Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
File:                     FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft (raw, json)
Hash identifier:          8N2U8Y/N628LUXieKrgDetnUDKNMGNQdb3kdqOZq8e4=
Subject key identifier:   2F:82:4D:B9:48:64:86:1D:D6:F8:73:6F:F7:ED:88:6C:93:99:2A:D4
Authority key identifier: 16:75:DB:D9:EC:39:CE:ED:81:BB:BB:DE:42:CC:78:CF:7A:16:27:C5
Certificate issuer:       /CN=A918259F/serialNumber=1675DBD9EC39CEED81BBBBDE42CC78CF7A1627C5
Certificate serial:       084C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
Manifest number:          0845
Signing time:             Sat 14 Jun 2025 20:32:29 +0000
Manifest this update:     Sat 14 Jun 2025 20:32:28 +0000
Manifest next update:     Sat 21 Jun 2025 20:32:28 +0000
Files and hashes:         1: FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl (hash: VQUop2air9Dgv7JDaGBEqhr9xkiZ/dVWntDuXmiz2xc=)
                          2: 760B9414D50911EB81567986C4F9AE02.roa (hash: b2CWId8MqaA56uaZG0XW2vwyQDys6FvCX/OsZrpS0Q0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl
                          rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 20:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2124 (0x84c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918259F, serialNumber=1675DBD9EC39CEED81BBBBDE42CC78CF7A1627C5
        Validity
            Not Before: Jun 14 20:32:28 2025 GMT
            Not After : Jun 21 20:32:28 2025 GMT
        Subject: CN=684ddc5c-2d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5e:ad:00:40:3b:38:1e:c8:c6:10:37:77:5b:
                    4b:34:d4:6b:9e:22:95:e0:54:58:90:b4:b9:d4:f4:
                    10:c0:1a:32:60:b0:7f:5e:8b:17:a3:b5:3d:4f:fc:
                    cb:08:46:8a:8b:6d:7b:40:a6:d9:8e:a9:0b:ad:c7:
                    f3:94:08:4f:82:95:b0:86:c3:b6:36:d6:9c:fb:01:
                    a3:d0:d8:aa:3c:51:95:e9:bb:b1:29:e0:17:43:bd:
                    7c:86:3e:d7:e0:73:84:4b:d8:02:21:8b:4d:38:5c:
                    54:23:ee:34:b0:59:7b:e0:c9:08:12:9d:cb:cd:7e:
                    cb:e9:88:2b:4a:40:40:ad:80:cc:0b:94:51:b6:8c:
                    13:09:94:29:a3:ba:ce:78:be:4d:29:99:90:70:0d:
                    18:4a:3f:43:ba:a6:67:99:1c:75:d6:39:9a:8f:ba:
                    b7:bb:a7:f4:17:46:5a:26:65:d5:e7:24:15:2d:4a:
                    d8:07:18:53:f1:7f:f1:8e:a6:8f:f7:32:d4:8a:7a:
                    6e:7c:8c:99:16:3c:d2:79:00:db:77:bf:63:50:5f:
                    45:02:93:dc:05:1b:32:84:18:83:be:83:08:83:43:
                    54:00:ec:81:d4:51:a3:0c:ce:b9:f8:bc:f5:93:e3:
                    45:3b:26:e1:0d:77:3f:55:b8:46:f4:e3:d6:28:fd:
                    21:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:82:4D:B9:48:64:86:1D:D6:F8:73:6F:F7:ED:88:6C:93:99:2A:D4
            X509v3 Authority Key Identifier:
                keyid:16:75:DB:D9:EC:39:CE:ED:81:BB:BB:DE:42:CC:78:CF:7A:16:27:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:0b:5d:60:bd:6f:8d:99:70:fe:32:e3:ab:41:a8:18:4f:8e:
         c5:81:74:26:5a:56:0a:fe:e2:d2:03:a0:43:0b:f0:b8:cb:f8:
         03:b5:19:35:e3:b4:fd:d2:f8:56:85:b3:48:a6:24:d5:2e:fc:
         0f:89:58:72:77:67:2d:e1:21:fa:d0:4f:ef:8e:fe:3d:aa:4f:
         d5:99:6c:d3:dc:fb:64:3f:b8:f7:34:f1:9b:43:14:19:0a:a1:
         45:54:37:b2:80:b6:5e:18:a5:8a:60:cd:f9:9f:3e:af:7e:d0:
         e8:13:64:e6:3c:01:38:cc:33:14:e8:ef:dd:83:2e:02:21:11:
         6c:83:36:42:6d:d7:fa:e1:45:6b:72:7e:f9:7d:ee:67:09:53:
         0e:e0:f6:da:68:fc:bf:eb:94:4e:b7:1b:31:be:8e:47:3d:96:
         a9:ec:b1:15:2d:c1:d6:1d:f2:43:28:88:45:5e:5a:b0:9c:01:
         1c:81:7c:29:3a:60:4e:fe:c5:76:ef:ee:99:3f:f0:4a:18:30:
         bb:99:e0:d8:f7:5e:38:ee:e2:10:55:70:0f:de:0a:3e:50:a6:
         64:61:4e:ce:4e:e8:e7:63:91:33:c7:01:4c:c0:1d:e8:6f:ab:
         bc:4d:47:94:df:e7:62:6c:2e:2f:9a:24:52:8f:a7:e7:8b:85:
         1e:73:bb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:43:06 2025 by rpki-client