Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
File:                     FxesrAU_Ex4iYUUnNlE-To9ibNs.mft (raw, json)
Hash identifier:          YeSbj6rRBEv0mb40Hv5xn9zps8NoHS15ko4/iUdMni0=
Subject key identifier:   F7:79:89:97:66:F8:3B:ED:7B:D1:39:D0:A3:1D:7D:92:A4:1A:A3:3C
Authority key identifier: 17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB
Certificate issuer:       /CN=A912986D/serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB
Certificate serial:       0AE4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
Manifest number:          0AD1
Signing time:             Sat 26 Jul 2025 19:35:30 +0000
Manifest this update:     Sat 26 Jul 2025 19:35:29 +0000
Manifest next update:     Sat 02 Aug 2025 19:35:29 +0000
Files and hashes:         1: FxesrAU_Ex4iYUUnNlE-To9ibNs.crl (hash: BjZGu34gCYtYkSU5/a7CYExVWcwX3t+Feh1FacFgAlQ=)
                          2: 618A7D781F7111F09D1AC487C4F9AE02.roa (hash: ip0tFLU4ZQT3pfoDMLAgucX2vvcCHaknK3+b2q4VRsQ=)
                          3: 13321D24572211EA88CE445FC4F9AE02.roa (hash: xXSQwBPCYruuGyQsKTjHM9n/RD09yi8k8z8wgJzm9aU=)
                          4: 090D807E05F511EEBB8E1062C4F9AE02.roa (hash: ZAAiXs8Yo5BnQ7gh48TENV41rzsIW/WMFRgJN6n/qck=)
                          5: 0878844205F511EEBB8E1062C4F9AE02.roa (hash: X82qAyT8/61wVP2kDNOcBKWAMfutmgdSPtnosWaKfos=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl
                          rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 02 Aug 2025 19:35:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2788 (0xae4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912986D, serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB
        Validity
            Not Before: Jul 26 19:35:29 2025 GMT
            Not After : Aug  2 19:35:29 2025 GMT
        Subject: CN=68852e01-7abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7b:52:ca:84:9e:4f:1e:2e:77:c7:f2:29:3f:
                    b3:f4:4a:01:14:17:35:1d:67:04:e6:e6:d5:0d:b5:
                    c7:4c:3b:ae:37:6f:4d:d0:1e:a1:6a:85:4a:45:5e:
                    39:0e:6a:4f:a1:96:b0:6d:7a:5d:c2:f2:48:92:b5:
                    7b:47:33:50:f2:b2:93:47:f9:bf:46:7a:da:1c:40:
                    53:93:0f:b5:3d:2d:ed:08:0c:dd:79:98:cf:6b:83:
                    56:d7:c1:02:c5:bc:80:38:2f:1c:59:b7:28:dd:74:
                    06:d7:4c:d8:51:54:5c:46:36:9b:fe:25:40:01:cb:
                    7b:87:0d:23:73:a3:8d:7c:d0:00:5b:b2:1c:8c:a7:
                    e4:c2:b6:9f:4f:a0:7e:ad:f4:9e:df:42:de:42:6f:
                    51:ac:23:0e:b4:27:fe:d5:3f:0a:be:a4:4b:13:fb:
                    f7:7a:c7:4e:4a:96:53:36:de:13:2c:80:e3:20:c2:
                    48:d2:ba:ac:51:ac:80:1f:54:84:78:94:f4:93:3f:
                    71:98:0d:80:8c:70:08:65:d2:21:fb:f1:7c:15:76:
                    96:cf:05:41:9e:00:b3:8b:c0:43:42:33:33:71:61:
                    8d:da:6f:ab:c4:35:18:70:98:74:59:b4:31:7b:4b:
                    97:ed:42:bc:22:6b:9a:4c:75:4a:44:0c:88:5d:71:
                    8e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:79:89:97:66:F8:3B:ED:7B:D1:39:D0:A3:1D:7D:92:A4:1A:A3:3C
            X509v3 Authority Key Identifier:
                keyid:17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:fe:6a:f5:a0:01:4f:ca:87:6a:98:af:a2:de:a0:c6:a8:f5:
         ed:cc:15:ec:1d:d1:9b:a7:18:f7:f8:86:a9:44:cd:86:36:0d:
         50:53:46:48:7d:a5:3d:e4:ee:ec:38:db:19:b6:a0:d1:ae:b2:
         46:30:c9:65:44:cc:8d:84:1f:05:ec:64:4c:3c:37:ea:23:c7:
         f8:a4:83:d6:51:94:ed:fa:04:29:1a:6b:e7:d2:ea:d5:0c:a0:
         65:c0:04:92:b9:f8:b7:a4:fb:cd:89:67:90:a3:45:3f:3e:9a:
         3a:57:81:1e:01:b8:41:fb:23:a7:f8:0e:30:0e:b1:f8:73:5d:
         57:96:d9:c7:7e:3b:7d:77:b3:47:e0:f5:0c:41:f8:1e:a2:e8:
         85:49:b5:00:5c:e6:89:77:48:8d:b2:3b:d8:bc:2e:17:64:aa:
         44:8e:43:c0:14:d3:ef:1f:b9:cc:54:b0:dd:d7:12:06:2c:ec:
         b7:4e:07:24:01:78:a8:ad:2c:68:9d:26:c5:96:32:87:ae:4c:
         dc:e3:24:09:8f:58:a1:49:98:25:bf:80:d1:0c:01:60:1c:6f:
         2a:c3:16:7f:3f:82:54:63:6c:a2:2a:3a:8f:fc:36:49:5d:fd:
         1f:41:f3:24:bb:38:3e:9c:21:e4:c7:2f:e3:ba:7c:95:50:8e:
         7c:e5:5d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 22:16:45 2025 by rpki-client