Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft
File:                     fkTc6XLxPIDlNLLmhf4dKg12FRI.mft (raw, json)
Hash identifier:          oywm6IaZY9zvcyqMLsSBMmkOuCbJG3IgicCuhvXBW4U=
Subject key identifier:   40:A1:8C:93:24:5A:B6:4A:E9:47:C2:32:CE:38:2A:96:11:A3:62:CB
Authority key identifier: 7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12
Certificate issuer:       /CN=A917270F/serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512
Certificate serial:       02EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft
Manifest number:          02D0
Signing time:             Sat 23 Aug 2025 01:45:00 +0000
Manifest this update:     Sat 23 Aug 2025 01:45:00 +0000
Manifest next update:     Sat 30 Aug 2025 01:45:00 +0000
Files and hashes:         1: fkTc6XLxPIDlNLLmhf4dKg12FRI.crl (hash: lvDVqW/etMtii+Z8MFd0ap5WKhDxmLT2pb1VIUShY8I=)
                          2: D08FF4F0BB7111EFACA16B1DC4F9AE02.roa (hash: 8yMX2hTP3K05Xyvd555G2ig/V1hEQ+eTfzKML7MR+kI=)
                          3: A48E2B14A73B11EF9933C14AC4F9AE02.roa (hash: Pi9jvcspA1D49dJkl4PL8lZ8CXbTkLcOR5O9MkCQurg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl
                          rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:44:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 751 (0x2ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917270F, serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512
        Validity
            Not Before: Aug 23 01:45:00 2025 GMT
            Not After : Aug 30 01:45:00 2025 GMT
        Subject: CN=68a91d1c-5660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:42:20:3e:8c:e4:01:73:5c:e4:cf:61:c2:6a:
                    7e:71:34:2c:63:54:3a:8f:16:25:0b:f2:cb:e4:5a:
                    b7:5d:ab:db:38:1d:f8:0f:5f:a0:9b:4b:51:cf:13:
                    09:bc:63:f5:cd:73:73:ce:fb:9d:0c:34:fd:af:44:
                    50:56:c6:36:af:35:4d:75:9a:c5:0d:93:ef:55:5b:
                    41:7c:ec:8e:f5:f2:de:15:6e:21:87:45:90:ef:dd:
                    21:82:93:d8:e6:da:d7:86:58:d1:56:8d:e4:fe:87:
                    11:f9:16:3a:19:de:aa:89:a3:94:b4:b7:56:e9:30:
                    00:45:84:75:5f:e5:3c:58:91:a5:c3:7c:0c:39:46:
                    a9:01:76:de:d0:37:4b:69:29:c9:b9:07:3c:6e:d2:
                    86:e0:46:cc:70:64:1c:20:65:f3:f6:62:47:09:8d:
                    ec:67:e1:d1:7e:a9:be:38:f3:a6:40:fe:29:6e:95:
                    bc:ac:91:82:e7:c2:05:df:eb:80:0f:07:17:3e:31:
                    d1:98:17:ea:7c:db:82:a5:89:09:52:59:75:90:a5:
                    f6:a2:d6:24:0c:f9:91:39:ed:6a:a2:1e:31:94:5a:
                    4b:7e:02:7c:f5:a7:c7:da:b2:45:6e:a4:9f:87:ef:
                    68:45:0c:80:cc:94:14:f0:1b:98:59:d5:9f:0f:b8:
                    c1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A1:8C:93:24:5A:B6:4A:E9:47:C2:32:CE:38:2A:96:11:A3:62:CB
            X509v3 Authority Key Identifier:
                keyid:7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:8c:4f:30:3e:bb:6c:39:8e:9a:36:af:6f:53:3f:2b:fb:8f:
         54:18:bc:29:34:72:1d:6a:ab:89:89:b5:26:df:b6:8b:88:4f:
         ce:66:c3:f2:85:9c:6e:a0:94:d7:47:01:2d:e0:b0:28:a4:56:
         c0:8d:c1:52:af:a5:35:07:fe:ba:9c:c0:99:ad:2c:1a:e6:a3:
         9f:b5:19:5d:7d:95:20:a3:cf:9a:9c:b0:54:a5:c4:0c:96:9a:
         a9:08:01:52:8f:86:85:57:01:91:10:2f:a2:98:d3:1f:d1:ab:
         32:f4:fe:b7:cd:d3:2c:bc:b4:11:88:a3:9d:eb:d6:73:e5:08:
         bc:4e:a0:b7:fa:db:3a:3c:c7:da:e1:46:ad:bc:3d:98:af:31:
         66:58:cb:a2:21:33:84:db:b9:96:a4:4e:fa:2d:84:f7:f9:43:
         38:96:52:1d:5a:2e:86:4f:60:e4:07:3b:56:cd:03:75:0f:1b:
         29:5e:04:38:e4:d3:fc:ce:2a:c7:57:0c:60:8a:32:67:19:75:
         5f:95:1b:ce:71:bd:3d:31:1e:a9:78:43:55:f1:e9:c4:26:f0:
         2c:91:64:bb:7e:8b:be:c8:5e:ce:f3:a5:10:16:18:1d:45:23:
         2c:dc:55:a4:83:74:7a:c5:52:d4:db:15:a7:e8:36:1e:54:bf:
         41:e3:6b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:57:24 2025 by rpki-client