Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
File:                     FSDys0q93K6U-pIu9HV802FA8lQ.mft (raw, json)
Hash identifier:          xvdjEFg4tM5TANZe+Oq0EFLPISVUlw+vo0fbDJIJRkE=
Subject key identifier:   97:04:46:05:DC:95:C4:F3:C4:E1:E8:E3:EA:AC:E6:C7:3A:56:89:8C
Authority key identifier: 15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54
Certificate issuer:       /CN=A9143FE9/serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254
Certificate serial:       0736
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
Manifest number:          0729
Signing time:             Fri 08 Aug 2025 22:13:39 +0000
Manifest this update:     Fri 08 Aug 2025 22:13:39 +0000
Manifest next update:     Fri 15 Aug 2025 22:13:39 +0000
Files and hashes:         1: FSDys0q93K6U-pIu9HV802FA8lQ.crl (hash: kAGFoh8oOAUwoZ2WhlR3qCil3RLLAR8CxjsXwUI3Cf8=)
                          2: A6864ACE7BA911EDB41A851EC4F9AE02.roa (hash: in5sPndy+m94d5TFTDzmLk0rnuoauLzhEu9bOOaeDaw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl
                          rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1846 (0x736)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143FE9, serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254
        Validity
            Not Before: Aug  8 22:13:39 2025 GMT
            Not After : Aug 15 22:13:39 2025 GMT
        Subject: CN=68967693-7167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:01:00:31:54:de:88:32:72:8c:54:a2:6b:b3:
                    54:47:68:53:e8:84:19:bf:3f:0c:79:18:e3:36:33:
                    7b:68:e3:64:f7:c0:18:43:81:f1:c4:66:17:c6:69:
                    6c:97:34:c0:34:68:bc:38:04:40:19:24:af:25:f8:
                    0d:8e:8f:a4:81:89:85:a3:f4:8d:02:4c:fc:92:3d:
                    ca:32:d0:a1:0c:11:a9:79:4c:a1:a6:31:e4:c3:6b:
                    e2:fa:0f:d8:31:f2:02:f4:aa:f3:5b:a9:a7:c7:10:
                    58:5e:b5:78:4a:33:d5:6f:41:e7:86:f4:d1:69:c5:
                    56:23:01:57:1c:16:33:b1:3f:c1:aa:6c:58:aa:1c:
                    f8:09:be:91:12:7d:58:f9:ce:f8:31:08:c9:ad:42:
                    93:62:71:d2:7c:92:9d:97:41:10:9a:59:7f:11:c4:
                    8d:35:77:5a:fb:9a:fb:40:3d:61:81:85:77:05:9a:
                    40:92:0d:5f:4b:77:a1:66:b6:5b:10:5e:b5:9a:27:
                    1a:26:58:63:18:f4:e7:50:52:56:27:7f:25:fc:7a:
                    02:33:72:37:70:a2:cf:97:2b:b3:e4:cc:72:d5:25:
                    9f:b9:41:01:dd:5b:e9:93:e4:ec:9f:d1:0b:75:ec:
                    c5:08:14:7a:9f:74:91:3d:0d:ff:81:65:58:13:39:
                    66:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:04:46:05:DC:95:C4:F3:C4:E1:E8:E3:EA:AC:E6:C7:3A:56:89:8C
