0:79:98:3c:9f:6f:6d:50:cd:53:9d:be:3b:
         1a:b5:ba:8c:6c:9c:47:97:00:e7:16:d3:3c:bf:1f:45:54:51:
         f3:47:64:d6:1c:93:4b:a8:cb:9d:a2:f9:43:df:4a:81:b1:29:
         9d:88:2e:76:35:32:a2:73:9a:3b:2f:9b:96:f4:90:05:02:5f:
         06:ed:8a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:57:46 2025 by rpki-client