Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
File:                     FgxyzFd72N5TouywCYwi81pRqp4.mft (raw, json)
Hash identifier:          RJUegigQqj71xk3wgoiR+0hr8VbHFJFb34OH9YC0db8=
Subject key identifier:   A0:21:65:DC:BF:0F:56:B9:3E:A5:81:DC:D5:C0:EC:17:29:EA:CF:80
Authority key identifier: 16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E
Certificate issuer:       /CN=A91C8066/serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E
Certificate serial:       01E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
Manifest number:          01E2
Signing time:             Sat 09 Aug 2025 03:03:14 +0000
Manifest this update:     Sat 09 Aug 2025 03:03:14 +0000
Manifest next update:     Sat 16 Aug 2025 03:03:14 +0000
Files and hashes:         1: FgxyzFd72N5TouywCYwi81pRqp4.crl (hash: znhCCi0n7//G5GCiWwjUAa0GzbiZy1m0gcjX96VN5OY=)
                          2: 452D9EF494F811ED85ADE381C4F9AE02.roa (hash: n8+NWSH/0jbCR4W6RjUOoVJVoSERmDVQnQldNxK/jIo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl
                          rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 487 (0x1e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8066, serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E
        Validity
            Not Before: Aug  9 03:03:14 2025 GMT
            Not After : Aug 16 03:03:14 2025 GMT
        Subject: CN=6896ba72-498e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:d3:78:ef:79:92:65:22:21:ef:d2:f0:c3:3a:
                    50:76:45:f4:ac:c0:c6:65:ba:4c:5e:62:8d:58:29:
                    d1:55:b5:3e:7d:37:85:54:67:20:d8:3f:34:a7:49:
                    5f:0d:50:16:17:54:39:73:87:4b:dd:30:cc:ea:d9:
                    5b:23:1a:7b:2f:2c:53:e4:41:d6:e3:88:6d:fd:d2:
                    2d:f8:af:f3:55:78:6a:d9:a5:bf:f2:aa:fe:d5:36:
                    1d:7c:9f:bd:38:ae:b5:6a:a2:9b:cd:1e:76:fb:92:
                    7a:1e:e7:43:d3:ed:9e:2c:4f:f9:c4:5b:d9:51:c2:
                    48:3e:2c:f4:db:d9:85:b0:6d:bd:3a:40:86:eb:ed:
                    bb:f4:8d:c3:08:0e:52:51:51:5d:f1:e6:7b:1e:f7:
                    79:c5:66:6e:fc:a4:59:52:cf:84:93:ea:cc:fb:b7:
                    92:c7:bf:a1:ea:f8:ef:0a:f8:a8:af:38:70:90:1f:
                    79:90:45:20:d3:87:63:25:62:13:8c:87:7b:88:f2:
                    d6:da:2d:db:a2:de:a5:4a:73:17:d9:79:1f:14:4b:
                    9f:07:37:12:7b:2d:c7:4f:fa:bb:ff:ae:90:a2:69:
                    e0:08:e9:89:1c:c7:84:16:f2:48:07:13:f3:ef:0b:
                    94:83:d8:3b:cd:0b:fa:6a:14:4e:18:6c:ad:a2:6f:
                    e8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:21:65:DC:BF:0F:56:B9:3E:A5:81:DC:D5:C0:EC:17:29:EA:CF:80
            X509v3 Authority Key Identifier:
                keyid:16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:28:42:13:80:c7:a8:c5:f7:c0:1f:17:9b:84:6e:a3:e8:52:
         da:9e:e2:9b:83:ba:c0:1f:09:fc:d1:06:a2:a9:07:f6:55:12:
         d9:1c:4a:f7:5d:79:4d:3c:26:06:2c:b2:31:ec:f5:86:1d:55:
         ef:5c:9c:69:a3:d1:36:e4:a1:f6:e7:c8:55:d0:aa:d5:e5:9a:
         bd:e7:d0:fd:94:93:01:e4:61:48:bd:bd:c6:6e:2c:66:d8:8f:
         ac:d4:11:da:f9:2a:d9:36:9a:ed:af:65:e8:5d:fc:03:c9:ca:
         a9:d3:3e:a0:22:23:37:ff:5e:bf:c7:f0:c0:fc:dd:7e:66:1e:
         ed:cc:12:8a:25:c1:04:96:d6:00:22:dc:b1:fe:1f:4f:0c:5c:
         e1:c3:ee:16:88:a3:fd:f2:54:97:ae:13:1b:0c:09:b1:81:6e:
         fc:d7:7e:46:87:4b:4f:71:8c:64:03:e5:42:ec:b1:78:a2:a0:
         d5:23:7d:59:fb:4d:57:93:de:1f:09:23:36:8d:4a:e5:92:52:
         3c:58:67:ad:fc:e3:fb:af:c9:b7:2f:4e:cb:cc:22:74:9c:6d:
         5d:96:66:8b:14:e9:7d:1d:7f:7e:47:c0:d4:5a:56:a6:04:04:
         4a:3e:9a:72:04:85:1f:86:76:b0:9a:f0:1d:a4:1a:c0:14:f1:
         35:6e:d3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:27:46 2025 by rpki-client