            X509v3 Authority Key Identifier:
                keyid:15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:e9:79:78:2a:cc:c4:78:87:34:c7:0b:78:5d:f2:68:ae:1d:
         e2:7b:7e:14:ca:87:33:d1:45:1b:2a:49:8d:85:1d:b6:65:93:
         0e:61:7a:5d:be:85:42:0e:47:93:7e:39:c8:60:6c:da:74:c0:
         ab:37:9b:65:d2:01:de:a6:99:d5:3a:d0:f4:fb:91:aa:aa:a4:
         2c:1d:3b:a4:a8:19:8b:35:f5:59:a9:83:d8:34:4e:fc:43:6b:
         eb:12:30:ee:b9:f5:8f:b7:8b:f2:bc:7d:f1:5e:0e:a2:93:7e:
         72:76:23:ef:9b:38:d5:39:f1:b6:20:44:34:92:c0:16:b7:23:
         8a:70:cd:21:e7:9d:ab:64:cf:b6:c8:d0:85:49:01:1c:ac:0b:
         e9:0d:47:23:31:fb:95:a2:2f:6a:6b:bb:bd:ac:22:d4:db:e3:
         8b:1a:47:b4:4b:0d:53:86:d4:83:11:e6:cf:33:27:7d:ed:61:
         bd:48:72:86:3e:fb:14:c1:84:b5:4f:20:bf:94:cc:d9:12:62:
         95:2f:4a:77:13:d9:a8:30:e9:b3:11:6c:5b:66:33:76:f9:b3:
         db:86:44:90:e2:b7:9d:3a:7a:df:c8:c1:80:e0:d4:74:54:df:
         7f:4b:a6:0f:55:1d:1e:ce:e7:b4:42:90:05:b9:4c:5e:4a:8c:
         16:9f:7e:3f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDNGRTkxMTAvBgNVBAUTKDE1MjBGMkIzNEFCRERDQUU5NEZBOTIyRUY0NzU3Q0Qz
NjE0MEYyNTQwHhcNMjUwODA4MjIxMzM5WhcNMjUwODE1MjIxMzM5WjAYMRYwFAYD
VQQDEw02ODk2NzY5My03MTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoQEAMVTeiDJyjFSia7NUR2hT6IQZvz8MeRjjNjN7aONk98AYQ4HxxGYXxmls
lzTANGi8OARAGSSvJfgNjo+kgYmFo/SNAkz8kj3KMtChDBGpeUyhpjHkw2vi+g/Y
MfIC9KrzW6mnxxBYXrV4SjPVb0HnhvTRacVWIwFXHBYzsT/BqmxYqhz4Cb6REn1Y
+c74MQjJrUKTYnHSfJKdl0EQmll/EcSNNXda+5r7QD1hgYV3BZpAkg1fS3ehZrZb
EF61micaJlhjGPTnUFJWJ38l/HoCM3I3cKLPlyuz5Mxy1SWfuUEB3Vvpk+Tsn9EL
dezFCBR6n3SRPQ3/gWVYEzlmRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcERgXc
lcTzxOHo4+qs5sc6VomMMB8GA1UdIwQYMBaAFBUg8rNKvdyulPqSLvR1fNNhQPJU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZFOS9GOUU2NUUyMDQ0
MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNLNlUtcEl1OUhWODAyRkE4
bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZTRHlzMHE5M0s2VS1wSXU5SFY4MDJGQThsUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
M0ZFOS9GOUU2NUUyMDQ0MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNL
NlUtcEl1OUhWODAyRkE4bFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAP6Xl4KszEeIc0xwt4XfJorh3ie34Uyocz0UUbKkmNhR22ZZMOYXpd
voVCDkeTfjnIYGzadMCrN5tl0gHeppnVOtD0+5GqqqQsHTukqBmLNfVZqYPYNE78
Q2vrEjDuufWPt4vyvH3xXg6ik35ydiPvmzjVOfG2IEQ0ksAWtyOKcM0h552rZM+2
yNCFSQEcrAvpDUcjMfuVoi9qa7u9rCLU2+OLGke0Sw1ThtSDEebPMyd97WG9SHKG
PvsUwYS1TyC/lMzZEmKVL0p3E9moMOmzEWxbZjN2+bPbhkSQ4redOnrfyMGA4NR0
VN9/S6YPVR0ezue0QpAFuUxeSowWn34/
-----END CERTIFICATE-----
Generated at Sun Aug 10 16:00:15 2025 by rpki-client