Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft
File:                     FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft (raw, json)
Hash identifier:          T2wGXLlHpO0iwkz7xvES3sJS/96alpuI/x8Xlzqh5lg=
Subject key identifier:   C1:20:DD:B2:83:58:88:B9:2D:0B:F3:4E:F6:6B:1C:29:58:FB:38:8E
Authority key identifier: 15:48:F1:09:5F:1E:0F:9B:78:4B:1B:7F:DD:8F:0E:75:9C:84:2D:FE
Certificate issuer:       /CN=A91DBF0C/serialNumber=1548F1095F1E0F9B784B1B7FDD8F0E759C842DFE
Certificate serial:       A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft
Manifest number:          A1
Signing time:             Sat 23 Aug 2025 06:30:35 +0000
Manifest this update:     Sat 23 Aug 2025 06:30:35 +0000
Manifest next update:     Sat 30 Aug 2025 06:30:35 +0000
Files and hashes:         1: FUjxCV8eD5t4Sxt_3Y8OdZyELf4.crl (hash: l6sr8/ZE+tMsHSgnzMnFhKH7jGMkR36I5hjLIDy03nU=)
                          2: 71DD0A968C8311EF81E2B476C4F9AE02.roa (hash: TXrkjJIwjX6s25tb57BHkFJUDyJD9PmCVoOhgLQta9Y=)
                          3: 8A06894A8C8211EF85B3A572C4F9AE02.roa (hash: k/RSQ+loZKSU/mNG3N6cRjY0FiE79Ik7PHvn92DtyVg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.crl
                          rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBF0C, serialNumber=1548F1095F1E0F9B784B1B7FDD8F0E759C842DFE
        Validity
            Not Before: Aug 23 06:30:35 2025 GMT
            Not After : Aug 30 06:30:35 2025 GMT
        Subject: CN=68a9600b-fa7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8a:a6:af:9a:d8:83:3f:32:31:06:5a:2f:af:
                    15:2c:2f:21:53:88:30:ae:13:bc:de:f4:ed:95:4d:
                    08:51:d2:95:fd:bc:eb:fb:28:47:60:ef:9e:ba:4e:
                    7e:f3:61:72:1c:09:26:49:fa:23:74:49:66:67:32:
                    bf:25:91:31:57:59:87:3b:93:ed:c4:57:f7:3a:49:
                    a7:c5:bf:f2:e2:44:f0:cd:ab:ed:88:0f:87:68:9a:
                    62:f9:8d:f3:26:dc:ed:5c:b5:16:e6:e1:bc:26:b0:
                    15:eb:e1:13:7b:65:43:a0:54:ec:b9:07:ca:a6:6f:
                    19:5e:16:2d:61:22:5c:24:21:bf:f8:33:5d:e3:c3:
                    c4:67:e9:b1:4e:3e:8e:a5:8b:fe:82:9e:9a:81:fb:
                    77:05:b9:47:27:b2:1b:de:34:b6:54:c5:3d:72:a4:
                    6f:37:6f:a1:81:03:2e:36:6d:a7:67:bf:e5:35:63:
                    79:32:03:51:0d:d3:51:51:42:ac:ce:66:f1:6c:fe:
                    4e:da:30:16:b9:d2:74:85:3a:ce:85:09:a5:dc:29:
                    78:5c:33:b8:6a:14:61:47:98:69:c6:b9:73:5a:1b:
                    1f:ed:f6:7e:20:5d:7e:80:a7:f0:30:8a:07:32:e5:
                    73:ff:38:19:73:6e:92:bb:83:9c:49:31:9a:29:69:
                    7b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:20:DD:B2:83:58:88:B9:2D:0B:F3:4E:F6:6B:1C:29:58:FB:38:8E
            X509v3 Authority Key Identifier:
                keyid:15:48:F1:09:5F:1E:0F:9B:78:4B:1B:7F:DD:8F:0E:75:9C:84:2D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:2f:7a:19:9e:04:82:83:62:a5:4d:0c:a7:45:9a:69:60:4a:
         50:3e:db:2b:64:ee:d3:ee:49:86:1b:7e:73:87:fd:2e:f3:6e:
         e4:01:06:d8:38:27:5c:ec:05:32:d9:82:e7:5c:96:fb:99:d6:
         7f:30:d9:11:b8:0d:d8:9e:56:98:e9:9a:6a:56:1d:8c:6d:d1:
         a1:88:87:73:b2:85:1d:31:06:4c:eb:f2:2b:c1:89:af:5b:81:
         c5:26:87:d2:1c:ee:cd:12:c5:5d:46:ec:13:34:17:c8:7d:4c:
         06:2d:d4:25:df:53:65:f9:3d:74:07:90:9a:30:9f:fb:9c:51:
         ac:7e:d7:5f:c8:51:66:47:29:3f:06:ac:a0:9c:c9:3c:47:68:
         26:c7:d5:12:df:12:c6:48:d2:f0:43:8c:3b:44:c1:bd:da:da:
         e6:31:48:99:b7:08:01:39:c0:27:c3:94:99:2d:be:b6:41:47:
         8a:f4:11:f2:a6:80:27:88:83:1c:7e:17:a2:1f:90:5a:c3:c4:
         5a:6b:a3:6d:30:5a:cd:59:93:12:5a:87:ed:5e:82:69:50:e7:
         0d:3f:6d:ac:5a:cd:d7:ff:e3:de:11:e6:cb:62:4e:53:bb:f0:
         e0:d9:61:2b:cb:a5:1e:89:66:0b:34:df:d2:7d:06:ce:a9:ed:
         0a:1c:6a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:26:12 2025 by rpki-client