Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft
File:                     FgS-6E66CP3JRuSLTBTo3CVCGTo.mft (raw, json)
Hash identifier:          tfq0+CVZVIjQC9TRF+kUyaiAIDXGIjSJjnIzs8SIMYE=
Subject key identifier:   6F:FE:12:21:E7:D6:52:E0:92:84:AC:86:6A:98:21:A5:9C:9C:B8:F8
Authority key identifier: 16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A
Certificate issuer:       /CN=A91513FA/serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A
Certificate serial:       025F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft
Manifest number:          025C
Signing time:             Sun 29 Jun 2025 01:19:55 +0000
Manifest this update:     Sun 29 Jun 2025 01:19:55 +0000
Manifest next update:     Sun 06 Jul 2025 01:19:55 +0000
Files and hashes:         1: FgS-6E66CP3JRuSLTBTo3CVCGTo.crl (hash: s1nrHKgeK+8Z0dxa7wkpkWAQjW4OUXvWQkhfPpzB4LE=)
                          2: 6901B0861DF211ED95A51A3EC4F9AE02.roa (hash: i6vZoTblkosBjA9WaiqC5i10CiSdhYr1XsByXvuMvf8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl
                          rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 01:19:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91513FA, serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A
        Validity
            Not Before: Jun 29 01:19:55 2025 GMT
            Not After : Jul  6 01:19:55 2025 GMT
        Subject: CN=686094bb-0252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8d:85:46:eb:7d:be:49:59:ea:37:3b:9d:3c:
                    f2:cd:f8:e6:5b:51:c7:25:68:96:5c:6c:e2:94:89:
                    0d:f1:25:3e:78:76:70:49:9d:c4:64:1b:b5:df:51:
                    2f:cb:7d:bc:1d:be:3d:0e:5a:bc:2c:19:df:bc:53:
                    e7:58:38:1e:4a:35:78:55:24:0b:84:f7:63:b1:a6:
                    8c:94:f7:57:16:a3:bb:40:ce:d2:bb:c2:26:05:6e:
                    c3:1d:16:5f:7f:43:ae:73:8e:e8:47:9a:1f:3c:9d:
                    e3:71:0f:6d:bd:7f:17:37:31:05:6a:62:f0:32:7d:
                    c2:99:7f:b5:04:b5:32:83:dc:5b:f6:e3:b7:81:75:
                    e8:fb:91:51:10:90:ca:dd:68:2c:fb:a6:1d:2c:99:
                    83:04:c5:a5:39:62:e6:9c:a1:d2:21:21:55:32:a6:
                    73:7f:79:c1:94:65:6b:e2:f6:7c:2b:91:38:49:37:
                    4c:97:60:90:86:40:17:9d:55:0e:23:f4:4b:c7:5c:
                    a9:fb:fc:e4:6b:16:97:3e:11:2c:ec:1c:9d:47:20:
                    fc:97:72:a5:ae:5e:54:e2:c7:cd:91:e0:62:af:ed:
                    43:9f:70:2f:de:4c:29:7c:72:cc:3d:0e:2c:3f:d1:
                    30:15:6a:1c:a4:93:2e:c7:4f:48:a0:ea:c9:b0:f7:
                    86:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FE:12:21:E7:D6:52:E0:92:84:AC:86:6A:98:21:A5:9C:9C:B8:F8
            X509v3 Authority Key Identifier:
                keyid:16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:27:37:0b:7f:1f:51:b9:d0:2d:41:d7:26:28:d1:7c:9d:ef:
         de:a8:c5:55:c4:ac:86:0c:08:c6:1b:f7:36:b6:6f:e3:33:ff:
         53:67:04:33:99:40:d8:ef:02:48:fc:23:bf:a7:50:e6:07:b9:
         dd:ca:b5:9e:8e:9c:9a:11:e5:ae:4a:c6:e8:4b:a8:38:16:71:
         bb:d6:6a:37:3a:0b:14:01:ec:2d:25:96:ee:9d:d2:05:8c:b2:
         d8:34:da:de:dd:62:b3:6a:97:80:6a:f3:c7:63:19:a6:95:f0:
         34:5f:5e:e7:99:09:3e:c4:b7:40:03:f8:16:7f:c0:cb:4a:ee:
         ce:2a:20:15:38:fc:86:80:c5:53:3d:3c:fd:90:41:f4:f7:37:
         28:b4:2c:da:6a:de:d1:ec:30:2c:05:69:a3:5a:70:91:46:ed:
         75:66:0d:17:51:6d:ba:89:85:8d:9a:ed:08:55:d6:02:83:31:
         e6:b1:36:b5:7c:2d:41:b7:3b:41:a8:6b:f0:59:a9:a5:81:ee:
         d5:6e:54:34:d9:57:af:62:5b:31:4a:c1:e9:62:54:13:ec:5e:
         e7:83:62:a6:0a:2a:42:54:33:c0:13:3b:75:0f:b7:ca:9d:b0:
         db:c9:db:db:c9:6f:18:3e:f3:ba:6d:55:f4:a2:e2:b8:f1:c8:
         19:aa:a9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:42:06 2025 by rpki-client