Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft
File:                     FTyY0zE8xk7bmuFaujtUPkgEWZA.mft (raw, json)
Hash identifier:          80bQ6dVrOmOOgjpiVWU1SksWVcfC6Rvi0J5nniN+TV4=
Subject key identifier:   AC:FD:03:15:14:51:69:11:A4:E9:B7:5F:41:81:83:A4:13:02:63:87
Authority key identifier: 15:3C:98:D3:31:3C:C6:4E:DB:9A:E1:5A:BA:3B:54:3E:48:04:59:90
Certificate issuer:       /CN=A9167FBA/serialNumber=153C98D3313CC64EDB9AE15ABA3B543E48045990
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTyY0zE8xk7bmuFaujtUPkgEWZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft
Manifest number:          52
Signing time:             Sat 23 Aug 2025 07:31:14 +0000
Manifest this update:     Sat 23 Aug 2025 07:31:13 +0000
Manifest next update:     Sat 30 Aug 2025 07:31:13 +0000
Files and hashes:         1: FTyY0zE8xk7bmuFaujtUPkgEWZA.crl (hash: KFB7FJigVvVHe0XqW2pFHQSR9fgXVMYXCAJFsSNI0cQ=)
                          2: F552E6BA05A111F082D17325C4F9AE02.roa (hash: IboM73984syJmuqfIfDKvmHL/HfnKXEhHqhYyaPXIGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.crl
                          rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTyY0zE8xk7bmuFaujtUPkgEWZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 07:31:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167FBA, serialNumber=153C98D3313CC64EDB9AE15ABA3B543E48045990
        Validity
            Not Before: Aug 23 07:31:13 2025 GMT
            Not After : Aug 30 07:31:13 2025 GMT
        Subject: CN=68a96e42-9a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8c:b5:fc:a4:0d:26:f1:86:46:b0:2c:18:60:
                    9e:14:d7:7f:2c:32:6e:2f:1d:66:9f:61:8d:01:b7:
                    27:03:99:6a:9f:31:69:4e:18:2d:e5:8e:2c:7b:3e:
                    09:aa:58:1a:8d:8e:2a:4b:32:2f:b1:27:97:3c:4f:
                    27:c5:96:50:48:f0:cf:32:bb:76:7c:4a:b8:cd:c3:
                    f8:6e:5e:cc:41:f6:eb:af:f4:64:66:8d:cb:eb:b2:
                    a2:63:cd:a8:b5:64:e9:48:0a:15:ac:5c:0e:25:aa:
                    a4:55:60:50:b7:4d:b7:7c:27:fd:96:21:f7:ed:84:
                    65:03:93:2a:d3:dc:fd:5b:2b:e4:26:f7:ad:52:f8:
                    d0:14:dd:b6:28:94:6d:65:87:0d:3b:99:9b:67:22:
                    ca:dc:6a:24:2c:75:94:cd:02:bc:ed:cd:07:9f:5d:
                    ee:01:cc:e2:dc:0b:7d:6c:43:cc:95:21:a1:66:06:
                    37:2c:50:bc:65:db:0a:fa:e3:ac:fe:67:a5:e4:37:
                    07:26:b3:87:e1:f8:89:41:eb:33:d5:56:6f:d4:46:
                    c0:8a:da:d9:a1:54:33:3c:b0:fc:4c:42:1f:07:3b:
                    0f:66:9a:61:2f:ea:a5:86:4e:21:0e:7b:e5:f7:39:
                    0d:52:81:e2:92:89:23:57:fa:d5:fe:d5:99:fb:12:
                    22:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FD:03:15:14:51:69:11:A4:E9:B7:5F:41:81:83:A4:13:02:63:87
            X509v3 Authority Key Identifier:
                keyid:15:3C:98:D3:31:3C:C6:4E:DB:9A:E1:5A:BA:3B:54:3E:48:04:59:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTyY0zE8xk7bmuFaujtUPkgEWZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ec:54:92:03:39:71:d3:d6:cd:64:6e:29:39:40:ef:b5:21:
         8b:54:c7:2d:76:c1:60:f4:b9:30:87:e5:64:c9:d9:9d:14:d6:
         31:0e:e3:ad:01:27:09:d6:07:da:c8:c4:f7:fa:53:96:90:cf:
         11:8a:1c:fd:4a:15:d2:34:cb:0a:8f:6e:3b:08:7a:01:23:4d:
         51:91:be:dd:a7:67:9d:e8:9e:4e:74:84:69:90:31:fd:7b:22:
         01:5b:34:c4:a8:4e:74:11:a4:e8:1c:1a:fc:15:bf:64:6b:c8:
         03:57:69:1f:a1:b5:be:47:4c:41:1e:ab:a5:e1:1c:db:65:35:
         f2:d4:bc:aa:ba:8a:35:48:c0:37:0a:98:7d:fc:e2:2a:3d:5d:
         9d:f4:ed:a2:ad:5c:e6:33:75:90:f0:ec:8d:29:40:21:24:11:
         69:49:f6:bd:8e:08:b3:c2:09:75:8c:9f:57:72:10:0a:97:4e:
         55:bb:99:e8:52:73:81:ef:2a:df:79:f5:c1:c2:6d:95:4a:b9:
         35:88:d1:25:7e:f5:cd:f9:ec:57:98:00:37:30:6f:6c:32:d6:
         a0:ae:ce:e1:21:8d:0d:c1:b0:96:a7:a9:e7:14:ca:f1:5c:93:
         e5:1f:fb:be:27:1d:c1:90:2d:88:63:99:f5:8b:ca:75:0f:33:
         af:7d:f2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:39:03 2025 by rpki-client