Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft
File:                     fSGgNfHk9MpCeHMKwuUHXbIxG08.mft (raw, json)
Hash identifier:          //lE//7KwNIG/SMw11AsWH8QYioDObVdv2IKP312cmk=
Subject key identifier:   48:18:3E:F8:72:47:01:80:D9:FE:3A:02:1C:00:F7:D6:68:EA:CF:23
Authority key identifier: 7D:21:A0:35:F1:E4:F4:CA:42:78:73:0A:C2:E5:07:5D:B2:31:1B:4F
Certificate issuer:       /CN=A916B826/serialNumber=7D21A035F1E4F4CA4278730AC2E5075DB2311B4F
Certificate serial:       0A2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft
Manifest number:          0A24
Signing time:             Fri 18 Jul 2025 20:01:07 +0000
Manifest this update:     Fri 18 Jul 2025 20:01:07 +0000
Manifest next update:     Fri 25 Jul 2025 20:01:07 +0000
Files and hashes:         1: fSGgNfHk9MpCeHMKwuUHXbIxG08.crl (hash: k6yJU2lXUWmkZj4VVyUl/PJ3GxrgQ+ZMakB9JgO/I9U=)
                          2: 705B0F54743911EAA55F0482C4F9AE02.roa (hash: dtGf9lHKD+XSra1Ic0YW/IxEbS3xgcrQOVyMLgE54Qo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.crl
                          rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 20:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2605 (0xa2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B826, serialNumber=7D21A035F1E4F4CA4278730AC2E5075DB2311B4F
        Validity
            Not Before: Jul 18 20:01:07 2025 GMT
            Not After : Jul 25 20:01:07 2025 GMT
        Subject: CN=687aa803-9406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c1:1b:5d:a1:68:35:c5:e2:b2:51:c9:44:66:
                    30:8e:0e:55:16:fe:e1:8a:37:3c:66:0f:6c:bc:87:
                    80:64:51:27:b5:a7:3d:42:fa:0f:42:dd:76:ea:e4:
                    f5:6a:e4:7c:aa:2c:2b:86:32:9b:a9:0a:4e:a1:9c:
                    eb:bb:a8:ea:60:e6:40:00:d6:8d:e7:8b:09:99:10:
                    68:d3:8f:e6:7a:c8:72:18:26:11:1b:ed:73:ff:84:
                    3b:21:85:60:5c:51:5b:6b:18:5a:85:bb:94:5a:40:
                    f2:7e:6d:29:9c:08:1a:8a:61:8c:a1:f9:b3:d1:80:
                    80:e0:f0:e0:44:d3:4c:82:a7:cb:5d:bc:ee:73:8f:
                    34:00:9f:8f:28:6d:5c:6f:bc:a4:3e:3a:fb:52:46:
                    83:b8:2f:29:21:d2:d2:5a:72:30:96:53:c5:b4:27:
                    e8:b1:e3:84:70:ae:6f:d3:60:b0:0a:29:3b:77:06:
                    2d:d3:8d:46:82:03:98:dc:68:3a:38:f0:ba:19:83:
                    f2:12:8d:c3:d2:39:41:9b:30:c2:32:e6:d0:ce:47:
                    50:0b:7d:c5:d7:74:aa:ee:56:4a:62:4a:62:71:81:
                    66:70:ec:4c:a8:73:c7:d2:7b:02:2e:ba:cb:52:63:
                    98:bc:63:92:6e:79:c3:db:7f:9f:69:7a:91:42:12:
                    92:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:18:3E:F8:72:47:01:80:D9:FE:3A:02:1C:00:F7:D6:68:EA:CF:23
