Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
File:                     FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft (raw, json)
Hash identifier:          /0X2i2meorspTV6ZHA5/TnkfI7zERj3u5hJOaTcqk1s=
Subject key identifier:   0D:5D:C6:EB:19:1F:0A:B9:E2:E3:13:18:D7:C1:4D:E3:B3:27:3E:C8
Authority key identifier: 14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45
Certificate issuer:       /CN=A9173CF2/serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745
Certificate serial:       067E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
Manifest number:          0679
Signing time:             Fri 18 Jul 2025 22:40:14 +0000
Manifest this update:     Fri 18 Jul 2025 22:40:13 +0000
Manifest next update:     Fri 25 Jul 2025 22:40:13 +0000
Files and hashes:         1: FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl (hash: c473RimYbRy/LtGJX3qSgdYHk/jpoHpZXOK6T03BZ4w=)
                          2: D9E7CFF681EF11EBAEE9D17AC4F9AE02.roa (hash: ZbglDjurwe6qJhjv9yc/alHsSUDwI/+N2E8sYgdY/Mk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl
                          rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 22:40:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1662 (0x67e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173CF2, serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745
        Validity
            Not Before: Jul 18 22:40:13 2025 GMT
            Not After : Jul 25 22:40:13 2025 GMT
        Subject: CN=687acd4d-c38b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:15:13:ae:da:d3:4f:2f:da:8e:96:f3:f8:05:
                    12:12:5d:80:86:3d:14:f5:89:48:b0:cf:61:bb:3f:
                    de:1c:d6:5a:a1:e4:41:c0:1f:48:30:be:05:93:b0:
                    55:fd:c3:23:f1:37:bd:ae:ce:6f:02:ee:cb:eb:f7:
                    4f:ab:1e:72:c6:17:f7:af:60:b1:89:df:1d:2c:58:
                    b3:45:9f:ad:8e:b9:5e:77:00:a4:0d:b3:04:0e:87:
                    76:cd:42:6f:9d:e7:45:8b:1d:91:54:8a:51:16:66:
                    b5:9c:74:7f:10:6c:43:1e:70:57:f4:f0:06:93:c8:
                    28:9a:6b:53:64:3a:0f:f4:da:57:cd:94:59:36:33:
                    6f:b6:90:07:d3:c6:e7:5f:92:4c:34:ec:28:83:91:
                    64:8b:44:21:b0:1a:36:c4:0d:e9:d3:da:6e:40:8a:
                    71:b8:d2:46:de:0f:02:d1:c6:eb:ef:39:72:1a:b2:
                    cd:1b:e2:c7:1e:3d:42:4f:03:a5:12:56:ce:7a:2c:
                    72:57:a2:7c:cb:36:c4:18:2c:49:6d:af:8d:0d:81:
                    2d:5d:64:51:33:22:fb:90:7a:2a:07:7e:17:57:44:
                    0c:03:4d:e9:7e:76:69:fa:4f:5b:39:71:6b:09:78:
                    4f:99:cb:b2:36:70:28:00:78:b6:d1:78:e3:cc:83:
