Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
File:                     FxesrAU_Ex4iYUUnNlE-To9ibNs.mft (raw, json)
Hash identifier:          EwWuKXZRmRsuQ8qxGDAZjfcediJ4ov41pScNjM01+1U=
Subject key identifier:   5F:A4:87:66:80:17:B0:F5:33:09:62:AE:39:03:79:57:0C:2F:B3:F4
Authority key identifier: 17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB
Certificate issuer:       /CN=A912986D/serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB
Certificate serial:       0AF1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
Manifest number:          0ADA
Signing time:             Fri 08 Aug 2025 20:00:08 +0000
Manifest this update:     Fri 08 Aug 2025 20:00:08 +0000
Manifest next update:     Fri 15 Aug 2025 20:00:08 +0000
Files and hashes:         1: FxesrAU_Ex4iYUUnNlE-To9ibNs.crl (hash: GYoP4GZ4Ph+0l3Cn3XBbuqRLi21ZqNGaarfr5/VHXl4=)
                          2: 618A7D781F7111F09D1AC487C4F9AE02.roa (hash: BeoFag9tTEzgOFNmwhqn3FKUJXneQQBD8+lhK9kVr5o=)
                          3: 13321D24572211EA88CE445FC4F9AE02.roa (hash: O5ljMaLXjT5F5QYrN31gp31zcfvR+zM4AIkQWAKZEY4=)
                          4: 090D807E05F511EEBB8E1062C4F9AE02.roa (hash: UOh7++5vEfWh4Ro/LeqzWIUlR0tMNgzC3QTRX96GET8=)
                          5: 0878844205F511EEBB8E1062C4F9AE02.roa (hash: /6Err68K4WtTvTK2vN0EmkYV4fAmF1HeKbI8wzMjgSU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl
                          rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2801 (0xaf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912986D, serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB
        Validity
            Not Before: Aug  8 20:00:08 2025 GMT
            Not After : Aug 15 20:00:08 2025 GMT
        Subject: CN=68965748-af8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:aa:dc:81:9d:d3:10:ca:61:f5:52:21:36:e6:
                    10:27:90:ee:fd:41:22:0b:dd:50:3c:fb:1a:3b:a4:
                    7f:f3:28:87:07:d4:91:0b:43:6c:3d:9e:2c:0e:50:
                    67:94:58:6c:89:0e:6c:52:26:a2:a3:0b:11:59:59:
                    9b:df:be:60:79:0f:25:dc:95:a0:cd:87:0c:2f:b7:
                    37:ff:34:f3:62:b7:f3:8b:66:9d:e7:d9:4d:6c:54:
                    b2:e7:ad:13:e9:f4:76:9d:20:3a:20:2a:f9:4e:4b:
                    d2:ac:84:f2:e3:e6:31:6d:35:d9:e8:76:29:a8:5a:
                    68:f6:d5:36:10:dd:d2:0c:eb:cc:7d:33:5d:05:d7:
                    69:ff:d3:4d:8b:5b:3d:5d:e1:d8:e3:9a:fb:a3:4a:
                    56:ad:6a:13:5a:06:6c:fc:f6:4b:3c:c5:3e:f8:ec:
                    48:27:70:f2:ee:69:53:2d:50:de:36:13:48:47:cc:
                    55:55:4f:a4:f6:fb:c6:a5:40:f0:72:13:d3:20:9f:
                    d9:cd:ef:3c:b3:cb:31:44:ec:e3:53:5f:81:1f:d1:
                    69:cf:b0:7b:15:b2:5c:5f:10:3f:79:18:02:41:f7:
                    5b:05:d8:3c:31:05:e4:77:94:9c:d8:d0:9c:d9:22:
