Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
File:                     _qFPI_25d6xkidIQbjXgI7KJaNw.mft (raw, json)
Hash identifier:          H388FHKwrE5YKQC5ySBaD4VQaRPtCydl1XP3zWF7Oe0=
Subject key identifier:   3D:32:8D:CF:60:B4:68:9F:76:DD:F2:47:0C:39:26:69:DF:C2:39:80
Authority key identifier: FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC
Certificate issuer:       /CN=A91DDCB6/serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC
Certificate serial:       08A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
Manifest number:          088C
Signing time:             Fri 08 Aug 2025 21:01:00 +0000
Manifest this update:     Fri 08 Aug 2025 21:00:59 +0000
Manifest next update:     Fri 15 Aug 2025 21:00:59 +0000
Files and hashes:         1: _qFPI_25d6xkidIQbjXgI7KJaNw.crl (hash: z3YVj4se+hTQPYukfH+HggOeXbf7J5gew7/V1dNhRho=)
                          2: 9CB5878688DD11ECAC36C11FC4F9AE02.roa (hash: AdjuOXYS3zA7izh/H5q+WmUmDKawZvVShn5CM75yFQs=)
                          3: 2086256888B911ECAC54E716C4F9AE02.roa (hash: /smgLTvvzRlAwFgnnrG53rcZxe+TUuxudK7zpLwd5hk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl
                          rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2212 (0x8a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCB6, serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC
        Validity
            Not Before: Aug  8 21:00:59 2025 GMT
            Not After : Aug 15 21:00:59 2025 GMT
        Subject: CN=6896658c-c59a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0f:04:9c:07:cb:9a:80:e8:92:f0:71:01:9f:
                    3b:7f:84:ce:0a:7d:22:23:e1:5f:34:f7:20:0f:b6:
                    21:5d:07:57:50:2b:33:8c:e5:f4:34:7b:ed:08:75:
                    48:c2:27:71:82:19:ae:f3:45:be:5c:03:3f:dd:78:
                    b9:a1:d5:35:85:86:44:8d:6a:8d:6f:0e:5d:a0:c7:
                    60:28:cf:00:96:55:c5:1d:f8:d3:3a:84:79:e4:d5:
                    bb:d5:3d:93:a8:c6:72:44:14:91:b5:2a:76:6e:7a:
                    88:7a:cf:43:80:d4:80:e4:3b:e8:5e:e8:b6:ee:98:
                    15:86:9a:c3:ca:5d:d4:0b:3a:d3:db:8d:9d:fa:9a:
                    aa:6d:44:f9:16:ef:06:db:87:1f:81:cc:50:eb:d5:
                    cc:5d:d8:a2:a2:21:f2:8d:97:74:89:ab:9d:d8:2c:
                    61:95:0b:3c:1a:bc:22:86:bb:7d:f4:3e:e7:35:77:
                    ec:db:e0:8f:2d:65:0b:51:bf:38:9f:31:c0:3f:f5:
                    ac:4e:b9:a7:c7:29:a3:06:af:40:32:04:4a:74:46:
                    4e:fd:e6:05:18:27:76:78:9c:78:4a:3b:2c:1e:8e:
                    b5:04:ca:b5:ec:1a:92:fc:e7:3d:56:73:63:16:4d:
                    26:7b:db:c5:db:69:ca:48:7f:8e:eb:52:41:74:f0:
                    bd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:32:8D:CF:60:B4:68:9F:76:DD:F2:47:0C:39:26:69:DF:C2:39:80
            X509v3 Authority Key Identifier:
                keyid:FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e0:38:d2:4e:d9:7c:09:a9:b1:47:a5:f6:ec:b7:82:46:2e:
         24:30:23:c6:fe:0c:77:88:39:4a:47:94:20:4b:74:75:12:9c:
         e4:22:6f:56:39:e0:2a:e0:c9:50:0c:6e:bd:1e:05:7a:96:d1:
         60:b3:59:88:96:f2:c5:a9:c9:fc:38:40:e8:35:11:7d:5c:a7:
         99:4d:be:ae:72:cd:60:ca:8d:6f:f8:d9:ae:2c:42:d5:a5:42:
         b1:71:78:8a:d2:ae:94:2e:a9:62:c9:1e:10:b3:1d:26:44:9d:
         2d:00:29:f4:a8:4b:54:6d:94:fa:ef:a2:32:1d:ce:ef:c0:26:
         b7:a7:24:9b:97:f6:ed:2f:06:4c:f8:07:d1:38:fd:cc:57:a4:
         8c:08:78:ce:94:c5:87:ab:e4:f2:de:f6:6a:88:15:4e:a2:62:
         b2:ba:c4:8e:f5:73:25:c2:b3:fe:c4:ad:b0:9e:6f:52:d2:3a:
         78:c7:ff:88:da:00:9d:38:38:54:2e:9f:e7:c1:96:5f:de:7b:
         29:7a:08:df:23:2f:2b:db:b1:71:11:2b:d7:8a:bf:36:cd:f3:
         f6:0b:83:4b:12:24:cc:3e:06:d0:3e:02:2c:bc:1f:46:5b:d7:
         c4:6f:ba:55:10:6b:f0:fa:d0:d9:f0:a3:97:3b:4e:3a:f1:46:
         d4:d7:8f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:34 2025 by rpki-client