Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/FpJaX5SGv8PxG1GPDfhHOgKruFs.mft
File:                     FpJaX5SGv8PxG1GPDfhHOgKruFs.mft (raw, json)
Hash identifier:          ZCYONE/DpYSbUddZeZAVrMtaaiCezDo2c07esozavok=
Subject key identifier:   E3:D7:FA:D2:B8:C2:92:85:11:F4:C8:64:9C:96:BF:5F:16:0D:45:BF
Authority key identifier: 16:92:5A:5F:94:86:BF:C3:F1:1B:51:8F:0D:F8:47:3A:02:AB:B8:5B
Certificate issuer:       /CN=A91282C6/serialNumber=16925A5F9486BFC3F11B518F0DF8473A02ABB85B
Certificate serial:       DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpJaX5SGv8PxG1GPDfhHOgKruFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/FpJaX5SGv8PxG1GPDfhHOgKruFs.mft
Manifest number:          DA
Signing time:             Sat 23 Aug 2025 05:42:27 +0000
Manifest this update:     Sat 23 Aug 2025 05:42:26 +0000
Manifest next update:     Sat 30 Aug 2025 05:42:26 +0000
Files and hashes:         1: FpJaX5SGv8PxG1GPDfhHOgKruFs.crl (hash: oRoajbZKPnWs5XVAiEprvykQq1iXX+iDXFYNjYgaIWo=)
                          2: 0F0D45D0373711EF896FCE68C4F9AE02.roa (hash: 8SD/beYd/nx0hbzhIjleBbHgR6i9e/DB5zLCO7k3URU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/FpJaX5SGv8PxG1GPDfhHOgKruFs.crl
                          rsync://rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/FpJaX5SGv8PxG1GPDfhHOgKruFs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpJaX5SGv8PxG1GPDfhHOgKruFs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:42:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91282C6, serialNumber=16925A5F9486BFC3F11B518F0DF8473A02ABB85B
        Validity
            Not Before: Aug 23 05:42:26 2025 GMT
            Not After : Aug 30 05:42:26 2025 GMT
        Subject: CN=68a954c3-3dca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bf:31:11:80:3b:08:c2:66:e2:6a:b2:94:07:
                    0a:2f:2d:8d:07:fe:9a:88:04:f6:c9:b4:8d:fb:46:
                    17:e6:5b:22:d9:8d:e4:33:92:11:d1:51:a8:e7:45:
                    66:5b:52:e9:42:16:48:d3:bf:03:47:d9:88:7b:f0:
                    22:46:60:a6:ad:c7:a2:7f:60:cf:af:cf:00:26:da:
                    fb:d1:63:88:0f:4b:ec:e2:c2:7d:77:44:4e:df:ae:
                    bb:e2:05:ba:03:5d:f2:82:27:24:73:b5:ab:bc:f4:
                    fe:03:0c:66:70:f2:7f:d1:84:6d:17:6b:6c:65:f0:
                    48:50:f0:d4:81:7b:19:b3:13:e1:67:47:23:27:9e:
                    ad:c6:35:46:a0:3d:68:ab:ca:56:4e:1b:b1:89:fd:
                    84:40:94:90:ba:a9:79:01:7f:9e:cc:7e:28:7f:82:
                    73:2a:43:1c:e2:a0:12:4d:37:77:e9:a0:df:68:b2:
                    0b:fb:bb:da:6a:51:10:59:0f:26:23:85:b4:fe:8d:
                    12:f5:34:fe:33:37:8c:02:16:9f:92:09:bb:52:c7:
                    31:4c:32:7e:76:8d:51:76:41:7e:f1:c0:d0:dd:35:
                    83:c2:ee:ee:51:06:93:94:66:00:f4:48:40:ea:dc:
                    c8:b8:2d:65:75:8f:5d:8f:3b:21:81:9e:34:74:4c:
                    47:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D7:FA:D2:B8:C2:92:85:11:F4:C8:64:9C:96:BF:5F:16:0D:45:BF
            X509v3 Authority Key Identifier:
                keyid:16:92:5A:5F:94:86:BF:C3:F1:1B:51:8F:0D:F8:47:3A:02:AB:B8:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/FpJaX5SGv8PxG1GPDfhHOgKruFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpJaX5SGv8PxG1GPDfhHOgKruFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/FpJaX5SGv8PxG1GPDfhHOgKruFs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:2d:02:38:52:c9:6e:11:bd:aa:ca:fc:c0:dd:10:08:dc:57:
         f3:96:6b:b2:24:dc:2e:3f:1a:53:d6:6f:b7:45:48:6e:4f:e1:
         cb:9b:6c:71:12:f0:8e:0e:95:4f:b3:98:8f:92:0a:47:3f:af:
         98:01:50:8f:de:5c:28:61:c8:a8:8b:1c:51:7e:5f:22:82:58:
         1d:4a:d7:e1:d1:5d:c3:1d:1d:d8:34:be:ad:f6:81:56:3f:1d:
         5d:4d:f7:e4:b2:04:ea:14:c3:88:d7:ae:8a:37:9a:2f:f7:dc:
         28:fe:9e:b5:22:d2:24:ee:61:6a:33:3a:5b:bb:a7:3a:af:a8:
         f7:ac:c9:6e:80:34:ab:37:9e:f6:22:ad:7a:a4:6e:8c:a4:fb:
         07:27:b1:fd:17:a2:c2:bc:9b:e3:df:bc:24:69:81:38:27:74:
         e1:60:23:7c:fd:73:bc:5a:12:8a:a1:aa:99:2d:80:15:78:0c:
         23:84:54:bf:f2:3c:9a:a0:a0:98:78:76:c9:78:e2:fa:28:13:
         32:d3:19:c0:40:6a:7b:65:ec:cf:9c:f9:ef:42:00:9e:3b:71:
         2f:05:88:1d:25:bd:6c:2c:aa:b8:b5:2e:e4:b8:a8:cc:4d:b3:
         70:50:b8:45:b9:43:2c:e4:07:87:7f:c6:b7:29:82:59:6f:6d:
         64:f4:73:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:53:55 2025 by rpki-client