Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft
File:                     FBXygRwDfzZMxYcYC_JAeVsEOmk.mft (raw, json)
Hash identifier:          ee5uU/efOY5gYwxXJbvaGsS1rqUJwnKxeFBZnfCxkGg=
Subject key identifier:   99:A4:0D:09:DC:17:38:24:0E:3C:32:47:85:A1:73:B1:0C:FA:71:28
Authority key identifier: 14:15:F2:81:1C:03:7F:36:4C:C5:87:18:0B:F2:40:79:5B:04:3A:69
Certificate issuer:       /CN=A91E275B/serialNumber=1415F2811C037F364CC587180BF240795B043A69
Certificate serial:       32D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBXygRwDfzZMxYcYC_JAeVsEOmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft
Manifest number:          9AFA
Signing time:             Sat 18 Oct 2025 15:26:38 +0000
Manifest this update:     Sat 18 Oct 2025 15:26:38 +0000
Manifest next update:     Sat 25 Oct 2025 15:26:38 +0000
Files and hashes:         1: FBXygRwDfzZMxYcYC_JAeVsEOmk.crl (hash: 3qNoaCjdYS5ooowJJsJodpjhHS6CjKoSGCjYq91Cniw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.crl
                          rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBXygRwDfzZMxYcYC_JAeVsEOmk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13009 (0x32d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E275B, serialNumber=1415F2811C037F364CC587180BF240795B043A69
        Validity
            Not Before: Oct 18 15:26:38 2025 GMT
            Not After : Oct 25 15:26:38 2025 GMT
        Subject: CN=68f3b1ae-76a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:12:d2:90:f1:26:61:6b:12:fb:d1:10:c8:82:
                    7b:58:8d:1b:33:6e:45:80:d2:87:37:18:0e:e3:f1:
                    ed:aa:66:a3:25:82:f7:59:e5:e7:9b:f2:50:5f:38:
                    2d:76:dd:a4:4c:69:b3:40:78:50:e4:5b:20:f7:a4:
                    49:b0:2d:cf:85:d3:d0:38:1a:8b:1b:02:dd:c4:3a:
                    fe:97:3a:ea:bc:4d:88:de:9a:9f:cd:87:9d:d1:d4:
                    0d:b1:5b:88:fd:d4:42:dc:93:94:19:c6:cd:c1:36:
                    25:3f:20:5b:d8:70:d6:09:dc:fa:af:88:78:ad:28:
                    31:76:22:e0:6b:56:8a:32:40:42:3c:80:ae:69:2d:
                    cc:59:cd:58:a0:c2:d5:27:8a:b2:fc:0b:21:19:11:
                    5d:05:d0:c0:60:53:78:35:4d:ea:5d:5d:7b:e5:2b:
                    26:1b:66:da:0c:de:b8:7b:41:ce:d5:13:dc:12:26:
                    24:c8:d5:43:d0:77:5b:8a:45:b8:cf:1e:7c:3f:5f:
                    0d:e8:17:b9:6f:d6:37:ab:87:a8:76:f7:41:d2:c4:
                    11:00:83:9a:80:81:f1:44:b6:28:7b:d4:1d:29:cc:
                    ce:30:81:0d:47:33:c2:31:5f:d2:38:42:6c:4e:22:
                    71:2b:9c:62:66:1f:32:00:9e:05:a3:f0:2d:d0:9a:
                    34:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A4:0D:09:DC:17:38:24:0E:3C:32:47:85:A1:73:B1:0C:FA:71:28
            X509v3 Authority Key Identifier:
                keyid:14:15:F2:81:1C:03:7F:36:4C:C5:87:18:0B:F2:40:79:5B:04:3A:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBXygRwDfzZMxYcYC_JAeVsEOmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:99:d7:ce:0a:de:6d:c7:b4:a9:3c:ca:2b:18:2f:80:08:ec:
         d4:96:1c:de:bd:fa:68:1e:ae:db:3f:ca:6e:fe:1a:70:54:76:
         43:b2:14:43:f4:fb:6a:84:6a:b3:0e:0a:7e:a6:77:e9:b6:92:
         2e:42:4f:de:07:cd:53:72:8e:d4:39:03:ac:70:f7:d1:d0:9f:
         f9:aa:ad:60:79:5d:85:70:8f:9d:83:ef:8a:6a:be:ee:22:a1:
         4e:70:b5:d9:bb:e4:cc:24:54:97:2f:28:e0:6f:c1:77:02:01:
         22:25:88:b3:3c:d0:31:42:8c:c2:ce:28:78:ca:2e:67:3a:d5:
         ea:24:06:48:be:14:b5:9f:76:a3:ef:fa:aa:27:4e:6d:80:9c:
         85:4f:2b:d4:c7:54:14:72:1f:1a:a9:85:1e:c5:60:7b:c3:fb:
         25:1f:1b:29:e6:cd:f4:61:8d:e8:09:19:9a:26:ef:de:e8:5c:
         02:98:74:13:7c:ae:e8:78:5f:02:fa:2c:aa:7a:f7:6f:3f:ff:
         3e:f1:4b:81:54:2c:2d:64:00:8c:b1:4c:6d:a7:da:49:64:66:
         64:00:7e:4b:c1:e0:2c:8f:7c:e4:80:33:fa:44:6f:25:fc:fa:
         b3:5c:86:cf:23:63:6b:0c:56:49:a4:1b:34:04:6b:e4:0f:51:
         f7:14:c0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:31:26 2025 by rpki-client