Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
File:                     fiRDENekVusSe5JsQvJteems24g.mft (raw, json)
Hash identifier:          K0T/xTFpYE2CokRo3J6tS677YIPoqvbx0+mctkh+Ixk=
Subject key identifier:   EC:AB:2B:ED:EB:10:27:88:73:60:9E:55:73:AD:EF:9A:B5:B4:7D:EF
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Certificate issuer:       /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial:       08C6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
Manifest number:          0865
Signing time:             Wed 02 Jul 2025 21:10:38 +0000
Manifest this update:     Wed 02 Jul 2025 21:10:37 +0000
Manifest next update:     Wed 09 Jul 2025 21:10:37 +0000
Files and hashes:         1: fiRDENekVusSe5JsQvJteems24g.crl (hash: y7yms54okQfTIS4qAYJ4rUlpT/2tsCzjH5In8skolsU=)
                          2: BE33817A69AE11EEBBC89D75C4F9AE02.roa (hash: gjnTsh5k1OZvGTpF1aNvAJoG372BB0dQ8oqKuH5rVM8=)
                          3: 885A3B4C198C11EEA06C1429C4F9AE02.roa (hash: UwbxqlIoeWN/uj0INOlxAStWat7EJVu9aWA6OuSDC9Q=)
                          4: B59B34B2A59511EFB1B8AF36C4F9AE02.roa (hash: vWyefttpePLkPBEoycC5X0lmEGRfAIuwi2Ngs4ojIYc=)
                          5: 9A5AEF6A452E11F0A0265759C4F9AE02.roa (hash: evo1DThwmmRaCGD9K8Z+dugTCV26GijVnnsAhKLoEaQ=)
                          6: A64C29AA3D9811EE88B2694CC4F9AE02.roa (hash: /yoDz91aVKDMVKQFN5vWqL0kcfwjMSXqa0ohs5b1IqQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
                          rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 21:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2246 (0x8c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
        Validity
            Not Before: Jul  2 21:10:37 2025 GMT
            Not After : Jul  9 21:10:37 2025 GMT
        Subject: CN=6865a04e-0c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b2:7b:ea:fb:49:0e:ae:8a:93:e9:53:b8:09:
                    c7:d1:8c:bb:b2:7c:8f:b6:f7:77:b6:04:12:ef:f8:
                    3f:06:d4:ef:54:88:e0:cf:88:99:21:5a:2d:c9:24:
                    5c:d7:53:98:77:db:5b:a6:f3:48:b2:fe:eb:7c:f0:
                    9b:59:a5:79:8b:db:e9:8e:73:6e:98:a7:0a:14:b6:
                    f7:f3:40:7e:52:f4:a0:e2:26:fe:2b:43:43:d8:88:
                    0a:5d:de:7c:86:35:f8:62:22:17:8a:26:08:38:13:
                    f9:4f:6a:f4:96:29:83:63:37:24:cb:b7:39:e5:9d:
                    34:35:be:d9:00:27:31:6e:0a:e8:98:c4:91:ca:cd:
                    68:b9:5c:cf:a4:d4:18:d2:6e:42:e3:43:cf:ec:3a:
                    25:7a:a5:c0:bc:29:8b:4c:d8:e2:7c:71:12:1f:e4:
                    cb:81:c6:f4:de:a1:3e:10:52:03:6c:f9:25:40:3f:
                    eb:b0:b7:2f:1a:90:82:af:19:db:8e:d3:6a:71:41:
                    90:a9:a8:4c:c1:28:08:49:a8:d0:51:bd:93:91:2a:
                    01:24:22:b2:c6:61:14:0c:7f:65:d5:b3:5b:db:26:
                    88:2f:36:a1:a6:86:c5:08:0a:bc:53:2d:c1:e3:fa:
                    e9:10:b2:65:88:e7:95:c2:a0:13:4c:dd:25:b1:cd:
                    52:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AB:2B:ED:EB:10:27:88:73:60:9E:55:73:AD:EF:9A:B5:B4:7D:EF
            X509v3 Authority Key Identifier:
                keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ef:8f:f7:c6:7a:62:f2:e9:30:5c:19:f9:1d:75:7a:53:b2:
         e7:0e:2a:c6:d1:cb:0c:b9:99:b8:ab:54:30:11:98:e0:2b:43:
         06:75:68:bf:50:fc:c0:08:4a:b4:1a:87:9c:95:bc:47:7c:e7:
         e2:24:8f:9d:f6:a1:48:4c:5a:dc:97:28:e6:34:24:7f:d8:a2:
         a2:8d:f3:1f:47:89:7d:cd:04:3f:3e:07:69:7f:fd:dd:ff:ff:
         25:94:68:93:f6:80:89:ee:7c:62:32:5c:db:38:fd:8c:ad:4a:
         04:bc:ae:d2:83:51:9f:9c:0c:80:e3:69:81:0b:3d:2a:c7:2b:
         5a:1c:0a:eb:bc:bc:fc:62:f3:79:81:97:4b:5a:6c:4d:74:79:
         a7:90:45:f9:14:d7:e0:c5:52:c8:fa:56:b6:05:d2:ca:d0:5e:
         45:56:04:f8:82:f6:68:72:1c:2d:67:70:9b:c1:2d:54:3e:47:
         66:5d:d2:35:00:41:ad:2b:ca:ff:8e:d9:5b:2d:00:63:ab:76:
         89:3a:ae:f3:e1:49:48:ca:cb:95:b9:eb:ff:6a:d0:42:e8:e7:
         1a:19:b1:84:1e:17:e9:78:42:6c:27:04:d5:72:d9:b8:ff:a4:
         34:0a:58:c7:13:7c:8c:ab:d3:01:b5:14:4f:c3:b5:53:c8:14:
         17:14:a4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:58:06 2025 by rpki-client