Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
File:                     fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft (raw, json)
Hash identifier:          b8lcTWKChzpLx1tWEzQXiblWbmJbpKXMWoMoGljFLjo=
Subject key identifier:   C1:5E:FE:97:09:E0:22:30:66:F9:A0:D5:E5:20:92:10:64:A1:5B:9C
Authority key identifier: 7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB
Certificate issuer:       /CN=A91380B5/serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB
Certificate serial:       035E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
Manifest number:          0350
Signing time:             Sat 09 Aug 2025 01:33:45 +0000
Manifest this update:     Sat 09 Aug 2025 01:33:45 +0000
Manifest next update:     Sat 16 Aug 2025 01:33:44 +0000
Files and hashes:         1: fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl (hash: kdvVhsvdzpPvlZUEo83ppVJDFu9U405NVqhCKYJxuZU=)
                          2: 121437B45ABB11EF8C696E58C4F9AE02.roa (hash: Sr1dJPYf4TMlmdyHmkZ3DvPV6/M5+cUFUvIXCjxQ2mk=)
                          3: 245B417CADD411EE95FF6C6DC4F9AE02.roa (hash: bivJnwcabrf/iwZuZLc+oQKC0osH7DqM8uD5h0VU2hw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl
                          rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862 (0x35e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91380B5, serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB
        Validity
            Not Before: Aug  9 01:33:45 2025 GMT
            Not After : Aug 16 01:33:44 2025 GMT
        Subject: CN=6896a579-1ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:07:b0:d4:46:84:a4:9b:41:87:bd:db:fe:c3:
                    c3:d4:af:f5:4b:50:4a:3a:cd:37:a8:25:d7:75:47:
                    2a:04:b6:1b:11:57:64:d8:da:c4:33:40:ee:99:76:
                    8f:8f:f8:49:a3:09:0b:ce:89:1a:5e:6d:04:28:a0:
                    68:5e:fe:ee:c9:ac:88:6d:20:2f:70:35:08:80:c4:
                    44:79:b9:c3:cc:3a:5a:4d:43:aa:1a:9b:95:bb:35:
                    a1:3c:83:2c:36:f1:c6:84:25:69:1e:e6:f2:50:1b:
                    78:16:8c:e0:7d:11:c3:5f:02:33:3a:4f:e6:0c:b9:
                    d4:5c:f8:a1:52:f4:43:32:47:ae:c4:7d:36:f1:2c:
                    6e:85:53:b7:19:b6:54:66:13:8e:3b:b2:5d:df:e2:
                    9a:d6:55:6b:a2:43:f6:30:61:7e:87:1a:f4:d4:f8:
                    66:6d:54:44:80:06:97:19:20:22:75:a3:9f:01:d3:
                    9b:3b:c2:ff:9e:46:eb:13:fc:18:d4:d4:d5:49:38:
                    34:52:0f:88:2d:e4:5a:bb:7c:29:73:fc:54:c6:87:
                    c6:67:32:0d:37:5d:65:33:0a:bc:b7:49:bc:d2:6b:
                    0c:e0:9b:c7:81:ec:53:9c:14:87:35:e4:b7:8d:af:
                    91:9c:78:b7:b3:09:9e:e8:05:fa:22:5d:e9:c5:26:
                    f5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5E:FE:97:09:E0:22:30:66:F9:A0:D5:E5:20:92:10:64:A1:5B:9C
            X509v3 Authority Key Identifier:
                keyid:7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:5c:c2:83:86:d9:68:95:54:a0:cc:2b:4a:5a:3f:7d:19:36:
         3f:8c:e0:19:b3:ea:f9:5c:6e:5c:04:7d:76:77:94:8e:91:bb:
         f5:4c:2d:a7:04:20:c9:2a:6f:0d:b4:c2:01:75:23:e2:89:ad:
         1c:ac:ae:22:71:34:c5:9f:ad:f9:db:e9:87:68:e7:b5:70:a3:
         bb:bb:d4:c3:99:5d:83:e0:a8:9a:ed:cb:a1:94:c2:29:02:8a:
         99:44:03:e6:42:13:ba:40:3f:f5:bb:82:a8:ee:13:18:c6:05:
         c2:b2:46:aa:b0:d6:5f:97:3d:1e:e4:a2:68:7c:8a:ad:c3:c6:
         07:f2:63:74:9c:52:47:66:7f:0d:18:7b:b7:8e:ae:13:26:b0:
         ad:93:30:d8:aa:53:38:33:a2:47:4f:e4:12:9e:40:9d:0e:29:
         5e:28:65:89:b3:c3:9e:1d:14:57:f3:39:a1:14:41:3e:66:09:
         56:24:69:2e:ce:3b:03:91:57:45:60:b8:d4:1d:94:72:d7:15:
         fb:8c:8d:b5:11:f2:ca:6c:af:4d:2a:19:33:b1:97:ac:91:88:
         7a:f2:68:b7:48:02:52:be:61:63:27:36:7e:b9:f8:15:e9:30:
         83:13:7a:49:69:33:1e:c5:38:93:aa:99:a2:66:7a:4d:1b:d7:
         e8:d0:5b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:08:12 2025 by rpki-client