                    56:b7:10:0e:0b:41:bd:18:19:2a:5e:9d:ef:13:40:
                    88:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A4:87:66:80:17:B0:F5:33:09:62:AE:39:03:79:57:0C:2F:B3:F4
            X509v3 Authority Key Identifier:
                keyid:17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:09:78:53:4b:61:94:c5:14:01:99:90:d2:07:43:f9:62:2d:
         a6:c8:70:fb:dd:29:4b:99:5b:94:92:8d:c7:af:56:05:e9:84:
         c2:69:f8:f2:42:50:06:f7:ac:d8:27:bb:b7:06:7d:87:e4:4b:
         d3:a7:f8:15:da:4a:05:71:d6:ed:91:c0:11:a4:c1:a9:7e:24:
         df:e3:ca:28:53:90:df:24:38:25:75:c8:32:36:98:a9:0f:c7:
         f2:c9:4f:9b:9b:74:18:61:88:ef:fa:27:ba:db:74:5f:47:37:
         84:16:2f:ea:e4:5d:32:40:b7:0e:c7:c6:3f:4d:18:7a:11:38:
         0b:10:97:b8:e5:02:59:f6:8c:30:2d:32:bb:29:23:fd:49:ca:
         7e:25:f2:8e:a3:7c:eb:58:f2:b5:60:9a:ef:cd:24:29:07:8a:
         db:dc:f2:57:55:1d:77:b3:0e:20:b0:77:8e:b2:f2:93:98:cc:
         b8:4d:ab:5d:44:50:69:b2:9a:55:1c:5a:89:7c:ab:5f:99:ec:
         47:7c:80:3a:a9:ad:95:e0:a1:ad:c6:df:66:aa:f5:84:59:cc:
         07:bc:96:3d:64:7d:fb:ae:e3:99:96:d1:72:c3:e5:90:25:0a:
         aa:be:75:82:06:33:30:63:cc:21:c2:f8:3d:a6:d6:9e:eb:02:
         d4:d7:73:a7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjk4NkQxMTAvBgNVBAUTKDE3MTdBQ0FDMDUzRjEzMUUyMjYxNDUyNzM2NTEzRTRF
OEY2MjZDREIwHhcNMjUwODA4MjAwMDA4WhcNMjUwODE1MjAwMDA4WjAYMRYwFAYD
VQQDEw02ODk2NTc0OC1hZjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxKrcgZ3TEMph9VIhNuYQJ5Du/UEiC91QPPsaO6R/8yiHB9SRC0NsPZ4sDlBn
lFhsiQ5sUiaiowsRWVmb375geQ8l3JWgzYcML7c3/zTzYrfzi2ad59lNbFSy560T
6fR2nSA6ICr5TkvSrITy4+YxbTXZ6HYpqFpo9tU2EN3SDOvMfTNdBddp/9NNi1s9
XeHY45r7o0pWrWoTWgZs/PZLPMU++OxIJ3Dy7mlTLVDeNhNIR8xVVU+k9vvGpUDw
chPTIJ/Zze88s8sxROzjU1+BH9Fpz7B7FbJcXxA/eRgCQfdbBdg8MQXkd5Sc2NCc
2SJWtxAOC0G9GBkqXp3vE0CI4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+kh2aA
F7D1MwlirjkDeVcML7P0MB8GA1UdIwQYMBaAFBcXrKwFPxMeImFFJzZRPk6PYmzb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTg2RC9BMDA3NEQxODUz
M0IxMUVBQkFBNzVCM0FDNEY5QUUwMi9GeGVzckFVX0V4NGlZVVVuTmxFLVRvOWli
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Z4ZXNyQVVfRXg0aVlVVW5ObEUtVG85aWJOcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OTg2RC9BMDA3NEQxODUzM0IxMUVBQkFBNzVCM0FDNEY5QUUwMi9GeGVzckFVX0V4
NGlZVVVuTmxFLVRvOWliTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBMCXhTS2GUxRQBmZDSB0P5Yi2myHD73SlLmVuUko3Hr1YF6YTCafjy
QlAG96zYJ7u3Bn2H5EvTp/gV2koFcdbtkcARpMGpfiTf48ooU5DfJDgldcgyNpip
D8fyyU+bm3QYYYjv+ie623RfRzeEFi/q5F0yQLcOx8Y/TRh6ETgLEJe45QJZ9oww
LTK7KSP9Scp+JfKOo3zrWPK1YJrvzSQpB4rb3PJXVR13sw4gsHeOsvKTmMy4Tatd
RFBpsppVHFqJfKtfmexHfIA6qa2V4KGtxt9mqvWEWcwHvJY9ZH37ruOZltFyw+WQ
JQqqvnWCBjMwY8whwvg9ptae6wLU13On
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:40:14 2025 by rpki-client