Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft
File:                     F2pOA7VAryUUqLxxnCug-fdv-y8.mft (raw, json)
Hash identifier:          zatmHkWi9yNCK2GziQ1Baev5hrGAePwegkwlapW2f2g=
Subject key identifier:   FB:21:F4:A7:15:3A:5D:4E:16:11:B0:D5:4F:54:C9:23:69:73:FA:64
Authority key identifier: 17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F
Certificate issuer:       /CN=A91F2230/serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F
Certificate serial:       0F6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft
Manifest number:          0F61
Signing time:             Fri 22 Aug 2025 17:41:44 +0000
Manifest this update:     Fri 22 Aug 2025 17:41:44 +0000
Manifest next update:     Fri 29 Aug 2025 17:41:44 +0000
Files and hashes:         1: F2pOA7VAryUUqLxxnCug-fdv-y8.crl (hash: ABt7LUnutnuX4xEryGUGHY0HhYuwQ8ZHcpcPhcN9qQc=)
                          2: 09CEF4D0708411E9AC9EA90EC4F9AE02.roa (hash: qze9TLSC/LlQUaDdTzlKDoE3Bw7Tcrh+S+c1zck+d7A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl
                          rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:41:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3946 (0xf6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2230, serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F
        Validity
            Not Before: Aug 22 17:41:44 2025 GMT
            Not After : Aug 29 17:41:44 2025 GMT
        Subject: CN=68a8abd8-eb0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e2:f1:b6:e2:4a:5c:5b:4e:df:65:96:ca:64:
                    04:6f:c5:58:c9:31:55:d9:8b:c3:80:04:9e:90:e8:
                    0c:0e:d3:06:d9:34:87:fa:24:e4:17:17:53:0c:05:
                    12:7d:11:37:76:5f:1f:f4:e3:ff:6e:e0:87:e2:04:
                    66:a1:28:24:75:f5:00:0c:de:b1:65:dc:46:b5:66:
                    46:68:6b:d1:cf:02:c3:dd:53:3c:8f:18:ed:33:9e:
                    7e:94:b2:d6:8f:7d:ae:9b:6a:63:d0:14:f6:77:dd:
                    b5:d6:b4:09:75:7b:2a:0d:4b:a0:12:8c:e1:5d:12:
                    b5:66:c3:83:0b:95:17:15:13:9f:28:1a:f4:95:c7:
                    03:1f:af:e0:f3:77:28:02:ad:bf:78:1a:6d:7d:9a:
                    d2:e9:b8:30:d7:c4:7b:ae:b0:18:b9:93:93:89:42:
                    a9:ce:6f:af:a9:1f:5e:a8:bd:b5:a1:91:59:69:6d:
                    2f:40:8e:a8:c9:23:10:56:94:ac:f7:3a:b1:8e:62:
                    fb:72:5c:4e:2e:4b:57:69:59:16:14:6d:46:8d:62:
                    52:36:45:6f:02:0b:22:89:f1:aa:b1:46:df:28:d0:
                    77:ba:e2:82:d4:13:4c:06:ae:03:3e:22:a9:9a:a9:
                    04:0e:13:50:44:c6:60:60:7d:86:c0:90:19:15:b1:
                    76:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:21:F4:A7:15:3A:5D:4E:16:11:B0:D5:4F:54:C9:23:69:73:FA:64
            X509v3 Authority Key Identifier:
                keyid:17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:be:d4:e7:c6:5a:9b:91:a8:56:68:83:44:62:e2:c0:69:3f:
         e0:f3:17:52:8d:6d:69:7e:53:58:a8:bd:2d:41:11:4d:5d:20:
         39:b5:4b:16:90:2d:00:53:be:9d:3d:d6:e9:da:e3:7a:90:82:
         0f:79:aa:2c:9d:e6:0e:81:54:fc:c4:97:66:05:c8:1a:e4:18:
         57:e0:fe:c8:c8:73:62:2a:e6:0d:5a:9d:dd:ba:34:5c:96:92:
         ce:3e:38:01:54:78:1c:eb:01:e0:bb:10:9a:60:94:51:fe:bc:
         58:de:9e:48:ca:fc:5b:37:42:a1:84:29:77:f7:64:4c:37:14:
         74:7c:dd:3e:ea:df:b7:a3:59:15:3d:c3:dd:18:8c:ac:76:5b:
         0c:f5:92:7f:e2:58:25:e0:a2:48:2f:cb:ff:c2:43:8b:c7:b9:
         d9:f0:83:24:ce:32:0e:54:a7:d0:86:38:d5:7e:77:c8:cd:8e:
         ac:59:1e:79:40:d4:89:57:84:7e:12:6d:cd:13:81:04:a1:c9:
         bc:f7:74:a5:63:13:9e:c8:7d:b8:98:92:e9:10:c9:19:83:a8:
         7b:ad:cf:6c:8e:d7:b4:85:9a:5e:ac:fa:33:96:49:01:91:b2:
         0c:33:53:90:a5:3e:d7:f1:61:52:5b:f4:d6:34:55:33:9c:a5:
         51:06:94:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:42:13 2025 by rpki-client