Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
File:                     fuDGoot1n3LV3JpYlQOLurlKhhQ.mft (raw, json)
Hash identifier:          1owADKOKu48Ux8bilycO2i5Qa38GivfME7/sx+cu3XA=
Subject key identifier:   38:5D:32:72:36:A2:9B:6F:C6:98:EA:62:41:E8:E8:0B:4D:81:EE:91
Authority key identifier: 7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14
Certificate issuer:       /CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
Certificate serial:       0CE5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
Manifest number:          0CC7
Signing time:             Mon 20 Oct 2025 18:44:39 +0000
Manifest this update:     Mon 20 Oct 2025 18:44:38 +0000
Manifest next update:     Mon 27 Oct 2025 18:44:38 +0000
Files and hashes:         1: fuDGoot1n3LV3JpYlQOLurlKhhQ.crl (hash: hcgyLn7PEW/Kk5rZ+UhvXCRUDD0rUh3BdyRQ5Wvzt7Q=)
                          2: 85521A14F2B911ECB45D2B31C4F9AE02.roa (hash: HIjKO7+O+xO4OJIX/SiiO1R/+mZGDdIFJvolSoIaESM=)
                          3: C434BE5682EC11EAB62A4C48C4F9AE02.roa (hash: o8NCxqq4p9ZsLjI+qVRvi9tHW9nOHmjBRARXIkBx7/E=)
                          4: C3A5D7A482EC11EAB62A4C48C4F9AE02.roa (hash: 0V1hKLm+r4dSC+e7G/qlJanKA86/g6SLREXYPfiyVTo=)
                          5: 6E2937E456EB11EA9025542FC4F9AE02.roa (hash: VEiVACuoAH55v33Ux5UO5cLk1TfJhkMWYIwJCgym6L0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl
                          rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 18:44:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3301 (0xce5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AF08, serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
        Validity
            Not Before: Oct 20 18:44:38 2025 GMT
            Not After : Oct 27 18:44:38 2025 GMT
        Subject: CN=68f68317-6a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:66:f7:25:9b:0b:1b:58:d9:59:52:b8:93:02:
                    c5:bc:61:0d:c9:8a:67:8c:25:f1:2b:f5:1b:44:ad:
                    f5:fc:3b:db:85:48:84:d8:e6:a0:99:23:ef:b3:b7:
                    8f:50:67:7c:c3:a7:7b:a6:48:56:ed:55:fc:c1:fb:
                    22:8c:f9:1c:f3:0f:6d:67:1c:34:fd:5a:23:49:b0:
                    05:5c:ab:d4:1b:09:7e:d6:56:28:f2:17:27:54:45:
                    61:c5:88:9b:cb:3f:37:d7:fc:3c:86:87:6c:60:71:
                    5d:18:77:d0:3e:64:8e:0d:65:0d:c7:a4:85:d4:a7:
                    71:9b:88:70:08:b3:47:b1:48:e1:6e:f9:9a:8c:b3:
                    99:2b:c2:99:1e:82:37:67:c9:0a:02:7c:12:e8:1d:
                    d9:32:c3:79:77:8e:1d:39:23:5c:07:83:14:56:e8:
                    d1:9e:e4:6b:3e:23:57:60:c0:78:01:73:eb:ea:63:
                    21:29:3e:ce:92:c1:72:c4:45:59:25:bc:b1:2f:c5:
                    31:14:75:a7:99:89:3c:e6:df:70:53:85:e6:82:31:
                    15:c9:f4:db:81:af:64:ae:58:93:85:9d:a8:c7:f4:
                    03:f5:b4:3b:17:5e:75:f7:3f:d8:fb:01:3e:e0:b0:
                    d8:75:74:cc:cd:5f:4b:e4:c4:70:7f:37:90:1e:9c:
                    6a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5D:32:72:36:A2:9B:6F:C6:98:EA:62:41:E8:E8:0B:4D:81:EE:91
            X509v3 Authority Key Identifier:
                keyid:7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b4:f3:a0:5f:e8:e6:9b:84:16:b6:7a:2f:e9:c7:ce:f0:60:
         74:e8:b6:03:24:b5:b0:35:a7:51:1a:21:a7:47:d8:56:fc:e2:
         e6:25:c3:e3:00:73:21:3a:a3:f3:45:ec:af:b3:ed:10:ee:e9:
         93:9e:2c:88:35:ba:d2:0d:17:3d:b2:b8:09:1a:0b:04:35:23:
         e3:ec:73:9c:d1:ce:c2:3b:0b:0b:21:98:f5:55:09:ec:5b:49:
         d1:5f:95:59:3a:b2:d2:9f:79:c1:5e:20:1c:ab:1c:ff:6d:6a:
         48:c7:8a:c7:f2:42:e3:ab:25:c6:bf:45:1b:87:7e:08:b0:bc:
         39:51:eb:24:36:79:56:ae:8c:88:18:92:e5:22:94:98:41:34:
         38:64:7b:2f:4f:ec:d5:14:e2:a4:2e:41:99:3b:08:c5:b7:08:
         5f:f8:f5:7b:69:d9:cb:75:29:e5:89:41:c4:aa:a5:d7:85:07:
         d2:c8:74:ad:8a:51:07:fe:09:c4:30:db:bc:f3:57:01:2a:16:
         c7:6e:3c:a0:04:57:6e:9a:21:72:36:2c:5a:1b:fd:37:c5:38:
         25:42:63:9d:ac:43:e9:d9:e9:3d:34:4f:cc:aa:cf:6d:35:0e:
         a1:25:4f:7b:dc:7d:91:1f:33:d6:5a:71:34:db:4f:66:c7:3f:
         23:41:d5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:02:48 2025 by rpki-client