Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft
File:                     fPkomAMwIeA7O5PA7riCE8f7XsU.mft (raw, json)
Hash identifier:          tN1MdmbvJGU1UFPeZq2ixihtqepniILCAeuBNbSXRQw=
Subject key identifier:   44:A1:8C:BD:49:0E:67:A9:F5:8D:96:87:F4:74:81:51:ED:B1:41:B4
Authority key identifier: 7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5
Certificate issuer:       /CN=A91BDA06/serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5
Certificate serial:       0F81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft
Manifest number:          0F7A
Signing time:             Sat 18 Oct 2025 18:09:41 +0000
Manifest this update:     Sat 18 Oct 2025 18:09:41 +0000
Manifest next update:     Sat 25 Oct 2025 18:09:41 +0000
Files and hashes:         1: fPkomAMwIeA7O5PA7riCE8f7XsU.crl (hash: Gv54sHuUkpou37uEhJ/FNQWOcqoYZ7tJBkvR646nCPU=)
                          2: DCE5E9CA713611E9A71D3311C4F9AE02.roa (hash: yUcmYZ18wT5AwWICmpq0ZcagYP+uu8UmtnyixruA6kM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl
                          rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3969 (0xf81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDA06, serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5
        Validity
            Not Before: Oct 18 18:09:41 2025 GMT
            Not After : Oct 25 18:09:41 2025 GMT
        Subject: CN=68f3d7e5-ca35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:0d:30:5e:6b:5d:e1:af:0a:9e:dd:7d:06:
                    40:42:69:43:14:a9:da:98:80:2f:10:0a:1f:7e:4e:
                    d7:e5:41:8a:a0:89:b9:ef:2a:ef:96:b0:a7:38:31:
                    15:7b:d9:7d:9b:ea:d9:b2:75:c6:7d:f6:2d:e0:ab:
                    0e:f8:36:92:74:81:97:06:df:13:5c:82:16:2e:f6:
                    2b:e7:cc:68:a8:72:78:00:61:1d:16:af:de:4a:f3:
                    88:22:15:1f:a8:b4:49:e8:0b:9f:3a:cb:c5:2c:cc:
                    97:0a:1b:f9:13:34:3e:bb:b6:a3:a2:74:2f:f6:96:
                    57:06:9c:26:92:d4:e7:96:2f:98:5b:bc:ee:02:68:
                    e8:07:b4:4a:67:65:08:11:a2:d4:2c:7d:a6:24:f0:
                    bd:aa:4a:9c:eb:92:b0:9f:50:29:a1:f3:ef:a0:a9:
                    10:f5:b8:cc:93:77:33:01:6b:b5:2b:ab:50:fa:9d:
                    a6:a0:ec:e1:4b:0c:61:17:1f:41:4e:20:df:c3:28:
                    47:04:10:09:a9:e1:70:ed:79:dd:6b:93:4b:ff:a0:
                    f2:1b:da:a7:dd:8d:a3:e2:8c:e2:7a:54:7b:f5:ee:
                    47:40:2f:93:d7:db:d3:1b:d9:81:6e:77:54:89:00:
                    ea:eb:6e:f6:88:c8:f8:68:b1:1d:63:bc:1e:ff:f4:
                    d6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A1:8C:BD:49:0E:67:A9:F5:8D:96:87:F4:74:81:51:ED:B1:41:B4
            X509v3 Authority Key Identifier:
                keyid:7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e4:07:02:1e:cf:11:57:1b:e3:98:45:ab:6a:05:bf:33:77:
         33:8a:8a:67:be:37:57:08:16:05:46:ef:80:1a:d9:f8:ba:a2:
         50:7e:30:52:a6:e1:af:9c:a8:77:ef:e1:7c:5d:f1:b0:f0:fc:
         26:f8:05:af:b2:57:e5:b8:ce:c1:95:da:70:1a:74:47:57:04:
         dd:40:5d:a7:98:64:d8:ec:6d:05:3d:f2:f1:04:f3:09:e5:de:
         2e:08:35:5f:a8:1d:25:94:46:1f:df:5d:dc:6d:e0:a6:6a:42:
         6d:bc:85:b7:b7:67:00:e3:ba:d1:f3:bd:95:2f:25:a8:46:dd:
         82:c9:1d:7c:31:88:85:8b:d0:de:26:7c:ee:fd:37:e7:0c:62:
         63:b6:69:0c:f9:66:76:19:c3:02:89:c9:df:22:39:94:f9:79:
         04:27:2c:93:2a:9e:6e:3b:9f:fc:17:b8:7e:13:43:db:43:81:
         9a:6e:2d:f5:f4:a9:34:03:fc:8d:9b:b0:64:81:c4:0f:00:a0:
         24:29:3e:f6:be:ea:57:ea:50:a3:fe:bc:25:c0:77:b3:c8:6c:
         c7:26:61:30:e7:c2:d6:99:64:bf:8c:b5:90:3a:03:3b:94:f1:
         96:ea:93:20:4d:3a:67:a5:40:29:c8:e5:a1:ca:a1:d8:39:53:
         ef:9f:dc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:50:02 2025 by rpki-client