Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
File:                     FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft (raw, json)
Hash identifier:          OM5xHXsXJM/h5++XAEUdRVOz/E1kJfXSc34uIxe2VAI=
Subject key identifier:   F2:DC:6A:66:40:81:39:71:B5:43:F6:72:93:E6:28:F9:9B:14:5E:09
Authority key identifier: 16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45
Certificate issuer:       /CN=A911A0C0/serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45
Certificate serial:       1961
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
Manifest number:          1953
Signing time:             Sat 18 Oct 2025 16:47:26 +0000
Manifest this update:     Sat 18 Oct 2025 16:47:25 +0000
Manifest next update:     Sat 25 Oct 2025 16:47:25 +0000
Files and hashes:         1: FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl (hash: V57JxlWTFv7x7JWzp9mrBV9yyb3Xi75ewDDfInHs78g=)
                          2: 543AF5B283D911E78F2FA066C4F9AE02.roa (hash: XS/tQXFr6hMyKrYJ8vxPUjZePNffAHjlSJ+Stv9rn5s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl
                          rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:47:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6497 (0x1961)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A0C0, serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45
        Validity
            Not Before: Oct 18 16:47:25 2025 GMT
            Not After : Oct 25 16:47:25 2025 GMT
        Subject: CN=68f3c49d-2df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:69:98:a2:ff:b7:c4:5c:71:b6:61:99:18:4d:
                    d7:99:23:b0:ad:e7:3b:5b:e6:29:ff:33:a3:4f:a3:
                    ac:a5:f6:4c:34:6e:7e:82:0c:11:24:dd:a2:e1:e8:
                    01:e6:60:06:d7:02:9b:13:e5:23:21:42:4a:11:1b:
                    34:c9:9c:1a:fa:9f:65:65:a0:72:10:ff:1a:0c:8e:
                    74:f4:84:7d:92:30:db:72:79:45:d3:15:6c:1b:50:
                    96:41:30:f3:cb:53:0e:4a:21:36:e4:6f:bc:8b:e8:
                    59:f4:32:3c:ed:12:77:51:c8:52:2f:b5:e4:3e:87:
                    03:aa:e6:ee:d3:f0:65:f8:4d:2e:8f:a4:ff:83:26:
                    fa:dc:cb:f1:c8:ab:08:d7:10:fb:40:a3:d4:aa:c5:
                    c9:d3:1f:ca:33:04:2e:80:17:14:3d:d3:dd:48:d9:
                    7b:13:f8:e2:6b:1b:5b:1e:0e:4a:1e:7d:f0:04:72:
                    4c:1f:19:99:34:1f:37:63:7b:25:2c:11:19:1d:a4:
                    7f:16:ce:a9:34:46:6f:71:73:89:ec:76:23:dd:16:
                    36:2f:6a:ac:ba:70:5c:09:9e:e8:72:e1:69:67:39:
                    5f:28:19:cb:da:df:2e:a0:8d:ba:8e:78:3c:73:5e:
                    51:93:a5:1f:57:c7:80:5e:0e:50:e9:5d:2d:c5:39:
                    02:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DC:6A:66:40:81:39:71:B5:43:F6:72:93:E6:28:F9:9B:14:5E:09
            X509v3 Authority Key Identifier:
                keyid:16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b5:9e:61:eb:77:47:e2:a4:12:f4:2f:73:a2:ee:2f:59:92:
         32:c3:62:dd:b2:a7:dc:9c:1c:6d:e9:91:88:ee:ed:7d:24:15:
         90:0e:e6:b5:19:97:d5:35:1f:04:99:6d:a2:6d:9c:a9:09:84:
         3f:cf:6f:ef:01:f4:da:47:86:8b:50:ca:e4:47:47:da:bb:ec:
         56:e9:57:2b:60:33:15:ac:e4:47:59:03:38:17:3c:fd:12:ec:
         be:6d:b8:52:51:ae:e3:36:b8:12:03:9f:50:9a:fc:56:97:df:
         0b:eb:aa:f9:45:2c:2a:68:76:c0:3f:f4:cd:b8:27:20:67:45:
         af:ea:e5:17:a8:44:20:b7:4e:a2:0c:a9:47:2f:a0:d1:c7:f1:
         cd:5d:9a:37:26:a3:5a:8d:47:48:1a:dd:e4:58:0e:df:fe:e2:
         70:15:8e:ac:f7:f4:13:2c:37:e5:7b:ea:e7:9d:53:be:4c:77:
         a2:ed:f6:d4:2b:23:a1:d1:e8:ea:47:67:34:d0:36:01:f1:88:
         e0:97:1c:47:fc:c8:63:63:95:7e:18:62:26:a4:33:f4:49:2b:
         57:43:88:4e:ff:73:f3:ff:b1:e3:8b:4b:54:49:4e:12:15:b5:
         f7:b2:db:77:7c:ac:38:2a:82:ab:c8:2e:05:ba:59:97:ee:01:
         c2:0b:b9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:46:55 2025 by rpki-client