Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
File:                     FSDys0q93K6U-pIu9HV802FA8lQ.mft (raw, json)
Hash identifier:          p4n0AcKXBPIkFRH1qqG5mwsGR3sRknbZf/f54zb5jEM=
Subject key identifier:   73:C4:E5:83:CD:E2:02:71:E7:33:E9:46:AA:91:38:08:89:58:D2:2C
Authority key identifier: 15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54
Certificate issuer:       /CN=A9143FE9/serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254
Certificate serial:       0761
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
Manifest number:          0754
Signing time:             Sun 02 Nov 2025 21:41:09 +0000
Manifest this update:     Sun 02 Nov 2025 21:41:08 +0000
Manifest next update:     Sun 09 Nov 2025 21:41:08 +0000
Files and hashes:         1: FSDys0q93K6U-pIu9HV802FA8lQ.crl (hash: woeIFC2ZGaM97qhrZbbc8A6Z6hEfDfwNhptes8O5OQM=)
                          2: A6864ACE7BA911EDB41A851EC4F9AE02.roa (hash: in5sPndy+m94d5TFTDzmLk0rnuoauLzhEu9bOOaeDaw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl
                          rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 21:41:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1889 (0x761)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143FE9, serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254
        Validity
            Not Before: Nov  2 21:41:08 2025 GMT
            Not After : Nov  9 21:41:08 2025 GMT
        Subject: CN=6907cff4-311e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d6:da:81:16:a1:d1:08:76:3e:ea:bc:e5:b7:
                    e8:bf:b7:ab:e7:69:27:c4:f9:94:c3:c0:57:73:4c:
                    53:8e:76:02:f4:65:2b:27:31:3d:c6:ff:76:6e:ed:
                    a8:2b:84:38:c4:24:d2:0b:bf:57:85:43:fa:35:77:
                    fe:3d:a1:3b:1e:ee:7d:04:74:5f:de:11:76:68:6e:
                    f8:df:eb:a1:c0:96:15:45:f8:ff:46:35:63:84:ea:
                    9b:4b:d8:71:f8:62:a8:03:bd:d7:0a:58:d4:9e:6f:
                    a9:a8:a6:f9:df:7d:d8:6b:59:56:a8:46:89:4f:05:
                    87:2b:d7:ab:37:4b:76:8a:ab:56:8f:ef:0c:dc:0d:
                    f2:e4:4e:90:5d:b5:63:2d:0d:fc:bd:db:ac:c1:be:
                    15:70:e2:b7:93:f1:f4:25:19:45:c2:a3:9e:19:90:
                    88:f7:12:c4:04:9f:14:e6:49:76:74:3b:87:fd:3d:
                    1f:69:fc:13:d9:fc:9f:a5:da:72:ad:51:d2:dd:4d:
                    7e:28:06:98:05:e7:f2:26:93:77:13:0f:71:87:25:
                    c3:5f:c0:d7:82:5d:bf:29:c9:73:e6:c4:82:71:83:
                    10:5d:6e:45:e7:d2:96:ae:65:3d:b9:b6:a5:b6:9f:
                    bb:1d:d9:cd:93:ad:23:a4:db:a9:50:85:db:53:2b:
                    fc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C4:E5:83:CD:E2:02:71:E7:33:E9:46:AA:91:38:08:89:58:D2:2C
            X509v3 Authority Key Identifier:
                keyid:15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:c9:bd:6f:33:28:67:cb:ac:cd:5b:cd:ef:b5:91:4a:ad:67:
         bc:c4:bc:f0:fe:c0:32:97:3a:a1:7d:98:52:02:b9:0b:30:98:
         2c:72:c9:e3:e1:ca:4d:9e:dd:14:5f:82:79:2d:a4:7c:61:de:
         91:6e:21:ce:8d:c7:a8:b8:35:d9:b7:73:c2:5f:a2:fc:e7:87:
         1f:71:27:54:5e:bf:fe:1b:be:33:db:fe:6e:b9:50:ad:4e:67:
         4e:2b:53:f6:65:c5:a4:e2:41:ad:bb:af:cd:ba:7e:df:41:b1:
         71:6e:09:71:2b:61:d9:01:fa:15:f0:19:ba:4a:d5:18:31:10:
         45:f4:16:f8:d8:00:27:62:17:83:79:d7:54:da:a3:f5:6f:36:
         0d:7f:48:a9:49:d4:5b:64:26:bf:10:c2:0d:fa:41:80:f5:f7:
         cb:bb:4c:ad:9b:f4:40:9d:f7:98:4a:32:67:b2:74:99:e4:ed:
         5d:b1:4f:d8:8d:a9:c0:d4:23:41:7e:41:00:ae:4e:e8:ee:42:
         bd:4a:63:fd:ed:a1:e9:1f:ad:10:02:e2:53:d2:4c:8e:28:96:
         f9:ee:dd:99:a8:01:e6:60:3e:0b:b5:d6:db:00:ac:57:09:1a:
         d9:bd:0f:01:85:6a:c8:5c:1b:b1:14:5c:d7:9a:22:17:b1:0c:
         94:99:0d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:04:29 2025 by rpki-client