Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft
File:                     fysutbj095VolfExLY3MQiOcmmI.mft (raw, json)
Hash identifier:          NFbD8GlMCu2vyLTA7lJOm9qYMKB3aZbtMzrApduRo5k=
Subject key identifier:   B8:AB:DB:1E:30:2C:8C:9F:CB:C6:ED:F1:C1:41:83:E0:96:BC:20:E3
Authority key identifier: 7F:2B:2E:B5:B8:F4:F7:95:68:95:F1:31:2D:8D:CC:42:23:9C:9A:62
Certificate issuer:       /CN=A91A0D57/serialNumber=7F2B2EB5B8F4F7956895F1312D8DCC42239C9A62
Certificate serial:       0E4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft
Manifest number:          0E3F
Signing time:             Sun 10 Aug 2025 17:47:41 +0000
Manifest this update:     Sun 10 Aug 2025 17:47:40 +0000
Manifest next update:     Sun 17 Aug 2025 17:47:40 +0000
Files and hashes:         1: fysutbj095VolfExLY3MQiOcmmI.crl (hash: Bol+brgFrHdZsNFZ8wKwN7sDOZNJ5ZoDNDE9acrIZuM=)
                          2: A43B3718ABC111E9A200115CC4F9AE02.roa (hash: H3PZR2Ocqd5DrHweNG98HWtY6eO+2MOa7m6IWNzWQmk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.crl
                          rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3661 (0xe4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0D57, serialNumber=7F2B2EB5B8F4F7956895F1312D8DCC42239C9A62
        Validity
            Not Before: Aug 10 17:47:40 2025 GMT
            Not After : Aug 17 17:47:40 2025 GMT
        Subject: CN=6898db3d-5806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e7:6e:27:e4:1f:4b:19:5a:24:c0:e8:13:39:
                    81:7d:dd:32:90:19:c8:f3:c2:19:7d:7c:a9:53:cd:
                    27:13:bf:05:27:c6:a6:be:49:62:51:36:cf:1b:7e:
                    c4:dd:35:c3:11:03:be:70:ae:f5:06:5b:08:b3:5c:
                    af:76:16:0b:c9:67:2e:ee:b6:32:53:2b:dc:6e:01:
                    21:b6:23:27:28:c4:d1:f0:be:69:bc:ca:12:a0:23:
                    26:5d:8e:39:84:8e:71:e2:6f:aa:da:61:9a:6b:e5:
                    de:bc:3f:73:c2:62:d6:88:07:37:6c:63:77:0b:0c:
                    2d:96:78:95:92:86:53:be:03:e9:28:a4:3b:df:7a:
                    60:43:a2:45:29:88:af:8a:61:d7:aa:e8:0d:cf:5b:
                    5b:6a:ee:07:da:0e:8d:30:a1:b0:b3:bd:a0:2b:0a:
                    28:e0:96:d8:dd:79:87:b3:d5:76:57:08:fb:e4:15:
                    c1:29:ab:e3:96:d3:f9:2f:92:5e:f3:0b:6c:f3:b2:
                    1b:35:21:21:d3:5b:41:dd:14:0b:51:11:22:a5:c3:
                    1b:bf:95:73:fa:9e:aa:00:95:e1:c9:25:40:63:54:
                    b4:bd:c6:ad:e1:f2:fb:44:71:d8:f7:78:36:84:11:
                    e2:3a:3a:64:74:fa:cc:74:4b:7b:27:43:47:48:e6:
                    e9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AB:DB:1E:30:2C:8C:9F:CB:C6:ED:F1:C1:41:83:E0:96:BC:20:E3
