Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
File:                     FgxyzFd72N5TouywCYwi81pRqp4.mft (raw, json)
Hash identifier:          BRVeAqWkIvpZceUeGubwYVdDOXa/thKvqCY28m9n1oc=
Subject key identifier:   EB:18:1B:80:1D:48:84:4E:44:AB:20:8E:36:2A:55:D0:4C:36:3E:4F
Authority key identifier: 16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E
Certificate issuer:       /CN=A91C8066/serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E
Certificate serial:       020B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
Manifest number:          0206
Signing time:             Sun 19 Oct 2025 04:42:26 +0000
Manifest this update:     Sun 19 Oct 2025 04:42:25 +0000
Manifest next update:     Sun 26 Oct 2025 04:42:25 +0000
Files and hashes:         1: FgxyzFd72N5TouywCYwi81pRqp4.crl (hash: 5qJ2miI87krff2IGZtLWID8CPL+bnLxbzlmzHvn+DPA=)
                          2: 452D9EF494F811ED85ADE381C4F9AE02.roa (hash: n8+NWSH/0jbCR4W6RjUOoVJVoSERmDVQnQldNxK/jIo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl
                          rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:42:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 523 (0x20b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8066, serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E
        Validity
            Not Before: Oct 19 04:42:25 2025 GMT
            Not After : Oct 26 04:42:25 2025 GMT
        Subject: CN=68f46c31-f61c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:b8:63:17:11:a4:f3:9c:e6:b9:e7:55:1a:
                    96:7e:3f:71:6b:7c:54:8f:d7:9c:ee:67:d5:12:af:
                    2a:b8:f8:c3:ec:10:22:de:dc:5b:cb:5f:db:ad:fe:
                    b8:69:68:0a:3e:b4:46:19:ec:90:f0:96:e0:3b:a7:
                    41:2a:83:49:36:fa:06:56:4b:bb:c1:1c:1f:b5:98:
                    62:cb:05:c1:1d:94:ef:2f:8b:7c:5b:e6:1d:d5:27:
                    85:4c:c7:40:cc:1f:93:e3:96:97:cf:35:b5:f6:a9:
                    9e:99:e8:21:b9:29:e3:2d:0c:c4:d9:49:40:79:9c:
                    7a:e1:70:cc:68:46:c8:d0:b3:47:b0:83:86:0a:2f:
                    a7:57:c8:a2:1c:04:47:56:1b:49:04:c3:b7:00:c8:
                    78:1e:0e:b9:de:f8:f2:24:88:b8:43:3c:ce:c9:66:
                    c2:db:0f:5b:13:00:4b:a6:95:9b:9c:cd:b8:14:3e:
                    d5:a7:18:01:96:41:99:9a:7c:e5:5d:b7:c7:2b:30:
                    bf:5b:38:8f:eb:a2:00:36:28:cd:f2:6c:08:eb:45:
                    bc:00:1d:1a:b1:1b:61:66:c8:0a:a7:c6:10:6d:3d:
                    cc:f6:58:6f:09:e1:a6:8b:6f:d2:5b:62:d4:4c:cb:
                    6e:70:d7:1e:60:3b:8b:05:2c:f9:46:06:c3:f2:85:
                    70:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:18:1B:80:1D:48:84:4E:44:AB:20:8E:36:2A:55:D0:4C:36:3E:4F
            X509v3 Authority Key Identifier:
                keyid:16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:f1:20:d7:78:a4:e5:c5:b1:a7:95:a0:fa:dc:4f:2b:e7:e2:
         07:b9:08:d8:04:f1:b5:cb:45:16:ae:a8:0b:97:7d:be:70:87:
         cc:cd:63:fe:fa:65:94:08:de:b8:f4:1a:d1:38:12:f1:36:ea:
         b8:e2:63:d8:81:36:32:fa:9b:e6:cf:6b:41:24:8a:f1:17:eb:
         f2:79:16:ac:95:5c:c1:4e:40:95:bc:01:23:17:ee:83:08:ff:
         b0:c6:a9:17:49:d8:56:e0:92:e7:bc:4d:8d:66:2e:84:1a:57:
         25:46:06:bc:73:57:dd:4f:2c:45:4b:26:d1:99:ba:f6:82:20:
         82:d4:8d:71:3d:e0:1d:73:b3:9c:93:7e:85:17:8d:e5:f6:cb:
         aa:4f:98:51:ca:38:58:3e:1a:7d:bc:56:00:f9:73:f9:ec:cb:
         96:8a:a3:b7:71:a6:61:e2:de:13:f7:c8:40:17:c8:7b:1a:ff:
         04:a4:7f:a7:41:78:47:bf:d5:b9:d1:31:3b:39:ba:fd:53:65:
         b4:aa:7a:62:0b:99:6b:d0:92:b5:1e:16:92:6e:ec:0f:ef:4b:
         8e:ab:a2:d8:2b:a3:c2:87:93:1e:16:69:59:53:4b:80:68:11:
         5b:97:11:ff:44:91:97:77:1e:b9:84:8f:4f:a3:1f:da:67:ee:
         f6:aa:69:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:00:04 2025 by rpki-client