Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
File:                     FggPXxr0qlYST_cZXRPoW5OllSE.mft (raw, json)
Hash identifier:          e1hte7oJZ+UL+qfNBc/liupcfrZ/5VZMzSRE8PBv2UI=
Subject key identifier:   27:3F:F1:16:17:4C:30:E4:FE:1D:23:FD:50:3D:F9:10:55:54:61:F3
Authority key identifier: 16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21
Certificate issuer:       /CN=A9193267/serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521
Certificate serial:       0221
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
Manifest number:          021D
Signing time:             Sun 19 Oct 2025 04:22:23 +0000
Manifest this update:     Sun 19 Oct 2025 04:22:23 +0000
Manifest next update:     Sun 26 Oct 2025 04:22:23 +0000
Files and hashes:         1: FggPXxr0qlYST_cZXRPoW5OllSE.crl (hash: Wqowzr2hoy3OpNNpe0NuhMoBF2hcM8VVl1G+yUDK8SQ=)
                          2: F29D0E026EE311ED94338E61C4F9AE02.roa (hash: 33mYAJEejTIdphmOfEnKCIbd2zZ81lml8aEGejVT4Nk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.crl
                          rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193267, serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521
        Validity
            Not Before: Oct 19 04:22:23 2025 GMT
            Not After : Oct 26 04:22:23 2025 GMT
        Subject: CN=68f4677f-f4c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:6e:7b:31:11:be:2c:bb:ab:e0:63:fa:ce:
                    5b:fb:84:7b:7e:19:30:99:40:2d:b4:38:e3:a7:f7:
                    b9:cf:43:49:55:31:51:1a:36:bf:03:7a:b6:65:77:
                    af:cf:7c:92:d6:7a:27:0f:70:6d:90:5a:53:c3:0f:
                    6a:33:71:1b:64:2e:7b:f2:fe:0b:53:ae:e5:a6:df:
                    d0:2c:59:ff:6a:bd:a6:20:8e:3f:b6:c7:86:ae:c6:
                    77:86:b1:3c:8b:7a:e6:41:c1:2e:36:df:d4:fa:6e:
                    82:5f:33:8c:b1:ab:36:ed:89:a5:0d:48:69:db:97:
                    c8:30:ad:1c:76:25:1b:bf:79:88:09:88:2b:a6:31:
                    6e:2b:42:42:0d:5c:a3:74:db:e3:e1:fe:18:6f:86:
                    0d:6a:57:04:97:ec:ff:19:28:25:90:47:e7:cc:62:
                    18:fe:66:74:4c:33:4a:71:b6:f5:d0:fe:44:28:be:
                    f7:09:9e:99:a7:d4:6c:a7:3c:a1:6a:5b:21:73:c5:
                    15:62:40:b8:4d:c7:eb:77:3a:7e:7e:a0:20:52:69:
                    5c:20:44:fb:7b:b4:00:ef:15:ce:00:c5:6f:5a:e3:
                    18:14:00:8c:a5:73:c6:22:f1:ea:ec:1d:c8:32:e7:
                    b6:d3:8e:c1:9a:08:6b:da:60:64:c6:37:5e:76:3c:
                    e2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3F:F1:16:17:4C:30:E4:FE:1D:23:FD:50:3D:F9:10:55:54:61:F3
            X509v3 Authority Key Identifier:
                keyid:16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:40:37:b8:81:5b:74:94:b4:4c:59:ed:2b:94:50:91:c1:43:
         db:da:8f:08:e3:15:97:27:c5:7e:af:51:cd:cc:d8:79:9c:c3:
         d6:1d:93:0f:10:f5:ae:cd:da:c9:71:58:32:3b:58:c2:4e:ab:
         6f:65:37:1a:e7:2e:fa:74:41:0c:d2:64:52:d4:c9:52:71:b7:
         c9:bf:74:72:9e:48:f5:ef:3b:5f:b2:c0:14:15:e0:d8:48:99:
         e1:ac:9b:f8:74:52:ea:4e:76:33:d5:47:59:00:2f:19:d6:c2:
         a4:f0:ae:27:cf:0f:dd:0e:d8:15:60:ff:6b:bd:18:00:f2:7a:
         3f:f6:cc:4c:83:b0:f2:0f:66:fa:a3:b3:66:22:80:05:44:de:
         fb:9f:ce:33:cf:54:f6:86:8e:c7:3e:e4:7c:56:7c:3b:d8:9d:
         ee:ef:77:d8:8a:b2:19:0f:a1:24:0c:f8:65:59:31:c9:bf:78:
         85:a1:f9:e6:db:29:9b:bd:b4:46:8c:41:85:8c:d3:fd:de:ed:
         ab:e6:b8:6a:15:a3:1f:d2:08:68:fe:85:25:04:9c:04:49:35:
         46:41:0d:6d:e5:64:11:95:a7:75:c3:02:cd:6c:dc:51:a2:d4:
         d7:be:12:62:91:fc:5a:5e:f5:71:78:ff:ed:0b:44:28:8e:00:
         24:5f:f9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:42:55 2025 by rpki-client