Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
File:                     FqgerO8cn8MyDElats0MZ2Oqg2M.mft (raw, json)
Hash identifier:          NZgLDCXCkngJWqo1+ymsR0dmVbv/0qSKktoBWOT/Z4E=
Subject key identifier:   F3:B8:F8:0D:6C:BA:1C:E0:F8:DC:35:96:44:84:EC:2C:6E:B8:95:9F
Authority key identifier: 16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63
Certificate issuer:       /CN=A91DFC92/serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363
Certificate serial:       017B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
Manifest number:          0178
Signing time:             Sat 23 Aug 2025 03:51:26 +0000
Manifest this update:     Sat 23 Aug 2025 03:51:25 +0000
Manifest next update:     Sat 30 Aug 2025 03:51:25 +0000
Files and hashes:         1: FqgerO8cn8MyDElats0MZ2Oqg2M.crl (hash: +veHJKs3Kmbs/GU+89al592xBnzrYyQwMRJIdnkaxfU=)
                          2: 0AE7E0B6421711EE97070469C4F9AE02.roa (hash: 33dDDxYoddtq/jzJQjTw8XcFhN7Z/rBiMlfoEOF+M10=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl
                          rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFC92, serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363
        Validity
            Not Before: Aug 23 03:51:25 2025 GMT
            Not After : Aug 30 03:51:25 2025 GMT
        Subject: CN=68a93abe-c369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b7:21:86:29:2b:1f:99:5d:df:65:5d:87:2a:
                    60:1a:06:b6:d7:6a:01:cb:ab:c2:b5:02:6c:89:38:
                    d7:ec:9b:de:38:8c:bd:1b:94:a2:95:4d:2e:f8:0f:
                    6a:a0:b0:32:b7:e6:f1:46:74:43:3c:37:f6:3d:fe:
                    2a:d3:87:40:21:ea:87:14:37:d4:69:24:00:c5:4a:
                    16:0b:2a:49:03:0f:4d:a5:fd:85:73:66:3c:30:92:
                    cd:d7:55:23:b9:fe:0f:8d:84:55:a5:b9:07:65:d5:
                    42:be:dc:e5:95:25:8d:98:13:33:74:9e:2c:77:47:
                    65:4d:d5:0b:58:76:bc:c3:30:34:1e:1c:2d:ff:c5:
                    df:17:dc:70:ea:5d:46:36:dc:62:5c:dd:67:74:de:
                    7f:fa:0d:fe:4a:c3:21:00:e6:f1:13:03:3e:9f:e7:
                    ba:cf:91:d4:02:10:37:b5:d1:6e:08:dc:2a:71:fa:
                    66:2c:7c:7d:ea:62:76:1c:19:09:c5:36:9e:bf:76:
                    04:8b:41:d4:40:5e:6a:5b:b8:7b:1b:f3:61:c4:7b:
                    ae:8e:d4:fb:46:0b:95:02:31:56:69:de:85:b0:3f:
                    c5:52:48:e0:25:e8:d7:1e:e5:66:95:00:7b:8f:2d:
                    3a:e8:ce:1a:4d:6b:81:cf:c0:67:30:ef:df:34:cb:
                    3f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B8:F8:0D:6C:BA:1C:E0:F8:DC:35:96:44:84:EC:2C:6E:B8:95:9F
            X509v3 Authority Key Identifier:
                keyid:16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:19:91:1a:6c:32:1d:ac:ef:e6:e8:70:bf:96:90:57:6a:9e:
         d7:71:75:86:5a:38:02:e2:a2:a9:d5:fd:21:4d:0e:f7:15:2e:
         2a:92:02:d1:33:e9:e7:08:8e:61:27:26:e5:12:9b:6c:62:8f:
         c9:16:72:ea:38:e6:97:ba:d2:ab:e1:20:0c:ff:f4:5a:e8:48:
         c0:86:bc:a3:45:0e:86:09:d0:77:7c:b0:d2:1c:10:7f:ec:29:
         dd:90:8a:77:d5:ef:e2:79:c7:dc:c2:41:0b:c7:00:ce:4f:c6:
         c4:5c:e7:70:3a:98:4f:57:04:b1:d5:b5:1d:dc:99:fe:ca:fe:
         ad:bd:46:8e:2c:b2:78:3d:1d:fe:1c:89:88:f6:23:c5:35:69:
         72:d0:fb:b1:28:48:b7:ea:54:5e:f3:58:6d:ab:b4:01:96:89:
         8d:63:52:34:2d:8c:fd:b9:98:af:53:e0:2f:01:80:33:6a:90:
         9a:af:c1:c3:0d:6b:d9:62:75:5c:c3:6b:7a:80:fa:b7:f7:91:
         56:4d:f0:4d:dc:58:82:72:07:4e:c4:70:1a:43:f4:66:f4:9e:
         00:47:74:af:32:b0:b8:75:a3:66:7a:be:90:1a:d6:14:4f:91:
         c2:e8:14:41:60:cf:29:8e:ac:83:d8:f8:d9:d9:42:09:31:a7:
         c3:f4:6f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:35:47 2025 by rpki-client