Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
File:                     fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft (raw, json)
Hash identifier:          R44rWMkwdLvDIxLIDDnEEULtohguqMS0eM+IM+5d7Gw=
Subject key identifier:   03:C4:91:E5:97:7C:3D:23:20:89:E7:F0:8C:73:81:91:72:F7:97:D8
Authority key identifier: 7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25
Certificate issuer:       /CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225
Certificate serial:       01C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
Manifest number:          0FE5
Signing time:             Sun 10 Aug 2025 17:49:55 +0000
Manifest this update:     Sun 10 Aug 2025 17:49:55 +0000
Manifest next update:     Sun 17 Aug 2025 17:49:55 +0000
Files and hashes:         1: fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl (hash: AgcrWMSO8qf2PNnTfLlC0nqKmgfondH+t5MiNayxI7w=)
                          2: 329274C4D31611EEA7F0475FC4F9AE02.roa (hash: pr44aMdjUjF3qJ5V59OemeYMLJZAouFtZX25Dx2aXA8=)
                          3: B4A14106974911EEBAFA257BC4F9AE02.roa (hash: Fb7LVlJG+JVdijAn+Ys69+wkABJKfcULX5Fgfk+/L5A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450 (0x1c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6BF0, serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225
        Validity
            Not Before: Aug 10 17:49:55 2025 GMT
            Not After : Aug 17 17:49:55 2025 GMT
        Subject: CN=6898dbc3-06e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:24:94:0a:38:0d:59:46:96:b6:7a:1a:3a:9c:
                    f7:19:3d:67:3a:c8:34:64:98:52:5c:e9:3b:fe:86:
                    14:c0:e1:72:ad:03:2e:f6:72:7f:d6:5a:68:c2:84:
                    0b:fa:12:ef:3f:71:fd:0b:8d:68:25:5f:27:48:f9:
                    9a:57:b4:7f:72:59:cb:b6:18:b0:3a:03:21:61:18:
                    72:8c:c8:e7:22:b3:3b:a6:5b:c8:4d:48:ea:21:84:
                    d1:e1:df:cc:3f:89:ed:fb:7c:1d:fd:24:28:22:d6:
                    31:d4:34:3e:e9:2b:46:06:23:8f:27:53:f6:b3:7b:
                    42:c2:4c:7a:aa:71:af:fb:be:39:0c:15:60:4c:e1:
                    0e:23:d7:48:e9:a3:d1:db:71:32:ab:19:e6:48:e6:
                    a9:ee:76:d9:be:08:e2:6a:47:20:1b:6c:38:91:be:
                    df:27:3e:94:9b:0f:e4:d6:af:5a:59:f5:30:6c:bf:
                    43:15:9c:1d:1a:8d:d6:b8:f7:2e:27:7b:ef:8c:10:
                    0a:13:75:cf:2c:9c:c9:87:6c:74:60:60:6d:64:0c:
                    0b:cd:fc:2f:3a:5a:51:9c:39:c9:84:83:bb:b3:d6:
                    c3:da:f2:3b:b0:92:21:98:93:22:7d:39:80:13:34:
                    dc:b4:38:74:cf:f5:72:82:2f:ba:df:91:e9:c5:2a:
                    33:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C4:91:E5:97:7C:3D:23:20:89:E7:F0:8C:73:81:91:72:F7:97:D8
            X509v3 Authority Key Identifier:
                keyid:7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:18:98:4c:c9:0f:25:cc:2e:28:90:a3:0e:f2:25:c2:24:3b:
         57:03:90:5d:6d:fc:dd:4c:b8:25:1b:de:43:8f:8a:bf:6f:90:
         41:a2:3e:78:13:9e:95:99:9b:ed:91:a7:54:97:ff:9e:fd:d0:
         0d:1b:e7:3d:8f:5b:8a:04:dd:cf:42:86:7f:bf:59:8a:c0:55:
         ed:74:53:47:94:21:54:b0:34:6d:52:d8:03:e0:e9:16:94:d0:
         29:3e:bb:cf:19:70:27:ea:ae:9d:b0:ae:ed:e8:f7:bf:92:5b:
         a1:06:b4:73:92:38:e9:32:e3:5d:43:9f:9f:ab:65:13:5b:00:
         8d:9a:90:20:20:e4:f6:db:7e:d6:e7:0c:c1:b7:ba:26:2b:f3:
         4e:2a:4e:6a:24:cc:39:3b:28:1f:e6:9a:a3:2f:40:4b:9a:1e:
         5c:89:f0:1b:ca:1d:be:11:9a:f6:60:8d:79:63:da:50:e8:41:
         db:20:c9:23:d8:36:b0:b0:32:71:af:a4:15:99:9a:06:7b:df:
         8f:6b:ad:e4:20:2a:d9:28:8a:fd:4b:e2:4c:40:84:d4:f8:66:
         61:b4:0e:00:30:ac:56:00:52:11:48:62:b2:db:c7:24:5d:c9:
         70:86:fe:35:6e:fa:c6:54:56:f6:09:00:e1:8b:b1:71:6e:9d:
         03:07:1d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:51:40 2025 by rpki-client