Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft
File:                     FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft (raw, json)
Hash identifier:          7uymEV+7eygtDoAVbNNTk2R3nEFsADAZYEK10CXtxow=
Subject key identifier:   EF:40:77:D8:5F:0B:FF:3A:DA:ED:9F:34:E7:EA:1A:3C:68:8B:F4:AA
Authority key identifier: 16:41:D1:3F:AD:8A:20:AB:0A:94:F6:25:AE:DA:10:6B:E2:A6:6E:17
Certificate issuer:       /CN=A91A4179/serialNumber=1641D13FAD8A20AB0A94F625AEDA106BE2A66E17
Certificate serial:       0617
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft
Manifest number:          0604
Signing time:             Fri 08 Aug 2025 23:18:44 +0000
Manifest this update:     Fri 08 Aug 2025 23:18:43 +0000
Manifest next update:     Fri 15 Aug 2025 23:18:43 +0000
Files and hashes:         1: FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl (hash: JsAnx17mI6xDDja4cG2PBje5XA9sq6+PAFVIK3Ex8U4=)
                          2: 62A74238F77711ECB847DF59C4F9AE02.roa (hash: 6NdpyGpyyLoYdKu6Nb7ZVSWNHzCDx7e5IsoyvgK7mq8=)
                          3: 1EB401948C6511EF881C050EC4F9AE02.roa (hash: 7C+LAYCC66gUOAU+HwT+tfX4EWextGNzWYx6BmysCZA=)
                          4: F4E815CC699611EE81E3E33CC4F9AE02.roa (hash: plWOD3DLVqnkQtuQl4y0tsk6pTGSRdQR9cDYcE3hB9Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl
                          rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1559 (0x617)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4179, serialNumber=1641D13FAD8A20AB0A94F625AEDA106BE2A66E17
        Validity
            Not Before: Aug  8 23:18:43 2025 GMT
            Not After : Aug 15 23:18:43 2025 GMT
        Subject: CN=689685d4-726d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e3:75:22:8a:27:ed:e7:cd:d3:a1:a7:84:08:
                    ba:99:d2:c3:e6:58:22:70:36:b3:13:3a:42:63:6f:
                    9d:f2:72:6e:b3:ff:35:48:ef:63:38:c1:56:8b:69:
                    bf:c8:b9:42:91:d8:ff:90:4c:23:d5:14:5c:12:08:
                    2f:b7:24:fa:9b:b5:68:ae:1b:07:46:5d:a5:ba:df:
                    af:19:c8:63:da:d0:e7:e0:76:e6:e2:1a:a3:c5:be:
                    c7:a0:8d:51:36:e8:11:11:5e:a1:90:ea:f8:88:f9:
                    96:0f:cf:91:c0:f5:61:05:75:2d:02:89:3d:07:e5:
                    e4:7d:dc:e7:fc:c2:c2:d0:04:ca:1f:0e:d1:5e:ce:
                    54:5d:7d:87:16:31:d7:15:4e:ca:18:40:e4:5f:30:
                    6f:24:db:27:43:0d:9e:22:ed:1b:82:e0:2c:e0:67:
                    8c:0d:c9:97:e0:43:b6:31:fe:2c:58:fa:37:38:b4:
                    28:9d:0b:5e:28:d2:ea:41:9d:d7:51:b0:7d:e0:e0:
                    2e:d6:25:da:81:dc:64:22:e8:89:97:c7:d9:1c:6a:
                    84:27:8a:86:f7:4b:b8:5f:52:12:04:9a:45:16:9c:
                    4c:60:dd:d8:53:5a:71:40:a8:b9:8e:67:75:fe:16:
                    9a:33:77:9b:2c:0a:ae:27:54:3d:cb:f0:77:06:e4:
                    7a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:40:77:D8:5F:0B:FF:3A:DA:ED:9F:34:E7:EA:1A:3C:68:8B:F4:AA
            X509v3 Authority Key Identifier:
                keyid:16:41:D1:3F:AD:8A:20:AB:0A:94:F6:25:AE:DA:10:6B:E2:A6:6E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:b5:31:dd:c2:f0:a8:02:b9:d8:b7:a9:db:f1:a9:4c:09:85:
         56:e1:b8:d1:33:3f:75:5d:e5:f1:19:2d:4c:b7:15:12:77:2c:
         ae:59:a1:25:a4:23:ef:82:cf:c9:3b:c6:7c:4f:ef:08:4c:70:
         6b:d0:6a:55:4b:2e:aa:99:f5:62:20:fd:24:ea:37:ee:a1:39:
         74:0a:0b:3d:33:24:91:04:00:83:6e:2e:b7:72:ec:aa:d2:3d:
         01:6e:be:8b:cb:e5:4e:9e:ee:86:86:7d:83:77:bd:0f:1a:a7:
         a7:53:cf:4c:36:25:25:2e:57:ad:fe:8b:58:2e:f5:74:58:9b:
         d3:45:7f:49:64:32:0c:c3:89:67:80:58:da:3b:d1:1c:08:33:
         47:87:92:99:eb:b0:2f:20:2c:0a:5f:ba:32:54:4b:ea:e9:14:
         15:48:5f:e3:04:6c:e1:80:59:18:ca:a7:76:c1:94:87:87:c9:
         07:ea:71:8f:33:07:f7:77:c6:87:86:0b:ca:80:74:d7:27:ba:
         f8:de:e9:ce:bb:ff:fb:3c:8b:ff:83:e4:5d:8c:1f:e2:7a:f2:
         74:90:ee:e4:5e:3d:9a:2f:11:1b:e7:4d:d0:e9:e2:24:36:a3:
         5e:59:ea:59:dc:fb:df:7c:cc:36:23:1e:73:6f:95:10:e0:6d:
         5a:9d:fe:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:49:22 2025 by rpki-client