Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
File:                     fqwMLLJ6MKE47kdbB_6X6Okz_co.mft (raw, json)
Hash identifier:          q8KcLeVOU1IlCADMcrQSZlDoHobwkOEsXtzdM0Jpwbw=
Subject key identifier:   23:9C:02:09:05:C5:F2:7B:A5:D0:B7:98:98:81:85:54:70:A0:E0:D3
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Certificate issuer:       /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial:       28D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
Manifest number:          285F
Signing time:             Wed 06 Aug 2025 15:40:39 +0000
Manifest this update:     Wed 06 Aug 2025 15:40:38 +0000
Manifest next update:     Wed 13 Aug 2025 15:40:38 +0000
Files and hashes:         1: fqwMLLJ6MKE47kdbB_6X6Okz_co.crl (hash: 9YS3W5hyeMfr2/jlgi3nG1QHrtoaVvq28gFinzwG630=)
                          2: BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa (hash: 3b/+EfJ1p5yKcSM+K7504gjRkoUg1csZXTQnr7kAeRc=)
                          3: F9B7A3BEB0A911EF8706BE26C4F9AE02.roa (hash: qjrZgvPz0JrFG9Wn1XQqIINgClH8kerS1ZkagSq1RJI=)
                          4: BF6664C04C1211F0949D8B25C4F9AE02.roa (hash: SYVpgpgSK/nXZhDHIbtXA4pZD4YgNxbTaK5KwHSB1Fo=)
                          5: 83CECDE2F37711EFB7DF5759C4F9AE02.roa (hash: 0KaVGkZL/0Y7KpNtGIJZTIpqNjGhGiAxIqFaPkT8PBU=)
                          6: 9E60B12451BF11F08496463FC4F9AE02.roa (hash: G7alyc28UnPinuub9L7HxXgSKVSvMX+VK7VfHOkzhq8=)
                          7: 46E91B3AB31211EFA6BAAF1EC4F9AE02.roa (hash: b6/17IHmfruCEiR6p/M2eZlPFy6KYLkqGlsr9DlXeXk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
                          rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 15:40:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10454 (0x28d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
        Validity
            Not Before: Aug  6 15:40:38 2025 GMT
            Not After : Aug 13 15:40:38 2025 GMT
        Subject: CN=68937777-833c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d1:96:ff:42:ab:5b:4f:8a:01:73:b4:c4:93:
                    68:9b:62:2f:b0:f5:dd:1b:1c:77:e8:e4:94:0d:49:
                    50:e3:be:46:cb:78:b8:5e:58:82:c9:2c:54:37:7e:
                    f2:a0:c9:dc:67:a4:88:02:0f:1d:4f:71:ba:d5:62:
                    47:a8:d8:fa:04:a8:81:a7:38:77:b8:cb:61:9a:d9:
                    ee:e4:ba:b3:f7:d1:f3:00:ef:9b:b5:79:55:0d:fb:
                    e9:7e:3d:93:af:5e:1c:6d:18:86:8b:97:ae:6c:c7:
                    99:a3:89:75:e2:ed:81:f0:65:84:f5:ab:0a:1b:df:
                    34:4b:8e:71:61:6d:ca:2e:ef:87:00:ff:98:87:16:
                    e0:10:4d:0a:1c:92:08:40:52:9d:bd:94:71:77:1c:
                    bd:68:b9:69:09:e9:74:36:60:ec:a2:a4:a1:ad:39:
                    ed:f7:ab:5f:5a:69:a6:bb:54:07:fd:87:46:03:ca:
                    c5:77:1f:9a:1f:4d:41:11:87:64:fb:4e:2f:bf:54:
                    93:6f:6b:c7:df:7c:15:1a:bc:a2:80:19:b6:50:e9:
                    7b:5d:b6:cf:e4:b9:50:33:e6:94:92:68:d0:04:30:
                    4e:ef:fa:80:12:6e:75:ad:c7:14:3b:61:1c:3a:f9:
                    bc:f4:21:41:60:10:f7:73:6e:ba:c1:6a:ba:d6:e5:
                    85:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:9C:02:09:05:C5:F2:7B:A5:D0:B7:98:98:81:85:54:70:A0:E0:D3
            X509v3 Authority Key Identifier:
                keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:45:fe:ab:8e:23:54:0a:03:4e:75:0c:08:b7:46:aa:9f:78:
         c6:86:7d:a0:04:2e:f6:b7:43:09:e0:cf:65:1c:32:9a:83:8f:
         a2:45:69:9d:67:c9:b7:d1:9f:ab:ff:69:62:d2:dc:9b:1e:76:
         44:57:3d:b6:ef:42:03:66:2e:0f:fb:e4:6b:09:70:a2:62:95:
         5a:4d:c2:02:e3:9e:6d:84:2f:d8:ae:fd:5d:20:48:26:d5:c0:
         44:0b:1c:6f:fa:ac:bf:3b:fe:98:77:2c:cd:4d:08:89:a5:a1:
         55:b4:9b:f1:06:24:0e:d1:82:5b:97:6c:a3:da:a3:8e:af:a0:
         b6:3d:ea:41:b2:67:95:a7:9d:52:60:41:d6:7e:70:5e:88:45:
         f0:da:40:cf:58:5b:02:b3:70:68:f6:c5:47:01:d8:3a:cb:08:
         f5:78:9a:77:11:28:3d:9f:b5:a1:2a:94:60:82:ae:b0:c7:72:
         46:53:d8:55:0b:a3:44:35:f6:60:2e:53:4e:f4:ec:4b:15:91:
         5f:93:10:86:3b:b4:f0:90:93:ae:a7:d2:48:b0:49:96:1a:12:
         e9:24:69:34:82:39:a4:d4:71:78:55:e6:e3:29:44:31:42:e8:
         ed:f6:c6:74:84:01:cf:e5:15:83:c2:1a:86:06:2f:ca:63:17:
         bb:37:05:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:28:56 2025 by rpki-client