Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
File:                     Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft (raw, json)
Hash identifier:          wrkIUpjRRv3mPttJ6K0alp6GRvI6LuxM6imvL1OT9qE=
Subject key identifier:   A4:4F:0D:36:6E:37:92:43:E2:37:8E:52:E2:F9:DD:15:61:03:15:BE
Authority key identifier: 16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18
Certificate issuer:       /CN=A91295B6/serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718
Certificate serial:       019A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
Manifest number:          0193
Signing time:             Sat 23 Aug 2025 03:37:33 +0000
Manifest this update:     Sat 23 Aug 2025 03:37:33 +0000
Manifest next update:     Sat 30 Aug 2025 03:37:33 +0000
Files and hashes:         1: Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl (hash: JR1RK7FgZV1ZopRTnlerAftHk9k5C/h9qWoqgQnLczM=)
                          2: 35C8F50C218A11EE959B7037C4F9AE02.roa (hash: d9bjtW0ZUYjonxEE3MZfuZxfLKtEPtuzgQGXr7LUJRE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl
                          rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:37:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410 (0x19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91295B6, serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718
        Validity
            Not Before: Aug 23 03:37:33 2025 GMT
            Not After : Aug 30 03:37:33 2025 GMT
        Subject: CN=68a9377d-98ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ed:70:d0:60:b1:95:9b:24:9f:2d:f8:da:cb:
                    a8:0a:4d:c8:9c:00:fb:b5:13:ee:16:15:b0:38:e6:
                    ad:3c:ee:19:8e:32:43:79:f3:03:60:6f:55:b3:17:
                    10:7d:76:92:7a:9e:2d:6a:2b:f3:c7:d1:b1:07:76:
                    c9:d9:bd:82:00:fa:00:6c:de:48:ca:6b:9f:7d:a1:
                    6e:4f:70:02:8d:d8:4c:88:85:0a:5a:75:e4:53:23:
                    44:a9:eb:46:70:a3:36:c2:ac:31:26:f9:5f:e5:38:
                    39:67:32:62:b2:ee:9a:5a:ef:8a:ef:64:6e:8d:ba:
                    9b:62:71:06:1c:84:97:a3:17:99:a4:9a:e1:b3:99:
                    00:e9:4e:88:43:2c:94:97:7f:0c:4a:40:85:d4:4b:
                    8f:f3:5d:bd:e4:f6:92:a9:4c:65:cb:2f:a0:98:4b:
                    50:b2:f8:ab:a9:65:6a:7d:32:a3:8b:8b:66:f2:1a:
                    e8:a3:7d:fc:d6:3a:ee:d7:50:c6:4d:68:aa:fb:4d:
                    cc:7f:8e:bc:25:98:5f:e2:b7:e0:0c:02:ff:97:a5:
                    f0:d2:83:12:fc:4c:e0:32:ad:24:ab:26:86:fe:43:
                    b2:70:7c:60:e7:1d:e8:44:81:fd:d7:1b:9d:34:67:
                    de:b4:4f:07:19:95:62:bd:f9:68:44:5c:22:8f:63:
                    e9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:4F:0D:36:6E:37:92:43:E2:37:8E:52:E2:F9:DD:15:61:03:15:BE
            X509v3 Authority Key Identifier:
                keyid:16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e1:47:34:95:4a:07:4f:c5:bc:67:4f:61:8a:3c:8b:1e:cf:
         f2:14:30:47:a6:d2:fc:61:47:a6:dc:74:b8:be:65:e8:f1:47:
         80:08:df:fd:a2:49:69:cc:4a:d2:3e:f3:52:0c:86:cc:5c:d6:
         8c:71:ff:68:ef:35:6a:9e:f0:dd:fd:ea:fb:80:32:6f:66:07:
         73:1e:01:23:e2:c9:f0:7e:7a:9b:b5:53:18:87:fc:80:4a:2b:
         ab:55:11:0a:e6:bc:45:2e:68:78:15:a7:2d:93:1a:ad:47:ae:
         bf:db:91:00:05:a7:5c:9b:33:45:58:fb:17:e5:18:c9:03:74:
         9a:df:d7:be:e5:9e:c2:16:6e:bd:74:c6:62:fb:60:89:a6:76:
         7c:b0:38:1f:f4:72:de:3a:b5:5f:82:0d:76:ed:43:00:e9:63:
         15:db:e2:37:2e:3b:65:09:ba:b6:60:80:68:9b:0f:48:7b:ed:
         bd:f4:2a:1e:c5:39:fa:4c:87:41:41:6f:46:31:eb:1f:ac:35:
         1e:22:4a:a5:53:00:be:db:b3:28:76:bf:e3:c1:93:ba:53:23:
         04:c3:cb:c1:55:1b:9e:77:43:c1:41:a1:27:f3:a7:f9:1f:8c:
         aa:b3:df:c1:5d:38:1c:39:1f:66:bf:ad:73:c5:32:08:73:17:
         69:72:3a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:38:03 2025 by rpki-client