Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
File:                     f7FuQPo8p3_OJMTJpGRWg8OeihE.mft (raw, json)
Hash identifier:          ppc1P62Z2nP/CUDFRJzGutl6npMNvwWPfjP8j5rkbhk=
Subject key identifier:   36:CF:2E:03:27:F6:E6:64:BB:24:A1:6F:04:F9:F2:CA:B8:CC:82:EE
Authority key identifier: 7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11
Certificate issuer:       /CN=A91AF83D/serialNumber=7FB16E40FA3CA77FCE24C4C9A4645683C39E8A11
Certificate serial:       01C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
Manifest number:          01C6
Signing time:             Sat 23 Aug 2025 03:02:13 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:12 +0000
Manifest next update:     Sat 30 Aug 2025 03:02:12 +0000
Files and hashes:         1: f7FuQPo8p3_OJMTJpGRWg8OeihE.crl (hash: Mbz9WujHjjIcDjXH7k9MhHK2EWoaIAmrDD+Fbi7uySw=)
                          2: AB3814CEC85411EDAE5D9322C4F9AE02.roa (hash: hP+l6tFfGRtL/s3PVotLK1C45PriZjz7pB5mLcbuaqE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.crl
                          rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 457 (0x1c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF83D, serialNumber=7FB16E40FA3CA77FCE24C4C9A4645683C39E8A11
        Validity
            Not Before: Aug 23 03:02:12 2025 GMT
            Not After : Aug 30 03:02:12 2025 GMT
        Subject: CN=68a92f34-c176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:93:7f:f4:7e:92:1d:d6:8a:f2:17:4e:0c:e8:
                    47:94:d5:80:a3:0a:3f:7c:3c:3c:36:1b:2e:4d:fa:
                    e3:ee:8f:16:92:94:e2:92:18:97:74:af:f3:ae:6a:
                    87:a3:35:18:c6:66:af:4f:f3:54:e6:75:ea:e2:08:
                    27:65:46:9f:71:59:8d:d1:38:8c:a1:2e:00:5d:38:
                    7a:94:f0:3b:8c:8c:eb:6a:81:42:1a:f6:cc:9e:3f:
                    5b:b4:7f:76:9d:53:85:31:34:69:59:40:69:16:9b:
                    ae:75:88:8c:d4:55:d4:eb:b1:7c:22:3d:cf:44:68:
                    e6:99:50:bd:05:45:06:25:9a:70:23:db:11:42:59:
                    8f:85:c2:77:f4:36:a9:ea:ac:ae:42:ec:83:05:f1:
                    2c:83:a5:66:5c:af:a4:fe:9c:73:79:5e:75:6a:00:
                    af:82:64:a2:5e:2e:c1:fa:7f:ec:c3:45:15:64:5b:
                    7c:e9:d4:bf:11:be:21:fa:5f:4d:d0:ab:7b:54:74:
                    30:62:4d:6b:eb:4b:15:6f:07:6c:00:a9:e1:31:47:
                    0d:1c:48:48:fb:90:c2:cb:fc:3f:79:a2:42:ab:ae:
                    fd:2e:53:00:93:b4:79:27:9f:e8:8c:71:40:9b:17:
                    24:99:78:87:f1:3f:b0:c3:68:26:b9:4c:35:4a:e8:
                    ac:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CF:2E:03:27:F6:E6:64:BB:24:A1:6F:04:F9:F2:CA:B8:CC:82:EE
            X509v3 Authority Key Identifier:
                keyid:7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:7e:e4:1a:97:22:11:50:de:14:52:c5:fa:a7:33:bc:24:5c:
         da:28:f9:16:31:1c:b2:ec:04:70:71:75:c1:ee:67:87:f7:95:
         08:b3:1a:d3:7a:cb:2b:33:66:8e:0e:71:24:df:a4:05:4f:83:
         63:fd:1e:b0:10:44:19:78:76:3f:ad:82:4d:c4:30:fe:5d:67:
         c1:24:73:16:70:d8:82:e0:0a:7c:53:f0:7c:a7:44:bf:8e:62:
         31:51:0c:67:d3:28:86:6d:22:78:a8:aa:b6:0c:c9:ef:3d:b9:
         95:d3:a7:fa:f9:0a:da:b1:62:c5:ac:9e:3c:69:04:6f:74:b8:
         a5:a9:9d:1f:4a:4b:a6:d7:7e:08:66:31:6e:6c:31:67:f4:c8:
         c0:07:9c:d7:91:4f:e1:9f:56:a0:b0:e3:47:9c:78:e4:1c:0d:
         e0:41:55:c0:b7:8c:96:26:6a:0a:c5:ba:e8:77:3b:3e:da:14:
         6d:a7:31:dd:4a:d4:5e:64:8e:3d:7e:52:48:63:f9:f5:ae:fc:
         fe:e5:d9:8a:a1:4c:ea:9f:1d:08:e9:87:48:66:1f:3c:74:20:
         4b:02:a4:ee:bc:97:d6:fe:53:a4:9e:1b:89:66:12:95:18:0b:
         c2:3c:a5:f1:40:43:3f:10:f4:79:d5:95:e2:20:83:21:48:a3:
         ee:68:15:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:54 2025 by rpki-client