Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
File:                     FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft (raw, json)
Hash identifier:          8PKrIiB/Kbo/1GOKQ25HRGs40/TUU59ParYikuIf0Fs=
Subject key identifier:   1B:7F:8A:10:D4:6B:4C:22:18:20:4F:F1:5A:26:75:3C:7E:00:03:1D
Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
Certificate issuer:       /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Certificate serial:       0B3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
Manifest number:          0B29
Signing time:             Fri 18 Jul 2025 19:25:05 +0000
Manifest this update:     Fri 18 Jul 2025 19:25:03 +0000
Manifest next update:     Fri 25 Jul 2025 19:25:03 +0000
Files and hashes:         1: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl (hash: LQUAEpycL0WNyHOWEd915Q+UqvRcJtY1mouOodW91bY=)
                          2: B7BC4714BEF011ED9634C070C4F9AE02.roa (hash: hCJDcBpZnY511Q8RFEjySoDwZo6yKwsip9nLzCPAimM=)
                          3: DCA05C0E419A11EAA5E2BA6EC4F9AE02.roa (hash: PF9MEJvH0IR25ZTC0vJ/AU9NL74Mubr8N6aNLLIh+tY=)
                          4: DC06CBC0419A11EAA5E2BA6EC4F9AE02.roa (hash: jb+NbLPJbNRFrpXKly3k3uaY8m7AD5q86vW7O0jvGcA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl
                          rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 19:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2878 (0xb3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
        Validity
            Not Before: Jul 18 19:25:03 2025 GMT
            Not After : Jul 25 19:25:03 2025 GMT
        Subject: CN=687a9f90-3268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:a8:01:b2:b3:84:ff:62:df:b5:81:a7:ed:16:
                    76:00:30:a5:4b:9a:6f:0b:cc:c6:28:bf:31:75:06:
                    71:3b:9b:80:e7:a2:54:c4:df:73:b4:a4:8a:81:ea:
                    30:e6:d5:77:74:34:2a:ee:d2:62:e4:68:1a:fb:d0:
                    f4:74:0c:ce:a1:d0:fd:82:33:65:aa:24:54:61:27:
                    5b:9b:44:07:2a:6e:02:17:e9:b1:fd:a7:ef:de:df:
                    ee:2b:d1:46:93:b5:80:de:e0:a3:22:f3:7e:46:76:
                    06:f1:26:5b:86:21:45:d1:0e:a4:5a:ea:07:5f:cf:
                    47:5b:af:e9:2f:66:91:45:78:e3:cc:7e:03:da:f7:
                    28:55:1f:9f:7e:c5:45:aa:49:60:a6:29:dc:78:d6:
                    96:f5:69:f8:4e:76:aa:8c:65:5a:bd:20:63:89:36:
                    ad:40:a0:f8:73:a1:56:bd:54:2c:60:c5:51:d5:d0:
                    b5:d4:e3:4d:20:3c:0b:b2:95:82:ec:a1:2d:d6:37:
                    2e:2e:fe:e7:e7:2a:1f:28:fe:b6:61:77:a1:93:5f:
                    7e:df:51:4f:7b:ec:2d:0d:cc:24:8e:a7:68:2b:f4:
                    84:51:5c:4c:e0:74:d8:4b:c5:89:05:12:04:73:d2:
                    b8:5c:d0:53:dc:81:b3:98:30:5f:62:25:66:59:8b:
                    f3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7F:8A:10:D4:6B:4C:22:18:20:4F:F1:5A:26:75:3C:7E:00:03:1D
            X509v3 Authority Key Identifier:
                keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:0b:46:aa:48:b7:a3:83:dd:d3:bd:ad:ed:9e:2a:da:39:9a:
         ef:0d:07:42:9a:68:e7:9b:8f:4a:84:4a:26:12:e8:c0:be:e3:
         53:6f:17:aa:e9:46:a1:67:7d:e2:3e:cb:e0:33:e5:da:6f:32:
         49:7c:8a:dd:09:69:dc:df:d9:bf:e5:8f:75:82:41:d7:51:8c:
         cf:6f:c3:d4:84:b7:43:ce:49:30:60:bc:fb:8d:0f:1b:42:cf:
         0b:4d:69:24:19:38:59:59:7b:0b:b0:08:e3:51:7d:4a:79:77:
         19:cc:bd:98:5b:b9:ae:d9:f5:bb:cf:d0:1d:29:8e:0e:fd:53:
         97:c7:05:9b:1a:57:69:0a:89:9c:79:26:1d:93:49:5d:4a:a2:
         f9:10:3b:f3:98:ba:52:7d:79:43:02:05:8b:47:dc:81:33:c3:
         82:2c:64:34:c2:56:a7:04:43:2d:cd:42:8a:ef:de:2d:2c:aa:
         63:7f:cd:51:97:ce:35:cc:70:c1:ee:7b:26:4f:4a:eb:59:52:
         86:35:92:36:4d:d3:44:05:8a:5b:b6:a9:f7:0d:16:4f:c7:f6:
         84:4b:63:e3:b5:cd:ad:10:09:16:d5:cc:e1:89:17:8d:14:d8:
         71:78:29:33:29:1e:04:0a:3f:65:74:6b:03:55:19:8d:c5:21:
         f9:c6:6f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:03:38 2025 by rpki-client