Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.mft
File:                     Fp97ebHLC9YNnChOysqKz1dZgFE.mft (raw, json)
Hash identifier:          zHkRpsVivxxNyld+3Qlq78yNq48PMEOr653mWdhrx5I=
Subject key identifier:   13:05:B1:07:86:8D:69:49:B3:87:8F:C1:FE:83:8D:04:A5:9D:B8:FC
Authority key identifier: 16:9F:7B:79:B1:CB:0B:D6:0D:9C:28:4E:CA:CA:8A:CF:57:59:80:51
Certificate issuer:       /CN=A9137627/serialNumber=169F7B79B1CB0BD60D9C284ECACA8ACF57598051
Certificate serial:       8A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fp97ebHLC9YNnChOysqKz1dZgFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.mft
Manifest number:          88
Signing time:             Sat 09 Aug 2025 07:04:46 +0000
Manifest this update:     Sat 09 Aug 2025 07:04:46 +0000
Manifest next update:     Sat 16 Aug 2025 07:04:46 +0000
Files and hashes:         1: Fp97ebHLC9YNnChOysqKz1dZgFE.crl (hash: FSFEdt1dmtbxpo54nyAMCzA4+85t9cfYB6ugFN6FAx4=)
                          2: 3C249D62A89211EF881C732EC4F9AE02.roa (hash: 16sFKWaBVI982QZ/6/KmLXMiB3r2iqeJrJq3Bgjp0jI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.crl
                          rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fp97ebHLC9YNnChOysqKz1dZgFE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137627, serialNumber=169F7B79B1CB0BD60D9C284ECACA8ACF57598051
        Validity
            Not Before: Aug  9 07:04:46 2025 GMT
            Not After : Aug 16 07:04:46 2025 GMT
        Subject: CN=6896f30e-b7d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:64:57:73:06:53:63:d6:91:c6:6a:8d:8d:99:
                    10:fb:f4:05:9b:e4:aa:2f:42:06:99:f8:fd:55:5d:
                    b7:88:6c:25:b3:95:ff:f0:e8:26:0a:cb:96:a5:58:
                    2c:2a:33:57:10:0f:b9:10:59:de:18:19:dc:76:22:
                    e9:3a:1b:1e:73:16:b0:57:d9:30:91:42:a6:89:bf:
                    75:64:c9:e9:f7:47:96:94:68:0c:52:ec:43:01:81:
                    20:0c:f0:da:94:06:5b:9b:48:ec:b6:ce:47:56:1c:
                    49:dc:0f:b0:10:3d:a7:95:65:2a:cd:58:1f:2b:38:
                    70:22:30:30:bc:75:5b:7b:00:41:9c:53:6a:a7:9b:
                    52:b1:4b:d5:2e:ef:05:39:9e:ea:ce:42:4c:41:fe:
                    63:b8:44:0c:dd:74:fb:3e:cf:07:9e:ab:e5:ea:17:
                    c9:8f:f2:e2:03:82:72:a8:18:81:38:9d:64:b6:05:
                    b3:12:8a:9f:fa:5a:3e:2c:ef:65:33:15:25:1f:69:
                    17:22:46:db:3c:78:a0:aa:67:5c:f2:9b:7d:a6:ce:
                    82:7f:8e:9d:5a:ef:8b:0c:4c:7e:45:b1:01:a9:fb:
                    97:de:5a:9d:a5:38:0b:0a:89:6e:cc:d9:b4:5b:15:
                    ea:be:be:de:b8:79:09:e0:fb:9b:e2:9b:d8:18:f3:
                    6f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:05:B1:07:86:8D:69:49:B3:87:8F:C1:FE:83:8D:04:A5:9D:B8:FC
            X509v3 Authority Key Identifier:
                keyid:16:9F:7B:79:B1:CB:0B:D6:0D:9C:28:4E:CA:CA:8A:CF:57:59:80:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fp97ebHLC9YNnChOysqKz1dZgFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:92:c6:bf:fd:f1:66:a8:1a:80:35:5d:ae:45:ad:3d:0f:ac:
         6f:88:2b:49:4b:25:5a:c7:1d:77:95:0a:16:6a:03:0d:d2:22:
         85:da:fb:9f:a9:4f:9c:79:82:e4:1c:d2:2b:07:93:2c:46:2b:
         95:47:1b:d8:b8:9b:4a:b2:8c:e0:97:e1:13:d0:60:17:bc:f9:
         30:fe:ed:1a:e7:bc:ab:d7:25:8f:94:5b:0a:1f:af:5f:c5:d9:
         f3:71:95:26:d7:d1:d0:d1:ee:59:fc:bf:1b:23:1e:dc:60:0d:
         cd:20:b2:6c:8a:49:3b:5d:93:14:0d:90:9b:e1:8a:35:f1:b7:
         92:9e:fc:b5:0d:aa:5e:df:dd:25:38:e2:fb:d9:fa:da:e7:78:
         49:a8:ae:89:4e:cc:eb:ba:35:ac:a2:92:4d:63:23:b2:f5:62:
         59:85:e5:04:1a:28:e1:e5:b9:46:28:cd:c6:2e:6e:fc:b8:1f:
         34:1c:25:a1:b7:07:27:49:47:2e:51:52:15:07:7b:3d:8a:f2:
         aa:ef:56:38:e4:23:b5:1e:92:5a:d7:57:ed:ba:bb:c3:0e:56:
         09:e5:1b:0e:5a:1f:61:9e:58:1d:89:52:67:20:60:e7:de:4e:
         08:a3:d4:0a:67:87:f5:a1:a6:5b:6c:c3:45:85:a9:bd:cc:69:
         af:a0:de:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:53:12 2025 by rpki-client