            X509v3 Authority Key Identifier:
                keyid:7D:21:A0:35:F1:E4:F4:CA:42:78:73:0A:C2:E5:07:5D:B2:31:1B:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:00:15:b8:c4:96:e4:6c:03:a1:3d:57:f1:14:2e:84:f0:8d:
         48:99:6d:b0:bb:20:37:2e:3c:9d:50:97:61:84:33:8f:38:7d:
         30:5a:1b:b2:f7:51:d4:d3:b3:c2:83:85:51:b2:7c:c3:81:5d:
         2b:a8:c9:71:af:94:8a:d0:f3:6a:32:41:5e:a2:9f:2a:ce:9a:
         f4:08:b0:2a:c7:2a:f6:d9:04:4f:ad:b7:f7:55:5c:ce:20:44:
         da:7e:42:79:09:24:27:e1:c0:ad:50:15:1e:e1:ea:6b:b0:16:
         80:c2:09:7f:71:5d:01:65:98:ee:c3:d7:f5:72:e5:dd:f0:c6:
         af:18:2a:0e:d9:b1:f4:87:97:12:c8:54:ef:17:c2:5a:ab:45:
         4d:cf:2d:1f:9e:fb:ac:bf:b4:be:ee:2b:b8:3f:02:09:86:3d:
         63:dd:18:8c:71:e6:c0:e3:b2:11:6e:38:2f:b5:b3:a1:1c:1a:
         a6:12:c8:1e:5e:8c:83:16:d4:23:90:4b:83:39:7a:2a:ac:06:
         e9:75:12:e1:1f:73:39:af:2f:c2:0d:45:18:ef:0d:33:bc:e3:
         7e:ef:27:02:3e:17:1b:1d:68:82:13:53:b7:23:ae:3a:ce:b8:
         06:a5:3f:e6:d1:dc:41:25:27:80:f9:10:3d:ca:0c:e6:fd:4c:
         3f:ab:00:ce
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkI4MjYxMTAvBgNVBAUTKDdEMjFBMDM1RjFFNEY0Q0E0Mjc4NzMwQUMyRTUwNzVE
QjIzMTFCNEYwHhcNMjUwNzE4MjAwMTA3WhcNMjUwNzI1MjAwMTA3WjAYMRYwFAYD
VQQDEw02ODdhYTgwMy05NDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzcEbXaFoNcXislHJRGYwjg5VFv7hijc8Zg9svIeAZFEntac9QvoPQt126uT1
auR8qiwrhjKbqQpOoZzru6jqYOZAANaN54sJmRBo04/meshyGCYRG+1z/4Q7IYVg
XFFbaxhahbuUWkDyfm0pnAgaimGMofmz0YCA4PDgRNNMgqfLXbzuc480AJ+PKG1c
b7ykPjr7UkaDuC8pIdLSWnIwllPFtCfoseOEcK5v02CwCik7dwYt041GggOY3Gg6
OPC6GYPyEo3D0jlBmzDCMubQzkdQC33F13Sq7lZKYkpicYFmcOxMqHPH0nsCLrrL
UmOYvGOSbnnD23+faXqRQhKSLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgYPvhy
RwGA2f46AhwA99Zo6s8jMB8GA1UdIwQYMBaAFH0hoDXx5PTKQnhzCsLlB12yMRtP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjgyNi82Q0U1RDZDMDc0
MzgxMUVBOTAyNzA3ODFDNEY5QUUwMi9mU0dnTmZIazlNcENlSE1Ld3VVSFhiSXhH
MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZTR2dOZkhrOU1wQ2VITUt3dVVIWGJJeEcwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjgyNi82Q0U1RDZDMDc0MzgxMUVBOTAyNzA3ODFDNEY5QUUwMi9mU0dnTmZIazlN
cENlSE1Ld3VVSFhiSXhHMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDCABW4xJbkbAOhPVfxFC6E8I1ImW2wuyA3LjydUJdhhDOPOH0wWhuy
91HU07PCg4VRsnzDgV0rqMlxr5SK0PNqMkFeop8qzpr0CLAqxyr22QRPrbf3VVzO
IETafkJ5CSQn4cCtUBUe4eprsBaAwgl/cV0BZZjuw9f1cuXd8MavGCoO2bH0h5cS
yFTvF8Jaq0VNzy0fnvusv7S+7iu4PwIJhj1j3RiMcebA47IRbjgvtbOhHBqmEsge
XoyDFtQjkEuDOXoqrAbpdRLhH3M5ry/CDUUY7w0zvON+7ycCPhcbHWiCE1O3I646
zrgGpT/m0dxBJSeA+RA9ygzm/Uw/qwDO
-----END CERTIFICATE-----
Generated at Sun Jul 20 19:02:08 2025 by rpki-client