Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft
File:                     fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft (raw, json)
Hash identifier:          tllgq0t68KAbVb7dyOS92AU1YNwpCM5lVm3vfWwQZew=
Subject key identifier:   43:E5:1A:65:4F:2F:14:A2:31:E2:44:D7:3E:56:C9:EC:A2:9D:61:64
Authority key identifier: 7D:BF:83:AE:52:82:C8:4E:B0:EF:F5:5D:5C:1C:67:80:1C:B6:45:C4
Certificate issuer:       /CN=A916601E/serialNumber=7DBF83AE5282C84EB0EFF55D5C1C67801CB645C4
Certificate serial:       7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft
Manifest number:          7A
Signing time:             Sun 19 Oct 2025 10:05:31 +0000
Manifest this update:     Sun 19 Oct 2025 10:05:30 +0000
Manifest next update:     Sun 26 Oct 2025 10:05:30 +0000
Files and hashes:         1: fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl (hash: hu/IWjJ0jfZAWJG24k9P4JlXhorEhFUNOdC/JIaZwVs=)
                          2: 46497846F56111EFA41A451BC4F9AE02.roa (hash: pt8m72qrunjWvL5P2n1H2INSnSMhY3pqoGlkmhbwXKc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl
                          rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916601E, serialNumber=7DBF83AE5282C84EB0EFF55D5C1C67801CB645C4
        Validity
            Not Before: Oct 19 10:05:30 2025 GMT
            Not After : Oct 26 10:05:30 2025 GMT
        Subject: CN=68f4b7eb-5f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ed:30:5e:60:fe:aa:2d:5e:73:0c:47:4e:5f:
                    5c:a7:5e:32:be:db:5c:d1:2c:c1:22:a7:d7:24:3a:
                    dd:b6:3a:1f:02:8e:fc:cd:be:9f:a2:d0:a8:cb:98:
                    f6:29:73:d9:a6:7f:14:ad:24:2d:16:b5:51:57:d9:
                    74:09:93:37:9e:6e:83:ed:08:f5:98:5b:78:ad:41:
                    e4:53:d3:fa:f8:0b:22:ab:a3:ae:03:41:7c:70:a9:
                    b7:e0:04:54:20:83:21:a6:89:fb:51:d0:6a:3c:32:
                    ae:55:aa:9f:51:33:60:24:28:d8:d6:76:2c:01:4f:
                    23:dc:4f:e8:a8:1a:dc:b6:88:40:2f:b2:5e:a9:76:
                    b7:b8:17:78:0c:e3:28:9e:0a:77:99:16:5b:25:81:
                    3f:0c:16:60:78:ce:6a:1b:f5:49:2c:23:c8:f1:96:
                    4c:d1:a8:bb:a8:a5:08:50:53:79:a5:14:d0:8b:c4:
                    d7:99:23:ca:8b:73:28:93:ad:6c:55:d6:96:90:25:
                    09:3c:b2:5e:dd:ce:77:4c:ee:9c:85:d8:37:e0:39:
                    06:a6:da:03:32:e0:33:d4:7c:e6:db:d4:e1:a0:f3:
                    70:58:c7:2f:42:a6:0b:54:19:e7:2a:7a:0f:d6:7d:
                    47:50:e5:b5:76:2d:0d:37:06:71:77:f8:74:45:f0:
                    2e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E5:1A:65:4F:2F:14:A2:31:E2:44:D7:3E:56:C9:EC:A2:9D:61:64
            X509v3 Authority Key Identifier:
                keyid:7D:BF:83:AE:52:82:C8:4E:B0:EF:F5:5D:5C:1C:67:80:1C:B6:45:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:cc:53:6f:ab:fa:f5:69:dd:55:6a:86:7b:17:3c:05:87:e3:
         dc:13:83:a6:13:ac:0f:0a:8c:b6:bf:34:28:cc:1f:e5:39:ff:
         a6:ee:1d:a5:3a:98:9c:7f:d0:18:3b:31:d6:60:61:24:ac:f7:
         b0:1d:63:7a:f1:e0:06:85:76:ed:ef:06:7e:0b:78:ff:3d:6c:
         d4:26:15:78:d2:13:60:c2:1f:ca:61:8a:41:42:c2:59:c3:a7:
         bb:20:f6:91:46:b1:c5:d4:13:8e:1c:8e:9e:89:e2:09:fa:fe:
         1b:82:41:82:9f:8c:77:e8:55:20:01:90:15:35:08:0e:89:28:
         ec:97:e9:65:50:73:02:b5:f3:d5:4a:04:a9:fa:6c:08:74:cb:
         ab:d5:fd:4c:f5:0a:3b:08:00:7b:c3:a0:78:2c:58:40:c0:71:
         8b:a6:49:ef:f2:7b:3f:ee:b9:62:fc:84:2f:75:ab:fb:a4:b5:
         8d:26:7d:ac:b0:34:3f:82:b7:e3:92:f8:14:48:0b:08:74:12:
         17:83:30:78:a2:dd:77:13:b9:1c:c6:d7:bf:e8:36:8e:85:e1:
         95:d6:72:0b:3d:37:38:22:ec:b8:eb:6d:bf:fc:b2:10:fa:21:
         3c:ea:c7:96:1b:b7:72:0e:c6:d0:99:a8:a6:b2:99:43:73:6b:
         71:d3:19:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:05:48 2025 by rpki-client