Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.mft
File:                     FK0Vyz8rS_JJsKz0of_b9KUBMlw.mft (raw, json)
Hash identifier:          3OmZYnScOH/HDqwaD+RDN7E3ebpUlzhualkENut8A2U=
Subject key identifier:   29:23:0C:C9:70:EB:8E:ED:E4:BD:7D:C6:CE:52:15:1A:6D:80:06:9E
Authority key identifier: 14:AD:15:CB:3F:2B:4B:F2:49:B0:AC:F4:A1:FF:DB:F4:A5:01:32:5C
Certificate issuer:       /CN=A91BDB80/serialNumber=14AD15CB3F2B4BF249B0ACF4A1FFDBF4A501325C
Certificate serial:       01CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FK0Vyz8rS_JJsKz0of_b9KUBMlw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.mft
Manifest number:          01C9
Signing time:             Sat 23 Aug 2025 03:00:22 +0000
Manifest this update:     Sat 23 Aug 2025 03:00:22 +0000
Manifest next update:     Sat 30 Aug 2025 03:00:22 +0000
Files and hashes:         1: FK0Vyz8rS_JJsKz0of_b9KUBMlw.crl (hash: uHaP/KoYYsQtCa+6WJIYoqhQknYiygR/c3CUc8KfJbo=)
                          2: AD633F28C2C611ED86556036C4F9AE02.roa (hash: MS7NWq0UAnEQeKvAZaw7UobWiB8w/tScY/6YvlxdzAc=)
                          3: ACA62AC8C2C611ED86556036C4F9AE02.roa (hash: 75H6iOtyKg/g21bWinoaWQqrg0ybarH3XmE2m+ZDXWE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.crl
                          rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FK0Vyz8rS_JJsKz0of_b9KUBMlw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463 (0x1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB80, serialNumber=14AD15CB3F2B4BF249B0ACF4A1FFDBF4A501325C
        Validity
            Not Before: Aug 23 03:00:22 2025 GMT
            Not After : Aug 30 03:00:22 2025 GMT
        Subject: CN=68a92ec6-5291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:23:df:52:0c:8a:74:a3:5b:cc:f2:91:88:20:
                    2f:9a:a6:35:41:46:a2:64:ff:08:f1:c0:76:a3:8c:
                    06:1d:57:a8:a8:be:a4:88:40:b1:b6:22:9e:9c:2f:
                    ce:d3:30:32:c1:15:b1:20:35:23:a9:22:05:2c:54:
                    a0:3f:eb:42:67:10:56:ca:e5:28:b8:fa:59:a8:5b:
                    aa:a5:83:01:3e:50:fc:25:d7:1f:8f:7f:e7:0e:2c:
                    b1:fc:c0:20:88:56:4b:6f:e8:8d:15:63:81:34:53:
                    97:dd:69:78:de:6b:83:32:ff:e1:75:34:03:87:b6:
                    d9:85:6a:2f:b3:83:6d:2b:21:cc:71:31:19:ac:95:
                    87:9e:8b:c2:28:76:ad:0d:90:a7:99:05:20:1d:86:
                    cf:ee:13:7c:79:df:8d:81:a9:c3:86:ea:d3:97:d4:
                    8c:4d:34:75:64:4f:eb:38:52:57:7c:98:d2:65:39:
                    6b:de:16:69:46:f4:63:90:9d:c4:3f:eb:5a:73:84:
                    68:94:f6:5c:5d:c5:cd:c6:b6:04:73:16:8c:0c:2d:
                    9f:38:fe:48:0f:93:d4:95:da:07:8e:bf:e8:f4:18:
                    d8:a2:ba:dd:8b:d4:a6:37:0b:7d:3d:a7:aa:f5:1a:
                    94:55:ad:00:64:41:19:65:8e:4f:7d:14:b7:db:40:
                    fd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:23:0C:C9:70:EB:8E:ED:E4:BD:7D:C6:CE:52:15:1A:6D:80:06:9E
            X509v3 Authority Key Identifier:
                keyid:14:AD:15:CB:3F:2B:4B:F2:49:B0:AC:F4:A1:FF:DB:F4:A5:01:32:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FK0Vyz8rS_JJsKz0of_b9KUBMlw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:88:d7:2a:e0:f5:63:25:96:ec:1a:5d:96:06:df:14:64:07:
         ba:74:c1:8c:87:63:6b:b7:ec:82:16:54:af:71:38:df:96:e1:
         2c:59:1b:ab:58:3b:52:88:05:98:8c:ff:f3:ec:c1:5f:a9:4e:
         f4:9d:ea:c2:d2:76:a2:98:89:9a:86:2e:02:12:b2:59:2e:0b:
         a1:fe:5f:c9:75:d9:74:cf:11:9f:81:eb:07:8e:b3:b2:b8:a1:
         8c:43:9d:7c:61:5b:36:a5:98:5d:7b:73:59:d4:30:a3:49:35:
         31:16:cf:0b:37:33:82:60:aa:68:44:c7:88:c7:95:8c:52:e2:
         bc:68:8d:94:9f:24:26:70:f4:7e:2c:22:ba:12:64:2f:25:dd:
         19:41:be:b5:e5:3b:3f:ce:1d:71:d7:58:d7:28:e4:df:c9:3f:
         9d:fd:bc:f5:2e:94:78:f7:00:be:45:77:45:28:71:f0:00:fe:
         2f:06:e7:6c:9b:3d:0c:2e:30:8a:42:1e:ba:2e:c9:fd:5c:20:
         51:3a:7a:6b:0e:39:8b:40:23:90:99:2f:47:52:b3:f7:1b:dc:
         c9:3f:9b:6f:79:24:57:48:75:81:fa:39:f0:7d:b9:55:60:cb:
         51:07:94:07:a0:fb:f3:0d:69:9f:4a:f1:08:26:fe:22:8a:a6:
         e5:87:75:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:09:17 2025 by rpki-client