Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft
File:                     X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft (raw, json)
Hash identifier:          c8nPDht0BrdxauoCWUKk//wYrEWUp9x7+V6JyEXz9rc=
Subject key identifier:   44:C4:C7:86:5F:8E:DD:5F:A1:A3:23:E9:3E:AE:D9:5B:7E:87:BA:2A
Authority key identifier: 5F:E1:54:3C:85:B0:65:30:A1:64:CF:90:E1:A2:7D:A8:DB:72:45:0E
Certificate issuer:       /CN=A9145418/serialNumber=5FE1543C85B06530A164CF90E1A27DA8DB72450E
Certificate serial:       04C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft
Manifest number:          04BD
Signing time:             Sat 23 Aug 2025 00:05:15 +0000
Manifest this update:     Sat 23 Aug 2025 00:05:15 +0000
Manifest next update:     Sat 30 Aug 2025 00:05:14 +0000
Files and hashes:         1: X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.crl (hash: 525NUuw1Jbxhm6ley7gX5AZCFPGM0Mvq5EuiRQXJ6Y4=)
                          2: FA5399BC3AE211ECA119BA68C4F9AE02.roa (hash: dZ03PlivQiWcdxJuslt2Fyk44MUpvC5il4kYFX0N5Ns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.crl
                          rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 00:05:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1219 (0x4c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145418, serialNumber=5FE1543C85B06530A164CF90E1A27DA8DB72450E
        Validity
            Not Before: Aug 23 00:05:15 2025 GMT
            Not After : Aug 30 00:05:14 2025 GMT
        Subject: CN=68a905bb-1b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:53:d6:bc:7b:6a:2f:55:d7:fd:22:83:ae:2d:
                    88:5e:dd:fc:ab:6d:cf:11:c0:32:f9:a9:88:71:55:
                    83:24:52:3f:41:d3:61:0a:65:b3:54:2f:a7:d9:79:
                    50:72:df:7e:58:15:2e:5d:84:f0:b8:c6:a3:15:a9:
                    fa:dc:75:b0:e1:3f:d7:23:d6:09:6a:fb:4d:45:33:
                    ee:df:80:60:89:5e:ee:61:11:db:50:c3:d4:c3:85:
                    b0:0e:67:51:6f:16:96:b0:ed:10:f7:3e:fb:a0:1b:
                    3a:65:90:30:fd:b7:ad:92:85:4c:1f:15:aa:fb:1c:
                    bb:f1:b8:63:4f:dc:e1:57:c4:fb:e5:88:09:30:71:
                    d0:b0:69:dc:48:ec:56:89:44:65:33:3e:0c:a0:93:
                    08:83:39:a7:87:55:45:bc:f3:1c:63:99:46:2e:75:
                    a0:f5:b9:39:cb:c0:95:eb:12:0d:d7:c6:14:e7:ed:
                    c0:d8:b9:c0:3c:07:34:7a:0b:82:1c:9c:d3:74:11:
                    f1:de:b6:75:75:29:39:23:14:0d:ba:68:8e:67:e2:
                    e8:fc:2e:d2:2a:a9:b5:a6:ce:2e:28:57:71:82:ee:
                    48:df:1d:c2:4d:bc:95:15:a1:37:39:b3:14:06:75:
                    18:a0:b0:61:ae:cf:e9:d8:29:01:5a:bd:07:94:eb:
                    c5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C4:C7:86:5F:8E:DD:5F:A1:A3:23:E9:3E:AE:D9:5B:7E:87:BA:2A
            X509v3 Authority Key Identifier:
                keyid:5F:E1:54:3C:85:B0:65:30:A1:64:CF:90:E1:A2:7D:A8:DB:72:45:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ed:61:36:b5:4a:33:15:55:fb:65:3d:89:5e:77:67:8b:4c:
         6b:36:ef:f5:ba:9f:54:5d:38:8b:58:e0:2d:e7:4d:47:1c:96:
         f6:b5:85:40:44:2f:75:da:52:df:76:71:54:6b:c5:0d:c1:8b:
         0e:d0:c5:69:72:ae:17:02:bb:5f:b5:6a:b3:05:73:85:5c:63:
         b5:ff:bf:03:2e:8f:59:ed:8a:46:6a:ac:d5:7d:18:5f:a2:89:
         23:67:ba:ed:67:85:82:e5:6f:b5:2f:f6:b5:8f:00:19:08:f0:
         7e:fa:bd:8f:16:b9:72:07:fa:1c:fd:c6:8c:60:5b:91:4d:6b:
         ac:33:2b:bb:e0:30:de:17:b1:8b:a5:40:83:8b:e1:b1:3f:cf:
         b8:a0:8e:3c:4e:fe:b3:6e:53:e7:14:ef:88:68:9b:e5:6d:cc:
         2e:eb:17:a3:c3:92:7f:a5:63:9c:9d:71:06:c6:9b:7c:f2:35:
         04:84:ff:f1:95:52:6b:8b:50:7c:4c:56:e9:e9:c9:70:08:12:
         d4:79:23:2c:e5:f0:88:f4:34:e2:4e:61:5d:81:b0:c0:11:b4:
         bb:74:ba:35:b2:0d:10:d0:f3:42:60:0a:6b:66:ee:6e:40:a2:
         bd:c6:8e:b2:6d:18:35:85:b2:9d:e4:da:bc:72:17:f3:b0:2b:
         43:e9:29:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:39:33 2025 by rpki-client