            X509v3 Authority Key Identifier:
                keyid:7F:2B:2E:B5:B8:F4:F7:95:68:95:F1:31:2D:8D:CC:42:23:9C:9A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:a8:b7:c8:b5:b7:89:84:87:b6:9a:bd:e2:01:3f:bc:94:22:
         cb:72:a0:51:62:41:4e:73:b0:ee:51:b0:c3:73:85:79:4e:5e:
         b4:50:c6:1d:a6:2a:a2:dd:fd:fd:4d:28:19:85:dc:cc:b3:75:
         e5:01:68:6a:5e:03:ab:48:9e:15:45:30:d7:d1:2c:75:f8:40:
         46:b9:a7:fb:20:2b:68:08:0a:50:d7:df:cd:e2:36:90:fd:3a:
         6a:ea:53:de:e5:bf:70:85:5e:1f:0e:4f:e3:aa:6a:9c:e7:d5:
         c3:9a:30:c9:74:dd:ae:3a:c0:6d:84:59:ec:fb:a9:e8:56:f9:
         8a:88:e3:67:f7:d8:d2:4a:c3:d6:ad:97:fe:d9:c5:56:a7:56:
         90:cd:45:fb:e4:62:72:1b:49:3a:0e:16:b0:b8:66:82:90:40:
         63:99:8d:fc:2e:66:a3:b3:61:a2:d6:7a:c8:35:9a:cd:8c:5a:
         e5:10:9d:9f:3e:50:65:7a:bc:8d:b6:23:82:f4:1e:41:d2:63:
         89:76:48:4a:b5:fa:a7:1a:d3:ef:31:d6:53:16:89:c5:29:00:
         5d:c2:09:e2:59:8e:a2:24:78:72:01:16:ba:19:92:0f:6e:b9:
         10:d5:37:47:84:64:77:44:16:e0:2f:a5:e2:52:35:fa:7b:21:
         9e:c7:3a:0e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTBENTcxMTAvBgNVBAUTKDdGMkIyRUI1QjhGNEY3OTU2ODk1RjEzMTJEOERDQzQy
MjM5QzlBNjIwHhcNMjUwODEwMTc0NzQwWhcNMjUwODE3MTc0NzQwWjAYMRYwFAYD
VQQDEw02ODk4ZGIzZC01ODA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxOduJ+QfSxlaJMDoEzmBfd0ykBnI88IZfXypU80nE78FJ8amvkliUTbPG37E
3TXDEQO+cK71BlsIs1yvdhYLyWcu7rYyUyvcbgEhtiMnKMTR8L5pvMoSoCMmXY45
hI5x4m+q2mGaa+XevD9zwmLWiAc3bGN3CwwtlniVkoZTvgPpKKQ733pgQ6JFKYiv
imHXqugNz1tbau4H2g6NMKGws72gKwoo4JbY3XmHs9V2Vwj75BXBKavjltP5L5Je
8wts87IbNSEh01tB3RQLUREipcMbv5Vz+p6qAJXhySVAY1S0vcat4fL7RHHY93g2
hBHiOjpkdPrMdEt7J0NHSObpvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLir2x4w
LIyfy8bt8cFBg+CWvCDjMB8GA1UdIwQYMBaAFH8rLrW49PeVaJXxMS2NzEIjnJpi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEQ1Ny85RkQyQzlEMEE5
MTgxMUU5OEMzRUMyNEZDNEY5QUUwMi9meXN1dGJqMDk1Vm9sZkV4TFkzTVFpT2Nt
bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z5c3V0YmowOTVWb2xmRXhMWTNNUWlPY21tSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MEQ1Ny85RkQyQzlEMEE5MTgxMUU5OEMzRUMyNEZDNEY5QUUwMi9meXN1dGJqMDk1
Vm9sZkV4TFkzTVFpT2NtbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCLqLfItbeJhIe2mr3iAT+8lCLLcqBRYkFOc7DuUbDDc4V5Tl60UMYd
piqi3f39TSgZhdzMs3XlAWhqXgOrSJ4VRTDX0Sx1+EBGuaf7ICtoCApQ19/N4jaQ
/Tpq6lPe5b9whV4fDk/jqmqc59XDmjDJdN2uOsBthFns+6noVvmKiONn99jSSsPW
rZf+2cVWp1aQzUX75GJyG0k6DhawuGaCkEBjmY38Lmajs2Gi1nrINZrNjFrlEJ2f
PlBleryNtiOC9B5B0mOJdkhKtfqnGtPvMdZTFonFKQBdwgniWY6iJHhyARa6GZIP
brkQ1TdHhGR3RBbgL6XiUjX6eyGexzoO
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:17:04 2025 by rpki-client