Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
File:                     fONyLR7LAIObJGf9XDmmrUamImE.mft (raw, json)
Hash identifier:          /YXp4Sx+g5zGOdJ2dL/WjWppNGU5ZYoBUsEh5tf2yg0=
Subject key identifier:   91:0C:B9:F3:8C:F8:AC:8E:39:7A:29:9F:55:D1:82:45:F0:F9:3C:9B
Authority key identifier: 7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61
Certificate issuer:       /CN=A9156E6F/serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261
Certificate serial:       0C61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
Manifest number:          0C59
Signing time:             Tue 22 Jul 2025 18:39:34 +0000
Manifest this update:     Tue 22 Jul 2025 18:39:34 +0000
Manifest next update:     Tue 29 Jul 2025 18:39:34 +0000
Files and hashes:         1: fONyLR7LAIObJGf9XDmmrUamImE.crl (hash: bRG2+ReJTJgR71Y53eWeWXr93xu7KprUcQNVSsqNxxw=)
                          2: ABD61D2E06D611EA8EBBEA50C4F9AE02.roa (hash: oMSMtDUOK/K2eVg/KodU05EhZSFOtXitxY9io4e/C/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl
                          rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 18:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3169 (0xc61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156E6F, serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261
        Validity
            Not Before: Jul 22 18:39:34 2025 GMT
            Not After : Jul 29 18:39:34 2025 GMT
        Subject: CN=687fdae6-8e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:50:d8:57:ae:14:fd:b3:ac:8a:3c:04:ec:d0:
                    b8:5f:0e:ff:60:1d:d9:d4:74:37:3d:3a:38:c8:ee:
                    74:eb:cc:d0:53:a3:d4:52:44:14:17:03:72:4f:f4:
                    de:29:1a:c9:d3:48:8b:ce:f5:00:9d:67:00:f9:63:
                    02:69:e7:48:a1:fc:8d:62:4f:5d:7e:4e:d7:5c:82:
                    9a:fd:85:98:6e:0b:f1:48:56:67:84:a2:55:7d:de:
                    20:90:00:45:dc:24:99:34:74:5c:d1:9a:41:44:8e:
                    45:31:c1:3f:0b:17:58:cd:92:a6:cf:32:6c:29:80:
                    ac:60:93:fd:01:8c:1e:7d:a6:3b:0e:8d:4f:23:94:
                    1a:97:58:82:4b:c0:32:b0:c4:fa:ac:19:21:94:fc:
                    71:c1:e3:2d:03:b5:c7:dc:00:f5:2f:05:78:a3:99:
                    63:31:0d:24:d7:b6:42:c6:98:f2:e1:ee:de:de:8a:
                    4d:25:f9:08:a0:ea:a0:3f:cb:24:aa:a2:f0:ed:f1:
                    e4:70:dd:24:06:e4:b2:db:84:47:29:d2:4a:2d:40:
                    9d:c2:35:ae:db:2a:72:a7:2a:63:9b:43:d0:02:25:
                    d3:fb:da:cf:5c:fb:d7:d6:b6:78:e2:c9:ec:4e:24:
                    9c:d6:02:ec:9c:6a:1c:26:7a:5d:23:9e:01:cc:c7:
                    cf:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0C:B9:F3:8C:F8:AC:8E:39:7A:29:9F:55:D1:82:45:F0:F9:3C:9B
            X509v3 Authority Key Identifier:
                keyid:7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:47:0f:c9:7e:65:d0:84:9d:cf:5b:25:e9:b9:34:3a:9f:24:
         d9:22:e6:a2:3a:9e:00:80:0b:94:0a:2f:0b:04:c6:ed:f0:d3:
         6a:e0:05:c9:f2:46:12:eb:b9:33:d1:d1:b6:31:70:1e:77:9d:
         70:a8:5d:e6:29:92:d5:ab:7a:cd:9f:a3:c2:8c:a1:05:3a:7d:
         98:77:77:43:4b:e0:6d:97:27:d4:cf:15:c3:ec:2e:f0:c4:67:
         63:60:8a:4d:ab:f6:3f:a0:a3:3a:be:e7:98:5c:9f:f5:14:f4:
         ba:60:cf:3b:93:8c:78:dc:e4:ac:24:3f:cb:74:a7:1f:35:de:
         49:fc:07:35:2e:38:f6:0a:16:6d:ee:6e:d8:35:d2:16:e8:da:
         fb:68:c8:b6:5b:33:fa:98:d2:96:c8:84:a0:27:a0:70:ab:e1:
         13:23:0c:84:f2:b3:d8:55:fc:87:6e:b3:5a:c5:18:77:92:f9:
         7c:00:3b:a4:98:f9:d6:2a:73:12:6d:41:36:c4:ef:6a:91:9c:
         ce:f0:69:54:6a:e0:f9:78:d3:55:f8:43:37:17:cd:19:86:97:
         43:cf:55:de:6b:2d:b8:88:d7:c7:17:a4:92:6a:e5:98:32:30:
         6b:8f:82:c1:3f:e7:0a:e1:36:c6:17:12:e4:b7:07:1c:b4:21:
         70:a1:b3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 04:57:33 2025 by rpki-client