Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
File:                     fCqWpakDTN8qeG9kvfJ_2KxRySs.mft (raw, json)
Hash identifier:          CScrMlz4jVK0H8Fqs+N0OoDS3aJQ2fRaZpj9rKZrT0M=
Subject key identifier:   6E:3D:C6:8E:A0:5A:2A:58:B4:6B:BA:9C:63:D5:A3:F1:3E:B0:31:02
Authority key identifier: 7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B
Certificate issuer:       /CN=A9125E89/serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B
Certificate serial:       0601
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
Manifest number:          05FC
Signing time:             Wed 02 Jul 2025 23:12:28 +0000
Manifest this update:     Wed 02 Jul 2025 23:12:28 +0000
Manifest next update:     Wed 09 Jul 2025 23:12:28 +0000
Files and hashes:         1: fCqWpakDTN8qeG9kvfJ_2KxRySs.crl (hash: eTbEVdoPXF3lKqCbYHEOnGsGa+jizoRPXn607qDp1wY=)
                          2: 12CC9D1857A711EDB284106DC4F9AE02.roa (hash: IJ+fkHbxBE1SHSjZ2ko97tJx/Im9hMimIC1imqln5xg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl
                          rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 23:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1537 (0x601)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125E89, serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B
        Validity
            Not Before: Jul  2 23:12:28 2025 GMT
            Not After : Jul  9 23:12:28 2025 GMT
        Subject: CN=6865bcdc-ad5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1e:b2:12:42:da:95:0e:8a:62:a1:71:4e:bf:
                    38:e3:6d:e5:4a:d9:6e:9f:d3:da:76:f9:26:ae:d3:
                    2e:df:4b:e7:23:d3:67:4f:c6:74:f4:fc:78:3f:f2:
                    15:ac:da:b8:5c:1f:bc:7b:1b:cd:7e:35:be:75:8a:
                    b4:8c:3d:cc:8e:22:82:b4:e5:eb:8d:cd:e8:6d:10:
                    1f:97:40:bf:96:34:21:70:73:03:76:48:55:0e:50:
                    e0:34:42:ba:15:d2:91:d9:d2:49:06:3d:4a:80:df:
                    ea:50:e2:2f:ce:73:a3:96:35:b3:e7:a7:a4:16:20:
                    b4:5e:ad:97:ec:b4:f4:e3:f6:d4:47:49:bd:70:20:
                    cd:47:20:47:65:6e:b4:fa:02:02:17:fc:74:3b:a8:
                    f5:1e:14:33:2d:8b:43:5b:26:4f:3d:5f:42:c7:64:
                    c9:64:fb:63:a9:1d:d4:29:63:4e:bd:e0:ec:2f:8e:
                    31:18:73:d1:c7:c3:06:e8:7f:59:ab:b0:5a:29:7c:
                    d5:cb:ec:b5:82:ef:b0:ca:da:e1:c3:c7:c1:c1:8a:
                    98:32:e7:58:20:fa:70:ac:66:29:fd:9b:a0:89:9b:
                    05:73:b4:6e:d1:16:f9:e0:4e:bf:a2:2d:b9:09:6e:
                    5d:a1:fa:94:68:1d:6b:09:37:10:b8:4b:17:7f:57:
                    f9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3D:C6:8E:A0:5A:2A:58:B4:6B:BA:9C:63:D5:A3:F1:3E:B0:31:02
            X509v3 Authority Key Identifier:
                keyid:7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:1b:5c:fa:db:57:d7:de:e7:bf:5f:de:7a:88:64:25:02:f7:
         8d:fa:fe:78:3e:96:f8:29:13:62:a3:35:b7:42:47:ad:0c:59:
         a5:4d:63:11:0a:52:48:04:67:6f:a3:ad:46:4f:f5:af:a3:2a:
         87:19:11:f9:a1:1f:ab:ae:d4:67:2f:25:dd:22:95:b1:93:ae:
         44:a6:b7:15:c0:b5:75:68:8b:85:6a:48:30:15:46:97:f2:93:
         c2:89:f6:55:e6:6d:86:dc:b3:b7:85:80:63:0a:8f:c8:c6:59:
         75:24:1d:a7:a5:5f:9b:6e:1b:26:60:ea:18:79:92:a4:14:5f:
         1e:82:61:c8:f9:3b:d5:7e:c9:69:31:9f:00:7d:74:8b:a2:ab:
         40:ad:52:74:62:0e:e5:05:c6:ff:b6:a1:08:2f:67:5a:7c:80:
         db:13:f7:1e:99:e9:59:33:1d:4a:61:5e:6a:8e:9d:2c:d3:5e:
         86:59:97:c1:91:30:7e:2c:a6:72:13:75:f7:03:61:95:91:4b:
         1f:88:ef:64:e9:61:e6:4a:8c:f8:91:25:5c:9a:14:6e:0c:f4:
         fc:5b:92:b3:9e:b8:40:37:ad:d9:13:b4:91:78:91:15:b8:a4:
         39:e7:15:3d:64:f0:29:0d:6d:89:e5:ed:6c:0a:4b:04:91:3d:
         42:af:15:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:33:18 2025 by rpki-client