Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.mft
File:                     FpcDHB024MQncP5r8o2uSO4TZJY.mft (raw, json)
Hash identifier:          ohhn3uEons8eEsVPvJyLrZXnsQNzWwW7inK/NDFtsLM=
Subject key identifier:   06:96:0E:93:7E:24:60:C7:7C:75:59:41:65:AB:6C:76:AD:60:CB:8C
Authority key identifier: 16:97:03:1C:1D:36:E0:C4:27:70:FE:6B:F2:8D:AE:48:EE:13:64:96
Certificate issuer:       /CN=A9193B94/serialNumber=1697031C1D36E0C42770FE6BF28DAE48EE136496
Certificate serial:       78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpcDHB024MQncP5r8o2uSO4TZJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.mft
Manifest number:          78
Signing time:             Tue 05 Aug 2025 07:23:55 +0000
Manifest this update:     Tue 05 Aug 2025 07:23:54 +0000
Manifest next update:     Tue 12 Aug 2025 07:23:54 +0000
Files and hashes:         1: FpcDHB024MQncP5r8o2uSO4TZJY.crl (hash: 1aElJlWL+wb4cOTWN49PxxisOyaWXZhxnMB1mJxjrUk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.crl
                          rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpcDHB024MQncP5r8o2uSO4TZJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 07:23:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193B94, serialNumber=1697031C1D36E0C42770FE6BF28DAE48EE136496
        Validity
            Not Before: Aug  5 07:23:54 2025 GMT
            Not After : Aug 12 07:23:54 2025 GMT
        Subject: CN=6891b18a-bd03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d2:45:6e:67:96:8d:6f:9d:2b:50:ab:2b:39:
                    0b:4a:7c:d7:ad:cb:72:d0:11:ce:42:26:3f:48:4d:
                    7e:a6:97:10:ad:15:f4:42:9a:0d:15:dc:09:c3:91:
                    1b:3b:63:cf:df:6c:4f:ee:e8:d6:51:51:3d:56:8c:
                    28:d1:fd:9a:f6:4a:14:07:2d:2f:08:8e:51:34:81:
                    98:e0:08:bc:95:c7:f0:74:19:3f:8b:aa:be:18:b2:
                    89:06:f7:e0:e1:be:aa:6d:7f:db:e9:3f:07:50:51:
                    6a:a3:4c:29:9f:75:3d:61:44:33:18:9d:c0:41:3d:
                    81:6d:c0:da:22:ca:8e:83:98:20:40:70:d2:5d:57:
                    28:31:cd:ef:be:88:f7:87:38:15:f2:3c:38:13:4c:
                    2d:85:c1:88:d6:59:39:53:05:02:b0:aa:3f:b0:da:
                    d2:21:ab:46:74:4c:d9:f0:1d:10:38:6c:bf:04:ad:
                    f9:2d:70:cf:d4:36:3b:55:d0:c7:f8:f5:ea:72:c4:
                    f9:3b:fd:3c:61:92:43:40:cd:75:2a:ec:ad:0f:a6:
                    b5:5f:fd:f1:79:c6:6c:3f:d3:54:8f:bb:79:7c:45:
                    fe:46:97:77:44:fa:94:eb:5d:4f:e9:6e:74:28:e2:
                    7c:b0:65:e8:a7:dc:29:f8:a6:8b:9c:16:07:c4:0d:
                    13:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:96:0E:93:7E:24:60:C7:7C:75:59:41:65:AB:6C:76:AD:60:CB:8C
            X509v3 Authority Key Identifier:
                keyid:16:97:03:1C:1D:36:E0:C4:27:70:FE:6B:F2:8D:AE:48:EE:13:64:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpcDHB024MQncP5r8o2uSO4TZJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:55:57:81:2d:1e:a5:08:da:65:42:be:0c:b8:93:34:f6:96:
         16:91:2b:71:80:ad:86:58:ce:e7:26:14:05:67:61:23:5b:89:
         66:db:2c:d6:7b:cb:57:fd:0e:8b:19:ce:c6:44:7e:3e:db:dd:
         d3:e4:49:95:f3:18:37:69:ab:55:72:be:91:2c:60:69:ec:5c:
         37:bb:0f:20:ee:d5:9e:01:12:64:2c:e6:1d:69:18:25:91:e4:
         74:6f:a1:53:3a:3b:f5:64:14:f4:12:a3:79:ca:38:cc:15:5e:
         4e:2e:2e:5d:ea:ca:bb:4d:97:17:b6:12:fd:04:df:fd:83:ef:
         52:14:78:c4:88:a9:64:3b:12:6e:81:63:9e:e7:63:8c:47:87:
         88:7d:b4:57:a0:e1:35:6a:69:a1:23:36:57:65:86:3b:5a:71:
         a5:c5:2f:fa:1a:d8:8b:aa:04:8f:d6:66:46:77:6b:5d:1f:22:
         0a:74:08:17:ff:d7:43:70:b1:34:b8:be:fe:94:ab:5b:72:49:
         50:2e:73:25:c9:0c:3c:56:a8:7f:6b:80:e1:66:7c:81:78:b6:
         de:3f:4f:b5:ba:99:c8:28:30:c4:1c:be:60:cf:f7:15:75:53:
         a8:97:ad:95:f0:1d:e6:55:25:4d:ce:45:ed:9d:7a:9f:0d:06:
         79:92:a7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:10:27 2025 by rpki-client