Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft
File:                     FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft (raw, json)
Hash identifier:          98QtY/ByyT+s8ZDgWuZ6H2GXBqrwZQVxt1npdKFFG9M=
Subject key identifier:   AA:F4:09:64:E2:90:E7:AE:69:6D:D4:60:60:00:E2:B2:29:83:33:18
Authority key identifier: 15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88
Certificate issuer:       /CN=A91A5EBA/serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788
Certificate serial:       E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft
Manifest number:          DE
Signing time:             Sat 23 Aug 2025 05:37:23 +0000
Manifest this update:     Sat 23 Aug 2025 05:37:22 +0000
Manifest next update:     Sat 30 Aug 2025 05:37:22 +0000
Files and hashes:         1: FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl (hash: uz3b+UVXafP8MmN3PbwHbXNJG0/7mIi3oCVAW2/LOSc=)
                          2: 80F32E7C2C5511EF83ECC535C4F9AE02.roa (hash: AqGZytLz79ZmCSne/bhw4dD+/PQ46qKOd6q10ehPEX0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl
                          rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:37:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5EBA, serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788
        Validity
            Not Before: Aug 23 05:37:22 2025 GMT
            Not After : Aug 30 05:37:22 2025 GMT
        Subject: CN=68a95393-999a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9d:2c:a6:66:c3:4e:ac:43:a2:20:2e:aa:b8:
                    d4:cf:92:3b:64:b0:99:97:73:07:89:c3:69:6a:45:
                    a1:b9:77:ab:24:5c:4b:52:17:a7:f2:ed:82:75:4b:
                    4f:fd:47:9e:06:f6:e8:8d:e0:76:7e:dc:99:5b:42:
                    16:d9:07:c1:83:26:2a:24:58:a6:31:1e:89:90:f6:
                    68:05:45:8b:7b:d1:cb:f9:60:4a:31:d1:f6:b3:1e:
                    9a:6d:70:b9:a3:6f:ae:fc:7b:ea:ba:73:de:2c:54:
                    a4:ad:1d:76:92:c5:3f:21:c4:0f:2e:73:d4:c1:bc:
                    6d:2d:19:b6:1e:1f:0f:07:25:28:2f:48:63:49:e5:
                    18:59:dc:a5:81:8a:f5:a5:b5:07:9b:10:86:16:f5:
                    1b:75:b8:e6:9d:9b:76:c1:31:00:60:2c:dd:04:a5:
                    39:c3:cc:0a:92:14:0c:07:13:7f:da:e3:d3:cc:d7:
                    a7:30:c7:c9:50:77:a4:66:7f:aa:a6:48:4c:0a:a6:
                    31:4b:c9:a2:49:bf:22:28:98:3d:af:66:b3:1b:c6:
                    93:c5:c1:b7:a5:ff:b4:89:17:0d:80:91:b2:1e:94:
                    e0:78:d3:2a:16:e1:11:b6:1c:44:4b:82:a7:33:3e:
                    0a:dd:6a:37:12:1f:51:2f:6b:16:f2:9c:b3:0f:1e:
                    6f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F4:09:64:E2:90:E7:AE:69:6D:D4:60:60:00:E2:B2:29:83:33:18
            X509v3 Authority Key Identifier:
                keyid:15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:7f:9a:b9:87:f6:1c:47:e5:3b:51:24:8f:24:07:e4:a0:a6:
         1e:ce:6a:7b:c0:fa:64:1d:ff:ac:df:34:8f:7e:e7:b5:19:94:
         a4:9e:54:ff:34:cc:06:bd:22:42:e4:d0:d8:e6:40:cb:0c:a3:
         d3:d6:b9:8f:fa:f0:19:48:55:b1:3e:90:0c:ea:32:97:8e:58:
         4a:3f:94:31:ab:67:61:74:fc:b6:6c:db:94:f1:2a:7e:88:17:
         00:2b:57:61:8c:68:dc:c8:11:cf:4f:bb:61:cf:53:11:7d:fb:
         e7:d0:46:36:b9:88:97:48:6b:96:ad:ac:ba:cb:b3:8d:00:17:
         82:89:24:c4:d5:56:bd:4a:ef:84:d3:25:61:d6:04:17:39:c9:
         4e:e9:29:28:c1:3a:55:f2:99:69:0e:ad:66:67:62:9e:26:ad:
         f2:8e:b4:7e:32:7d:13:fe:0a:77:59:59:14:54:7a:c9:64:b1:
         7d:52:1c:75:fa:57:d3:a0:58:61:35:0e:28:56:13:ff:68:b7:
         d2:79:aa:ab:59:d6:56:17:fc:5c:e8:a1:03:12:8c:87:8b:71:
         1e:2f:03:19:7f:be:ff:1b:de:ec:b4:83:fb:7b:68:dc:a2:e4:
         f2:12:27:13:71:4b:21:f9:67:05:49:92:36:14:f5:0e:dc:07:
         4a:34:11:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:33:31 2025 by rpki-client