Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
File:                     fuDGoot1n3LV3JpYlQOLurlKhhQ.mft (raw, json)
Hash identifier:          arfYxfnP9A/ZX0+qK9Hl5a499PATfJjGar+LpWeOYHU=
Subject key identifier:   30:F6:4B:05:BA:99:92:22:E5:AB:90:9C:79:B7:55:B7:EC:94:C8:AF
Authority key identifier: 7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14
Certificate issuer:       /CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
Certificate serial:       0CC7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
Manifest number:          0CA9
Signing time:             Fri 22 Aug 2025 18:19:14 +0000
Manifest this update:     Fri 22 Aug 2025 18:19:13 +0000
Manifest next update:     Fri 29 Aug 2025 18:19:13 +0000
Files and hashes:         1: fuDGoot1n3LV3JpYlQOLurlKhhQ.crl (hash: uz45ok7clGG7lmp7zFaeqPh6GAHBXouVO02xVN6ftmk=)
                          2: 85521A14F2B911ECB45D2B31C4F9AE02.roa (hash: HIjKO7+O+xO4OJIX/SiiO1R/+mZGDdIFJvolSoIaESM=)
                          3: C434BE5682EC11EAB62A4C48C4F9AE02.roa (hash: o8NCxqq4p9ZsLjI+qVRvi9tHW9nOHmjBRARXIkBx7/E=)
                          4: C3A5D7A482EC11EAB62A4C48C4F9AE02.roa (hash: 0V1hKLm+r4dSC+e7G/qlJanKA86/g6SLREXYPfiyVTo=)
                          5: 6E2937E456EB11EA9025542FC4F9AE02.roa (hash: VEiVACuoAH55v33Ux5UO5cLk1TfJhkMWYIwJCgym6L0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl
                          rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 18:19:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3271 (0xcc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AF08, serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614
        Validity
            Not Before: Aug 22 18:19:13 2025 GMT
            Not After : Aug 29 18:19:13 2025 GMT
        Subject: CN=68a8b4a2-d653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5a:42:c9:2e:58:38:6a:93:45:45:64:ba:40:
                    d9:27:9e:15:a8:34:3b:50:ae:e1:38:42:1d:a5:dc:
                    90:1a:08:a6:fd:df:cf:7f:1d:43:7a:99:86:15:af:
                    75:b3:c0:72:7f:a1:43:b8:cf:87:e7:20:5a:12:87:
                    b5:2b:16:cd:ae:8c:86:ce:75:17:8e:dc:97:42:05:
                    6b:49:e7:3c:14:4a:5c:25:b5:c6:32:e0:7f:10:f4:
                    5d:1c:d4:21:f7:f9:7b:37:1b:3a:c0:16:08:4c:ba:
                    d0:12:82:7d:b8:da:40:94:a3:70:1b:2a:95:86:97:
                    fe:7f:99:9f:7e:78:5d:99:bb:03:5c:95:ae:7e:c7:
                    81:2c:12:03:17:80:48:65:93:91:a8:33:1f:44:ff:
                    8d:b4:07:35:7f:65:de:63:27:9e:83:f0:d8:8b:53:
                    d8:1a:ea:a0:45:55:aa:7a:b0:64:20:1a:5b:d7:70:
                    b1:02:4e:10:04:b1:38:42:d8:ef:dd:d4:01:1b:b6:
                    b9:9a:77:e3:95:86:e3:16:62:33:97:54:fc:28:4f:
                    5c:f9:c6:d8:e2:3b:3d:93:df:e5:f3:99:d6:5a:84:
                    ca:f0:4c:52:86:83:3a:d1:14:24:4d:ea:fa:71:3e:
                    ee:98:12:8c:69:d0:63:75:32:93:db:b5:90:9d:92:
                    ec:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F6:4B:05:BA:99:92:22:E5:AB:90:9C:79:B7:55:B7:EC:94:C8:AF
            X509v3 Authority Key Identifier:
                keyid:7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:2a:59:cb:e4:34:76:74:ed:4d:85:cf:80:00:fa:09:df:ce:
         da:b3:f3:93:a1:d9:a0:c2:4c:96:b1:c0:d4:a1:75:31:39:01:
         65:71:0a:d2:19:12:7f:24:4f:c1:0f:a2:f0:ba:78:24:22:3f:
         f7:7c:af:73:d4:3f:17:e3:07:50:8f:96:54:8d:bb:79:d4:8e:
         a4:30:52:fc:27:ae:7a:86:43:76:2a:10:db:14:d4:52:3f:b9:
         1d:fe:b2:9f:97:43:54:33:b7:75:f8:0a:38:87:5b:c2:6c:f1:
         9d:65:b6:71:8f:e4:6e:db:e9:5c:7e:d9:d9:e8:09:e7:0d:41:
         74:03:f7:79:3c:eb:e1:c2:23:fe:43:06:88:d2:65:a9:34:ef:
         ba:d2:8a:c0:03:ae:b1:c4:7c:1a:03:72:1d:86:54:43:71:8b:
         f7:f3:1c:3c:8b:b1:cb:62:81:5a:05:c3:b6:1e:e3:a0:51:df:
         8e:99:29:6c:5e:a7:9d:23:67:dd:61:b3:31:90:3a:f7:13:1e:
         68:76:41:cd:0b:55:29:b2:24:5d:c7:1c:03:d2:bc:8c:ed:29:
         ca:9b:a4:5b:38:99:6b:df:c0:7f:3d:1c:e7:ed:48:ce:6d:0c:
         b4:d9:0b:93:4a:9d:09:0e:35:6f:bb:79:a8:36:c6:44:4e:71:
         72:4f:82:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:47:46 2025 by rpki-client