                    c2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5D:C6:EB:19:1F:0A:B9:E2:E3:13:18:D7:C1:4D:E3:B3:27:3E:C8
            X509v3 Authority Key Identifier:
                keyid:14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:af:19:0c:6e:f7:61:4e:c8:d5:fc:a0:f1:b6:f3:5d:5e:75:
         ab:11:62:b5:0d:7c:77:a6:4d:5a:77:07:24:3d:f4:92:92:9f:
         52:7e:c6:1f:f0:18:6d:0d:93:ff:b9:f4:85:5b:ed:37:0e:b0:
         cf:cb:67:29:80:92:3b:5d:9e:b3:37:f0:a0:2d:d6:84:a0:28:
         0f:53:9a:29:d4:b1:e7:b8:39:b2:03:d9:5c:55:79:83:11:51:
         9a:68:a3:4e:6e:2e:3c:52:8e:82:55:c3:7d:b3:27:c1:a7:98:
         fc:2e:90:8d:77:40:f2:1c:8c:00:c1:3f:78:57:28:7c:6c:8e:
         09:e9:ba:98:eb:f2:ca:aa:29:02:e0:ea:42:67:26:44:df:2b:
         68:d5:a6:77:c0:f6:88:df:02:5c:70:46:bc:f1:ac:11:32:a9:
         e1:d7:35:07:de:e7:57:55:a9:48:2f:7a:78:91:a1:00:cd:b1:
         79:67:87:ce:d1:bc:0b:d4:c7:75:59:53:6e:8a:04:fd:d0:22:
         41:35:5a:d9:9d:ef:d5:92:bc:b4:68:6a:8d:fb:2b:36:9d:a2:
         dd:fc:c1:08:5c:b2:87:f3:c4:44:cb:f2:01:56:a2:83:9a:95:
         93:04:47:e5:0b:55:f2:ac:19:6f:5b:ef:6f:e8:ae:e9:e8:a5:
         2c:7f:c8:3e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNDRjIxMTAvBgNVBAUTKDE0NDdENDRCNDlGNzkwNkRDNjM3MzFBNUQ5OEQ4NTJF
QzEwQjc3NDUwHhcNMjUwNzE4MjI0MDEzWhcNMjUwNzI1MjI0MDEzWjAYMRYwFAYD
VQQDEw02ODdhY2Q0ZC1jMzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1BUTrtrTTy/ajpbz+AUSEl2Ahj0U9YlIsM9huz/eHNZaoeRBwB9IML4Fk7BV
/cMj8Te9rs5vAu7L6/dPqx5yxhf3r2Cxid8dLFizRZ+tjrledwCkDbMEDod2zUJv
nedFix2RVIpRFma1nHR/EGxDHnBX9PAGk8gommtTZDoP9NpXzZRZNjNvtpAH08bn
X5JMNOwog5Fki0QhsBo2xA3p09puQIpxuNJG3g8C0cbr7zlyGrLNG+LHHj1CTwOl
ElbOeixyV6J8yzbEGCxJba+NDYEtXWRRMyL7kHoqB34XV0QMA03pfnZp+k9bOXFr
CXhPmcuyNnAoAHi20XjjzIPC8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1dxusZ
Hwq54uMTGNfBTeOzJz7IMB8GA1UdIwQYMBaAFBRH1EtJ95BtxjcxpdmNhS7BC3dF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NGMi8xQUU5MDM0Njgx
RUUxMUVCQkUzNTQ5NUZDNEY5QUUwMi9GRWZVUzBuM2tHM0dOekdsMlkyRkxzRUxk
MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZFZlVTMG4za0czR056R2wyWTJGTHNFTGQwVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
M0NGMi8xQUU5MDM0NjgxRUUxMUVCQkUzNTQ5NUZDNEY5QUUwMi9GRWZVUzBuM2tH
M0dOekdsMlkyRkxzRUxkMFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBLrxkMbvdhTsjV/KDxtvNdXnWrEWK1DXx3pk1adwckPfSSkp9SfsYf
8BhtDZP/ufSFW+03DrDPy2cpgJI7XZ6zN/CgLdaEoCgPU5op1LHnuDmyA9lcVXmD
EVGaaKNObi48Uo6CVcN9syfBp5j8LpCNd0DyHIwAwT94Vyh8bI4J6bqY6/LKqikC
4OpCZyZE3yto1aZ3wPaI3wJccEa88awRMqnh1zUH3udXValIL3p4kaEAzbF5Z4fO
0bwL1Md1WVNuigT90CJBNVrZne/Vkry0aGqN+ys2naLd/MEIXLKH88REy/IBVqKD
mpWTBEflC1XyrBlvW+9v6K7p6KUsf8g+
-----END CERTIFICATE-----
Generated at Sun Jul 20 22:42:09 2025 by rpki-client