Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
File:                     fmfojMQDeKlwRj3y0LBgiOZdubA.mft (raw, json)
Hash identifier:          J652ajU7vb7qnpwnBGBBx+cLUaf5HQM5ZBpXF+fu1so=
Subject key identifier:   DC:9C:1F:B0:41:CA:60:B0:4B:FB:6E:7F:8B:24:88:52:A3:1C:21:ED
Authority key identifier: 7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0
Certificate issuer:       /CN=A91C9D04/serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0
Certificate serial:       093D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
Manifest number:          1F2F
Signing time:             Tue 12 Aug 2025 16:51:27 +0000
Manifest this update:     Tue 12 Aug 2025 16:51:26 +0000
Manifest next update:     Tue 19 Aug 2025 16:51:26 +0000
Files and hashes:         1: fmfojMQDeKlwRj3y0LBgiOZdubA.crl (hash: yueULpCuawwgtI3GEFwA0jxyLbTwNOIWVDZrzxKW6j4=)
                          2: A1DFD796A65511EABDAED713C4F9AE02.roa (hash: vKmmh6WIOEqHjc9HRB9xmdHJEo2LxIyyZG3CXzn2ZyE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl
                          rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 16:51:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2365 (0x93d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9D04, serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0
        Validity
            Not Before: Aug 12 16:51:26 2025 GMT
            Not After : Aug 19 16:51:26 2025 GMT
        Subject: CN=689b710f-fc9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cb:48:f3:3a:4e:ad:96:90:9d:52:3c:70:d4:
                    84:54:8a:51:ff:4b:04:13:f9:2f:07:b5:f0:bf:0d:
                    bb:9d:f6:e6:c1:7c:59:51:6f:fd:17:7c:64:cb:0d:
                    8b:6b:71:d4:a7:c5:f5:f6:d6:9a:44:39:e7:28:11:
                    89:95:1f:9b:61:58:c0:a1:69:75:c9:6b:d1:b4:3c:
                    8f:8c:e1:b4:46:33:21:d0:4d:55:63:63:2a:d3:5a:
                    6c:3e:64:95:49:31:ea:e7:53:f1:f9:38:6a:0b:1d:
                    81:e0:c5:0e:c2:e5:16:e7:d9:a9:aa:22:20:8b:ba:
                    ea:61:c3:35:3f:ee:c9:8f:fb:4f:81:d9:eb:ec:a8:
                    d1:60:83:43:38:86:c8:20:be:90:cb:e4:29:3e:03:
                    80:cd:20:b5:5f:43:26:ad:55:41:35:71:37:54:e7:
                    3d:fe:20:1c:ae:ea:4e:2c:f2:08:d1:ad:09:8b:de:
                    5c:b2:5a:0f:ee:7c:a5:c4:89:a4:4f:ed:31:8e:dd:
                    be:1e:65:66:42:9e:5d:74:b3:d9:26:97:4c:93:56:
                    88:dd:44:7e:65:7b:05:0f:9d:55:cd:07:48:52:e8:
                    89:fb:55:44:e3:57:e4:63:f1:b5:77:2a:4a:06:5d:
                    2f:a3:84:34:ef:09:fc:e6:67:6f:5d:d6:71:83:a7:
                    9d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9C:1F:B0:41:CA:60:B0:4B:FB:6E:7F:8B:24:88:52:A3:1C:21:ED
