Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
File:                     FN2GhClPGzOjE6-48OuhyKADeAk.mft (raw, json)
Hash identifier:          vdmfnIpVU27+6ZiugQndeXAuKy/MQYdc164MW6KjIj4=
Subject key identifier:   8F:CC:80:8A:16:98:7D:31:FB:02:28:4C:5C:67:42:CF:5E:19:01:E9
Authority key identifier: 14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09
Certificate issuer:       /CN=A9160A05/serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
Certificate serial:       B4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
Manifest number:          AF
Signing time:             Sat 23 Aug 2025 06:22:06 +0000
Manifest this update:     Sat 23 Aug 2025 06:22:06 +0000
Manifest next update:     Sat 30 Aug 2025 06:22:06 +0000
Files and hashes:         1: FN2GhClPGzOjE6-48OuhyKADeAk.crl (hash: VtcRjPwN7zTiaS+cnfZ33eUmcuqzGkPDDMkMvKHgcOE=)
                          2: F7981812F38811EFAC05053AC4F9AE02.roa (hash: 5lT3BqV6fkCasuiMvgjtWS+QEDtMQ2WoJeVX5lRFOMY=)
                          3: E9B0903AF38811EF81B8CE39C4F9AE02.roa (hash: fdQ7jvoBEvlEALSb2JWdt2czQvJjt/S2kzFg/FmzHag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl
                          rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160A05, serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
        Validity
            Not Before: Aug 23 06:22:06 2025 GMT
            Not After : Aug 30 06:22:06 2025 GMT
        Subject: CN=68a95e0e-9a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:de:cd:77:e3:6e:09:52:aa:da:79:35:bc:3c:
                    d0:17:8d:f8:46:78:59:91:a7:99:ef:b5:29:77:f7:
                    2d:e5:32:41:f9:58:71:86:c4:cf:aa:98:4c:3b:db:
                    b1:db:01:69:61:58:df:5f:e1:10:18:9b:36:b8:ba:
                    1b:cb:82:e9:f7:88:08:60:19:a3:98:fe:88:62:96:
                    5b:fb:b9:b8:e3:8d:8e:c9:79:df:ae:50:ca:29:23:
                    e5:44:b0:eb:55:dc:2e:c0:d7:34:11:70:33:5e:54:
                    cb:47:8c:bc:34:61:a8:82:8d:1c:d7:00:7f:a5:91:
                    54:23:b4:22:31:a7:58:b2:d8:a0:2a:8e:13:93:35:
                    33:aa:d0:91:fd:a2:4d:75:72:9a:db:26:2b:06:82:
                    e9:26:17:dd:e9:30:1f:99:aa:f7:11:83:57:7d:bb:
                    65:58:51:b3:b1:48:e4:5a:df:f4:4f:af:90:fb:ce:
                    5c:b8:87:51:6f:ce:1b:8b:c3:89:cd:34:99:da:32:
                    93:47:05:fb:06:1f:08:52:04:14:ce:a6:65:16:97:
                    be:ac:aa:f8:ae:f6:53:c8:ac:bc:9d:08:5f:f8:eb:
                    91:2c:cb:da:80:ec:4e:9e:b2:24:3f:f8:8b:4b:8b:
                    24:98:a7:ba:dc:cd:41:4d:44:48:f3:43:61:bc:5e:
                    5f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:CC:80:8A:16:98:7D:31:FB:02:28:4C:5C:67:42:CF:5E:19:01:E9
