Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
File:                     FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft (raw, json)
Hash identifier:          QeMzzFmKVic5cCKBcHBkik4d9xBqOqbCUJerBaZkFRQ=
Subject key identifier:   BE:AF:BF:5F:52:7D:19:B7:B9:F4:F7:1F:C5:D4:20:6A:50:AB:06:69
Authority key identifier: 16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14
Certificate issuer:       /CN=A91314BC/serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14
Certificate serial:       023D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
Manifest number:          0230
Signing time:             Sun 19 Oct 2025 04:12:14 +0000
Manifest this update:     Sun 19 Oct 2025 04:12:14 +0000
Manifest next update:     Sun 26 Oct 2025 04:12:14 +0000
Files and hashes:         1: FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl (hash: NB6JS4PsvDDK8OD1Ahyi/IJUIn2gzS4EjfdZK9LhtC0=)
                          2: 1083BE64499711EE86AE452DC4F9AE02.roa (hash: slu67F8KWLFn/RxCNvxBYhj1V1Mx5+noN3O9kww2W8Y=)
                          3: 7DD0E8845A3211EDB637E665C4F9AE02.roa (hash: wtWT4PZFgcn64rOhtqw01Kyp1pjejdqieeode8aJT6o=)
                          4: 7D0DFE0A5A3211EDB637E665C4F9AE02.roa (hash: K4zq7amWLtDyT+UqSOR4oOsSasN49MRy2b9Pfvweln4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl
                          rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:12:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91314BC, serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14
        Validity
            Not Before: Oct 19 04:12:14 2025 GMT
            Not After : Oct 26 04:12:14 2025 GMT
        Subject: CN=68f4651e-e63f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:93:80:60:58:2e:9b:56:2a:3e:7a:c9:fc:20:
                    ff:d7:cd:94:55:be:60:58:0f:64:eb:57:48:ae:2a:
                    44:96:0d:63:96:bb:ab:2d:10:fb:ce:6e:bc:06:8f:
                    e6:3a:1c:3e:cb:ef:55:0a:7a:ad:13:da:61:8d:b0:
                    2d:11:19:50:50:38:eb:ea:89:d6:dd:77:8c:cc:b1:
                    b9:69:56:f6:93:4a:62:da:ba:f1:8f:11:87:df:55:
                    92:4e:16:66:86:e7:d8:71:be:3c:0a:68:07:a4:14:
                    74:d2:a6:9b:a2:57:33:ca:29:0b:9a:e5:86:77:be:
                    af:f6:ec:3a:0b:ea:26:41:ff:b7:8b:49:d2:c3:d9:
                    57:f3:1e:8d:4e:27:90:ab:ed:45:cf:45:2a:e0:65:
                    8b:19:0c:85:91:fc:fb:da:29:4b:7c:8d:20:52:73:
                    f4:c3:88:8d:b6:55:be:c2:39:8b:0d:ab:ec:5d:ee:
                    96:fc:17:91:2b:1b:03:86:b2:9f:47:36:df:6b:23:
                    1f:1b:f8:4c:89:cd:4c:4d:14:a8:e3:e6:45:dc:ac:
                    6c:16:31:3b:4c:fe:5f:52:4e:67:05:e6:63:11:e0:
                    80:62:a5:a4:0a:a7:8e:ac:5c:1f:a7:12:ee:e2:cb:
                    4e:40:74:fd:a1:44:dd:ca:d2:2e:fb:c6:dd:07:e0:
                    df:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AF:BF:5F:52:7D:19:B7:B9:F4:F7:1F:C5:D4:20:6A:50:AB:06:69
            X509v3 Authority Key Identifier:
                keyid:16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:1e:85:95:e5:97:cd:0d:cc:68:d4:6c:f1:1a:ef:c5:63:d5:
         58:e9:fe:49:21:f6:ba:60:05:75:e7:29:9c:34:a7:22:ab:4e:
         0c:e7:81:96:4e:18:00:73:ff:f8:63:29:9b:6e:4e:7e:6a:f6:
         1c:af:9a:23:03:5f:35:c6:84:76:83:37:7b:d3:3c:da:58:26:
         85:cf:0f:f3:75:44:ac:99:bc:cb:66:6e:fd:49:b6:34:91:15:
         14:7f:fd:fa:5d:5b:b2:70:12:df:29:11:10:29:41:b3:1b:6c:
         87:a4:e8:5f:6d:60:4e:a3:fa:24:51:53:95:e4:77:7f:5a:54:
         48:39:ec:2f:b0:82:9b:8d:d3:1f:ce:fc:ce:38:e2:c4:56:4f:
         c8:3a:65:09:3f:cb:91:a3:97:69:76:d7:25:83:b9:36:ac:f6:
         15:f4:f1:ad:35:c0:1b:ea:86:1d:ba:b4:e8:51:1f:33:29:93:
         87:00:05:0e:b0:73:c1:56:87:b3:84:7d:b2:d4:0c:48:08:73:
         79:24:51:f8:64:c4:ad:7b:27:5d:0a:ea:8a:a8:93:42:98:ea:
         34:10:2d:68:f6:16:e5:cd:bc:54:72:75:2e:5c:d7:36:74:b9:
         a9:67:cf:71:88:4e:b0:5a:b7:34:e2:fb:47:35:6e:8b:a5:81:
         a2:1a:a1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:56:03 2025 by rpki-client