Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft
File:                     FTyY0zE8xk7bmuFaujtUPkgEWZA.mft (raw, json)
Hash identifier:          dfWh190bKLT7JCnvXJX9hZx2Pq3T+U97q5H5zTiMDO4=
Subject key identifier:   D2:91:BC:5E:00:E4:B6:B8:18:58:FA:EA:A0:76:CA:3F:79:2A:0E:56
Authority key identifier: 15:3C:98:D3:31:3C:C6:4E:DB:9A:E1:5A:BA:3B:54:3E:48:04:59:90
Certificate issuer:       /CN=A9167FBA/serialNumber=153C98D3313CC64EDB9AE15ABA3B543E48045990
Certificate serial:       70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTyY0zE8xk7bmuFaujtUPkgEWZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft
Manifest number:          6F
Signing time:             Sun 19 Oct 2025 10:15:55 +0000
Manifest this update:     Sun 19 Oct 2025 10:15:54 +0000
Manifest next update:     Sun 26 Oct 2025 10:15:54 +0000
Files and hashes:         1: FTyY0zE8xk7bmuFaujtUPkgEWZA.crl (hash: EDwS4tTnnA7si6BcHoqkMJjg9CiOf+gyCfWAw2xXZtA=)
                          2: F552E6BA05A111F082D17325C4F9AE02.roa (hash: IboM73984syJmuqfIfDKvmHL/HfnKXEhHqhYyaPXIGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.crl
                          rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTyY0zE8xk7bmuFaujtUPkgEWZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167FBA, serialNumber=153C98D3313CC64EDB9AE15ABA3B543E48045990
        Validity
            Not Before: Oct 19 10:15:54 2025 GMT
            Not After : Oct 26 10:15:54 2025 GMT
        Subject: CN=68f4ba5a-9d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3f:f1:ae:b0:01:2b:ac:e5:57:fa:a2:7a:ea:
                    66:35:8a:7e:49:ab:da:8d:e3:5e:3e:3f:15:c1:19:
                    b7:2e:45:0e:63:e2:b5:4a:2f:d8:12:e9:15:25:22:
                    b2:a9:77:31:ae:aa:b4:fb:fc:1a:db:f6:cc:be:eb:
                    02:17:04:dd:90:e7:26:b6:0f:54:c1:33:d1:04:63:
                    9b:d6:ab:1b:d9:cb:b8:31:d6:2a:3d:8f:ea:c2:f0:
                    1d:f3:4d:fd:2f:12:d1:15:2a:cc:39:c1:9b:cf:a2:
                    e6:84:95:82:b4:4f:24:30:dd:2c:00:44:26:83:7b:
                    3f:e5:cb:e2:c6:a3:1d:d1:ed:5d:cf:b5:18:1c:05:
                    92:9a:30:c8:4c:e9:0d:b3:a3:51:e3:66:b6:47:83:
                    b1:e7:02:1b:cc:b2:7f:7f:70:3a:df:4c:4b:17:1a:
                    d7:06:a1:4f:23:42:70:6f:62:bf:69:e9:14:1f:32:
                    8a:93:da:f4:cf:6f:65:ce:47:c1:04:4f:76:84:c8:
                    92:63:a4:7e:5d:38:dd:b7:8f:fa:e2:ee:10:ac:71:
                    7f:be:3b:1e:de:b4:66:b4:e4:80:96:53:21:14:64:
                    39:61:98:fa:cb:84:5c:26:45:a3:a5:09:2c:13:30:
                    69:c2:3e:be:52:62:01:b2:a3:8c:77:cb:d1:0f:c6:
                    0c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:91:BC:5E:00:E4:B6:B8:18:58:FA:EA:A0:76:CA:3F:79:2A:0E:56
            X509v3 Authority Key Identifier:
                keyid:15:3C:98:D3:31:3C:C6:4E:DB:9A:E1:5A:BA:3B:54:3E:48:04:59:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTyY0zE8xk7bmuFaujtUPkgEWZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:32:72:49:ac:3c:37:74:0e:55:f1:45:eb:ba:1d:41:50:12:
         75:18:ca:66:3c:2d:b2:5b:99:72:1f:03:a9:f7:64:71:94:66:
         a2:bf:3c:55:26:fc:96:c9:af:65:e8:5a:a3:a5:6f:01:98:3e:
         af:b7:f1:73:9d:0c:b0:9b:1e:c8:1d:16:be:fe:ec:ae:39:2a:
         42:1e:68:8b:52:f3:ef:0a:c9:be:4b:01:82:ca:c8:ca:4e:33:
         c1:68:0a:3b:07:7a:b2:05:f7:29:98:f3:ed:40:66:f8:39:e5:
         b3:22:2e:6d:08:92:f9:d0:8f:73:d1:e0:69:35:56:b0:c1:3c:
         37:0d:97:5a:41:7a:07:bf:b2:a3:43:31:74:c4:c8:77:85:10:
         39:a1:03:e4:f1:d8:54:3a:70:33:03:b7:41:34:3d:55:59:b7:
         c7:66:9f:bd:fb:3a:1a:0e:96:bd:b8:3c:6d:c4:62:82:8c:94:
         b0:a2:db:27:7a:78:a1:50:90:20:dc:ca:3a:f1:3d:d2:9a:84:
         51:e1:2f:56:3d:4c:71:56:bb:03:55:af:00:58:4e:7d:0d:ca:
         27:24:47:f9:f7:31:5e:6f:46:d3:f9:15:07:0f:d1:a8:28:ce:
         a7:4b:1f:74:b6:0b:6b:dc:0e:58:d1:64:09:08:ef:5c:d4:98:
         08:2f:a1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:42:50 2025 by rpki-client