Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft
File:                     fysutbj095VolfExLY3MQiOcmmI.mft (raw, json)
Hash identifier:          A1rS2Ircb/RlBpvfXePDUKtFsX/FJJfqAmgcpFxhwXQ=
Subject key identifier:   A7:D8:9E:25:8C:83:F1:9D:68:C7:25:1D:9D:5B:CD:72:54:4D:71:13
Authority key identifier: 7F:2B:2E:B5:B8:F4:F7:95:68:95:F1:31:2D:8D:CC:42:23:9C:9A:62
Certificate issuer:       /CN=A91A0D57/serialNumber=7F2B2EB5B8F4F7956895F1312D8DCC42239C9A62
Certificate serial:       0E70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft
Manifest number:          0E62
Signing time:             Sat 18 Oct 2025 18:23:49 +0000
Manifest this update:     Sat 18 Oct 2025 18:23:48 +0000
Manifest next update:     Sat 25 Oct 2025 18:23:48 +0000
Files and hashes:         1: fysutbj095VolfExLY3MQiOcmmI.crl (hash: /O6jBqMiGbXaXagnTmSGpCLYHOWuB8gobDiR6IE7r1k=)
                          2: A43B3718ABC111E9A200115CC4F9AE02.roa (hash: H3PZR2Ocqd5DrHweNG98HWtY6eO+2MOa7m6IWNzWQmk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.crl
                          rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:23:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3696 (0xe70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0D57, serialNumber=7F2B2EB5B8F4F7956895F1312D8DCC42239C9A62
        Validity
            Not Before: Oct 18 18:23:48 2025 GMT
            Not After : Oct 25 18:23:48 2025 GMT
        Subject: CN=68f3db34-6a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:67:39:85:a5:0d:52:59:73:61:22:d0:68:19:
                    49:90:b3:3b:1a:73:8e:93:f8:f3:4b:07:7a:ad:96:
                    6d:05:00:01:c6:be:74:4b:e2:11:5e:36:b4:ce:5b:
                    98:c2:1b:51:ba:68:36:bb:0d:b7:c0:55:ae:01:1c:
                    23:e8:32:b8:42:45:9f:2d:9d:f5:da:50:b4:fa:63:
                    a7:10:59:a6:01:1b:dd:bc:90:b4:30:5a:4a:5e:b0:
                    11:db:0f:a2:8e:e3:af:b9:13:ed:ff:48:7c:eb:3f:
                    f2:f1:13:97:c6:3c:d1:8d:3e:a8:b6:48:23:cf:d3:
                    23:84:39:ec:10:6f:61:d4:70:1c:72:26:92:e1:db:
                    de:22:4c:7e:9b:69:b1:90:a5:2e:c0:78:ff:6c:af:
                    11:2f:c1:0f:7d:f0:53:33:ba:f7:02:c0:17:70:df:
                    ee:bd:52:36:fc:88:91:81:3d:f7:e5:68:05:1a:b2:
                    a8:81:73:11:71:50:6d:49:25:63:9a:da:71:82:36:
                    43:3e:35:3e:d9:3e:3a:f7:b3:a1:6d:9c:72:08:32:
                    a9:39:2e:00:c3:df:9e:f5:ef:03:13:ac:32:21:fb:
                    99:0f:8c:94:b6:e2:c0:60:c6:e3:3c:a1:7b:c4:2c:
                    c2:84:51:3f:59:fb:00:0c:8c:f3:42:36:67:60:c1:
                    69:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D8:9E:25:8C:83:F1:9D:68:C7:25:1D:9D:5B:CD:72:54:4D:71:13
            X509v3 Authority Key Identifier:
                keyid:7F:2B:2E:B5:B8:F4:F7:95:68:95:F1:31:2D:8D:CC:42:23:9C:9A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:7a:9d:7a:ab:48:84:c9:89:8a:61:b9:1d:af:e7:95:99:5f:
         5a:0e:cd:4a:eb:cc:2b:b4:53:81:c5:cb:05:30:9b:5c:62:bf:
         91:cf:24:bb:37:09:88:5f:e3:c5:66:33:76:c0:8d:6a:2a:90:
         ce:66:f1:ee:a1:3a:0c:ac:5a:1e:2d:88:07:e0:dd:7a:f1:f8:
         58:4e:01:3e:79:09:70:dd:84:cb:0d:45:c5:2f:c4:9c:4c:77:
         27:3a:78:07:8a:cf:e5:a4:cb:86:6d:0e:a6:de:0a:fd:a2:a3:
         7d:a2:7c:3f:57:51:4a:d8:95:59:fc:32:8c:ae:b4:09:ab:f0:
         b7:80:8a:1c:43:22:4a:5b:42:02:d5:e8:00:be:77:2e:da:54:
         0d:df:1d:f8:0d:5f:71:bb:6b:fb:f5:15:f2:0e:9e:ac:61:a7:
         b7:94:2c:e9:1f:b4:39:64:eb:80:b1:49:4f:6f:94:c9:e6:4c:
         2d:cf:a0:b4:2d:2b:76:69:e5:2a:07:55:82:0f:63:7a:62:2e:
         66:4d:5e:72:25:1c:b6:bd:68:e3:f2:3b:3e:51:52:1a:e7:02:
         e4:3d:44:b6:bb:ba:00:32:bc:e9:e7:76:d5:29:0d:03:98:c5:
         ec:ae:27:e8:78:ad:2c:fe:e4:a3:0d:10:50:51:03:e0:07:00:
         f4:6a:17:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:08:23 2025 by rpki-client