Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
File:                     Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft (raw, json)
Hash identifier:          RmnADfZtqQWFdB9TEs0GSm6K4L/FiLbzh+PD8aGrlPs=
Subject key identifier:   C9:8A:82:75:A6:38:48:1F:DF:51:35:34:48:13:56:C8:9A:9E:B0:55
Authority key identifier: 16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18
Certificate issuer:       /CN=A91295B6/serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718
Certificate serial:       018A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
Manifest number:          0183
Signing time:             Wed 23 Jul 2025 03:54:06 +0000
Manifest this update:     Wed 23 Jul 2025 03:54:05 +0000
Manifest next update:     Wed 30 Jul 2025 03:54:05 +0000
Files and hashes:         1: Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl (hash: 65p6ZtyayBvUZbXUnG9ZMfB6q10jDZuvRNoLpORsuzY=)
                          2: 35C8F50C218A11EE959B7037C4F9AE02.roa (hash: d9bjtW0ZUYjonxEE3MZfuZxfLKtEPtuzgQGXr7LUJRE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl
                          rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 03:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91295B6, serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718
        Validity
            Not Before: Jul 23 03:54:05 2025 GMT
            Not After : Jul 30 03:54:05 2025 GMT
        Subject: CN=68805cde-d427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9e:d1:eb:23:54:4a:9a:c9:b2:ae:71:b0:78:
                    bc:ab:4e:d4:ff:ae:bd:ec:cf:15:ce:53:b2:54:ce:
                    4b:ba:6e:c4:ad:31:43:e0:2a:e0:ce:c1:d3:f0:70:
                    8f:07:8a:af:dc:9b:13:70:b2:c5:7b:1f:fe:d2:fc:
                    e7:cc:69:a0:e7:18:27:ef:cb:a3:76:bd:80:ba:55:
                    47:33:db:a9:46:ea:50:18:82:01:fd:dd:a1:b3:2f:
                    f9:be:84:e5:9b:55:1c:3b:89:cc:60:3b:bc:df:69:
                    66:70:d4:2b:e6:86:fa:69:00:d1:05:e0:16:89:f9:
                    9d:60:6a:77:55:e7:89:5c:5a:43:de:f0:9f:45:f7:
                    92:a4:23:8a:20:63:1e:a5:50:a2:34:2a:c1:23:ba:
                    36:93:af:a8:8a:0a:5d:c2:00:ba:d6:61:68:06:02:
                    e3:d3:22:c6:37:cf:fb:13:32:ad:12:ac:bd:e1:72:
                    ef:a8:a9:e5:01:d7:bf:af:cb:8f:ca:a5:9d:9e:79:
                    b7:f5:1e:ed:20:8d:48:b5:12:84:f6:a9:ce:d5:d0:
                    51:58:f3:4d:52:61:e5:76:8b:61:8e:8f:e8:f0:88:
                    34:1d:11:f5:11:d8:74:fe:d2:4f:ab:fe:f9:20:07:
                    c0:06:cc:16:a6:c3:07:f6:bf:cc:35:af:8f:b6:13:
                    5e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:8A:82:75:A6:38:48:1F:DF:51:35:34:48:13:56:C8:9A:9E:B0:55
            X509v3 Authority Key Identifier:
                keyid:16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:94:29:93:d3:25:84:f8:0b:f6:68:d4:b8:56:6d:3c:94:d5:
         58:fd:f4:a9:ac:34:6f:4f:84:c7:35:4c:5d:d4:a9:98:4b:9b:
         af:58:d1:51:ad:5b:02:a6:32:24:41:fd:7f:9e:df:4e:6b:39:
         aa:2b:00:47:4d:10:c5:7e:d2:fb:7f:a1:cd:c1:57:80:7b:fb:
         65:ac:68:dc:9d:6c:c1:41:3a:30:6a:fd:60:8a:43:dd:31:5f:
         36:49:f8:ab:31:4e:7a:97:13:8c:3f:fc:17:1b:f3:64:36:82:
         3c:c5:37:60:53:71:07:fc:a5:5c:b8:cc:6a:86:bd:51:29:9c:
         01:83:ed:7e:01:7e:10:d4:93:37:e0:e8:ac:b8:b0:c1:ad:61:
         6d:05:cb:25:9c:6c:6c:f7:49:a3:fb:18:c5:bf:16:f2:91:c2:
         0e:f0:a2:5b:dd:57:a4:92:5f:d6:2c:10:3b:54:a9:f7:94:ce:
         1e:c3:07:ba:c5:6d:19:44:2e:dc:2f:2d:5a:ee:85:6e:03:4e:
         58:b7:09:99:86:13:c2:be:5e:ea:19:c5:83:bb:fc:21:7d:c2:
         73:79:0f:49:f9:29:eb:20:9f:03:42:cb:9e:9a:60:68:d5:86:
         6d:90:59:80:fe:f4:9a:2d:1b:38:52:0f:40:a2:93:cc:28:ae:
         62:16:da:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:20:50 2025 by rpki-client