Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
File:                     Fm664SGI_4_HXurj7PjTvearJxo.mft (raw, json)
Hash identifier:          YunhzRwCy9MEHZMPvC4QSJQniQ60SIPYKuY3iFwuRqU=
Subject key identifier:   35:96:C9:53:5C:30:82:F7:63:B8:04:D5:62:23:17:BB:CD:8E:A4:E0
Authority key identifier: 16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A
Certificate issuer:       /CN=A91C654A/serialNumber=166EBAE12188FF8FC75EEAE3ECF8D3BDE6AB271A
Certificate serial:       01A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
Manifest number:          08F4
Signing time:             Fri 08 Aug 2025 22:05:53 +0000
Manifest this update:     Fri 08 Aug 2025 22:05:53 +0000
Manifest next update:     Fri 15 Aug 2025 22:05:53 +0000
Files and hashes:         1: Fm664SGI_4_HXurj7PjTvearJxo.crl (hash: 3PptobEHRZk8K8TtOAQ4Tz3X47pm1prxMFB76Y7u1Xs=)
                          2: 50F8849CFDC111ED95AAA041C4F9AE02.roa (hash: 0DD71MyNn/a0ClFzY+negnwcfIlHkrg4N1Q4gkDWcxQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.crl
                          rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422 (0x1a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C654A, serialNumber=166EBAE12188FF8FC75EEAE3ECF8D3BDE6AB271A
        Validity
            Not Before: Aug  8 22:05:53 2025 GMT
            Not After : Aug 15 22:05:53 2025 GMT
        Subject: CN=689674c1-1765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c8:d6:64:e4:ed:e2:88:e7:27:a9:9f:bb:6e:
                    b8:0b:07:1d:23:c0:32:34:2d:7a:b1:c5:6c:79:02:
                    ba:d5:46:fd:a0:f9:a8:19:71:1c:de:94:31:e8:84:
                    be:7c:21:b7:92:70:0a:d8:25:5f:a2:3e:15:21:9d:
                    58:64:4c:74:cd:22:4e:ee:2e:73:a0:79:09:21:04:
                    aa:8d:24:9f:98:aa:55:f1:d1:4c:fe:92:92:7a:2a:
                    58:a7:bc:4e:ca:a3:79:cf:44:67:0a:39:fb:0b:07:
                    c4:a4:fd:11:45:62:4d:45:de:ec:c4:05:fd:4a:54:
                    35:4c:9a:11:6d:e0:45:0f:2a:e0:ef:ad:f7:ed:c4:
                    58:9d:38:ee:c1:af:7d:56:4e:4e:5c:35:de:40:06:
                    aa:8e:41:74:c8:46:55:2a:2f:9d:38:87:cb:4a:16:
                    e9:67:cf:73:86:bc:3b:33:41:15:1f:4b:6c:eb:c4:
                    a0:84:a0:ec:e6:8f:7e:65:e0:a3:d4:48:3d:db:fb:
                    c2:88:56:47:56:0b:8a:8c:d1:db:e3:f6:24:0c:0e:
                    e5:07:0e:85:c8:41:a8:8c:1a:59:7b:67:3f:68:e8:
                    c4:45:64:9a:d2:c6:0b:6c:79:1f:b9:cf:bc:3c:56:
                    53:b2:6f:8b:f7:df:ed:82:87:ee:55:1a:ed:cf:78:
                    0c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:96:C9:53:5C:30:82:F7:63:B8:04:D5:62:23:17:BB:CD:8E:A4:E0
            X509v3 Authority Key Identifier:
                keyid:16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ba:61:be:99:51:13:aa:e1:2f:6c:81:84:dd:84:33:7f:38:
         b2:55:83:83:4e:eb:bf:87:ee:71:43:7f:a6:97:f6:05:0f:f0:
         9b:d5:a1:3b:da:ea:5f:fc:10:dd:a0:d1:69:7f:4d:83:c4:ba:
         04:b3:c6:59:6d:5b:64:74:81:1b:0c:94:04:80:88:d5:9e:4d:
         a9:39:18:02:f8:85:56:20:b6:40:b3:11:fc:74:f6:3d:4b:e6:
         01:ac:34:13:0c:87:0f:9c:a6:67:df:32:30:af:70:fb:d3:75:
         c9:b6:6c:9d:9f:0c:52:9f:5c:28:0e:ed:a8:be:7a:36:25:d4:
         7d:fc:ca:99:a5:f0:05:e0:30:1c:b8:17:02:8e:29:fc:e1:74:
         0e:d5:90:6e:48:19:6b:3b:f3:f8:41:58:ee:a3:5c:65:37:5e:
         ca:2d:b9:61:1a:1f:83:61:ae:8a:f0:ca:29:fc:5f:05:b6:ad:
         7b:e2:0a:88:c6:d0:a0:36:3c:a8:f8:65:2f:ce:31:6d:12:5b:
         e4:05:7a:0c:5c:d4:85:03:cb:f0:af:a3:12:1a:d0:a7:5a:4d:
         ed:f0:16:82:8a:c3:38:04:f1:72:b0:0c:27:db:8c:b4:8b:27:
         02:8f:c9:c6:91:2e:5e:59:a6:6d:3e:ec:3a:71:63:23:12:43:
         0f:38:4e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:18:06 2025 by rpki-client