            X509v3 Authority Key Identifier:
                keyid:14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:be:bd:cf:76:f6:c2:d8:b1:72:2a:82:f5:b6:78:4e:e7:ee:
         06:b1:43:ba:0c:6a:0c:f1:99:98:12:db:f0:20:5f:d9:85:78:
         4d:a4:54:5f:09:b2:bf:87:09:0c:9b:6d:e9:2c:9f:cf:f2:8c:
         68:a2:0e:74:ee:17:d7:9b:dc:76:14:ab:75:15:18:d8:1b:53:
         d7:fa:f3:88:51:1a:bb:23:82:71:e3:33:14:42:ae:e0:1a:ae:
         22:78:39:58:4b:72:42:8f:df:85:62:2d:ae:1c:00:4c:1b:91:
         a5:5a:74:2e:09:9b:ea:3d:70:b7:46:70:a9:bb:5a:e2:88:06:
         20:ea:34:12:41:6c:88:e0:b6:f4:17:c4:52:58:93:92:7a:42:
         84:59:ab:d5:c2:30:a4:86:e2:20:f2:44:64:a7:0a:80:5f:26:
         2b:83:3c:21:62:92:69:d6:0e:6b:3d:3e:0e:83:ba:7f:e2:47:
         a4:24:6a:60:68:99:c0:11:56:5b:72:eb:3e:d0:c1:08:6e:40:
         be:34:d1:bf:21:ae:28:dd:78:58:81:73:c3:41:5b:12:c6:7d:
         71:26:28:b1:43:91:05:7c:f1:d5:0c:ec:fe:70:7a:0c:8e:7a:
         29:9e:f2:fb:54:0a:28:05:23:f1:9c:55:a6:09:0f:5e:b0:c0:
         b2:8d:5c:8d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjBBMDUxMTAvBgNVBAUTKDE0REQ4Njg0Mjk0RjFCMzNBMzEzQUZCOEYwRUJBMUM4
QTAwMzc4MDkwHhcNMjUwODIzMDYyMjA2WhcNMjUwODMwMDYyMjA2WjAYMRYwFAYD
VQQDEw02OGE5NWUwZS05YTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApd7Nd+NuCVKq2nk1vDzQF434RnhZkaeZ77Upd/ct5TJB+VhxhsTPqphMO9ux
2wFpYVjfX+EQGJs2uLoby4Lp94gIYBmjmP6IYpZb+7m4442OyXnfrlDKKSPlRLDr
VdwuwNc0EXAzXlTLR4y8NGGogo0c1wB/pZFUI7QiMadYstigKo4TkzUzqtCR/aJN
dXKa2yYrBoLpJhfd6TAfmar3EYNXfbtlWFGzsUjkWt/0T6+Q+85cuIdRb84bi8OJ
zTSZ2jKTRwX7Bh8IUgQUzqZlFpe+rKr4rvZTyKy8nQhf+OuRLMvagOxOnrIkP/iL
S4skmKe63M1BTURI80NhvF5f8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/MgIoW
mH0x+wIoTFxnQs9eGQHpMB8GA1UdIwQYMBaAFBTdhoQpTxszoxOvuPDrocigA3gJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEEwNS9EMTdDODg2ODdD
OEExMUVGOEZBQjY5MDlDNEY5QUUwMi9GTjJHaENsUEd6T2pFNi00OE91aHlLQURl
QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0ZOMkdoQ2xQR3pPakU2LTQ4T3VoeUtBRGVBay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MEEwNS9EMTdDODg2ODdDOEExMUVGOEZBQjY5MDlDNEY5QUUwMi9GTjJHaENsUEd6
T2pFNi00OE91aHlLQURlQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAVvr3PdvbC2LFyKoL1tnhO5+4GsUO6DGoM8ZmYEtvwIF/ZhXhNpFRf
CbK/hwkMm23pLJ/P8oxoog507hfXm9x2FKt1FRjYG1PX+vOIURq7I4Jx4zMUQq7g
Gq4ieDlYS3JCj9+FYi2uHABMG5GlWnQuCZvqPXC3RnCpu1riiAYg6jQSQWyI4Lb0
F8RSWJOSekKEWavVwjCkhuIg8kRkpwqAXyYrgzwhYpJp1g5rPT4Og7p/4kekJGpg
aJnAEVZbcus+0MEIbkC+NNG/Ia4o3XhYgXPDQVsSxn1xJiixQ5EFfPHVDOz+cHoM
jnopnvL7VAooBSPxnFWmCQ9esMCyjVyN
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:56:59 2025 by rpki-client