            X509v3 Authority Key Identifier:
                keyid:7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:ee:46:06:62:dd:fb:76:22:f7:bc:a9:2b:4f:07:33:a6:fb:
         3e:1a:a0:d3:5e:49:ff:b1:bd:08:3e:6c:50:90:ef:99:9e:a3:
         e2:f9:5d:9c:9c:4a:80:bb:79:92:17:1a:de:ce:aa:b3:67:b7:
         3a:21:bc:19:b5:dd:e7:77:53:b7:78:a6:d0:d6:cc:d4:6d:d9:
         60:a3:83:f8:78:e8:f9:0e:73:6a:02:02:1c:43:2d:08:5a:43:
         0a:48:60:6d:22:01:4f:f8:26:e4:c9:da:0f:42:a0:04:fe:26:
         c9:e3:ed:1f:a8:58:0e:a4:06:99:ab:4a:22:97:c4:3d:7d:7d:
         0d:ea:a3:0b:b0:f5:f4:1a:39:ed:e1:24:fe:af:17:d8:0b:ba:
         d3:39:76:de:ee:77:5b:75:76:22:48:49:4a:df:f5:da:93:3f:
         ab:9a:da:58:2f:34:01:7c:c2:7a:38:33:48:73:0f:e5:69:b0:
         33:f7:71:2b:97:46:ce:8c:a8:bc:47:16:df:6c:e1:c8:64:6a:
         ea:03:2d:0f:09:f3:5d:b2:c3:2b:a3:b8:da:1c:54:4b:4d:9c:
         75:e7:8a:39:ce:f2:78:1e:5e:64:43:f0:d4:ca:52:31:47:ed:
         c7:db:ad:c4:36:9b:6f:7c:d2:4e:71:dc:70:c0:2f:23:94:31:
         3c:27:b6:bc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzlEMDQxMTAvBgNVBAUTKDdFNjdFODhDQzQwMzc4QTk3MDQ2M0RGMkQwQjA2MDg4
RTY1REI5QjAwHhcNMjUwODEyMTY1MTI2WhcNMjUwODE5MTY1MTI2WjAYMRYwFAYD
VQQDEw02ODliNzEwZi1mYzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArMtI8zpOrZaQnVI8cNSEVIpR/0sEE/kvB7Xwvw27nfbmwXxZUW/9F3xkyw2L
a3HUp8X19taaRDnnKBGJlR+bYVjAoWl1yWvRtDyPjOG0RjMh0E1VY2Mq01psPmSV
STHq51Px+ThqCx2B4MUOwuUW59mpqiIgi7rqYcM1P+7Jj/tPgdnr7KjRYINDOIbI
IL6Qy+QpPgOAzSC1X0MmrVVBNXE3VOc9/iAcrupOLPII0a0Ji95csloP7nylxImk
T+0xjt2+HmVmQp5ddLPZJpdMk1aI3UR+ZXsFD51VzQdIUuiJ+1VE41fkY/G1dypK
Bl0vo4Q07wn85mdvXdZxg6edjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNycH7BB
ymCwS/tuf4skiFKjHCHtMB8GA1UdIwQYMBaAFH5n6IzEA3ipcEY98tCwYIjmXbmw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQwNC83MTY2RjM4RTIz
NUMxMUU4ODgxMjkyM0ZDNEY5QUUwMi9mbWZvak1RRGVLbHdSajN5MExCZ2lPWmR1
YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZtZm9qTVFEZUtsd1JqM3kwTEJnaU9aZHViQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OUQwNC83MTY2RjM4RTIzNUMxMUU4ODgxMjkyM0ZDNEY5QUUwMi9mbWZvak1RRGVL
bHdSajN5MExCZ2lPWmR1YkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCd7kYGYt37diL3vKkrTwczpvs+GqDTXkn/sb0IPmxQkO+ZnqPi+V2c
nEqAu3mSFxrezqqzZ7c6IbwZtd3nd1O3eKbQ1szUbdlgo4P4eOj5DnNqAgIcQy0I
WkMKSGBtIgFP+CbkydoPQqAE/ibJ4+0fqFgOpAaZq0oil8Q9fX0N6qMLsPX0Gjnt
4ST+rxfYC7rTOXbe7ndbdXYiSElK3/Xakz+rmtpYLzQBfMJ6ODNIcw/labAz93Er
l0bOjKi8RxbfbOHIZGrqAy0PCfNdssMro7jaHFRLTZx154o5zvJ4Hl5kQ/DUylIx
R+3H263ENptvfNJOcdxwwC8jlDE8J7a8
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:31:55 2025 by rpki-client