Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
File:                     fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft (raw, json)
Hash identifier:          b1n4va4QjFpG7sxU7XHtvbd9WSyYTtrDedAhsSo5Ei0=
Subject key identifier:   65:17:33:C3:9D:3D:1D:8D:DE:E9:7C:66:53:37:06:C7:9C:E4:4D:33
Authority key identifier: 7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25
Certificate issuer:       /CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225
Certificate serial:       01B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
Manifest number:          0FCD
Signing time:             Fri 18 Jul 2025 17:59:44 +0000
Manifest this update:     Fri 18 Jul 2025 17:59:44 +0000
Manifest next update:     Fri 25 Jul 2025 17:59:44 +0000
Files and hashes:         1: fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl (hash: jB5hh/OBVL2ac71W8PWfz5yNAHS7IND9AcpnwwnNix4=)
                          2: 329274C4D31611EEA7F0475FC4F9AE02.roa (hash: pr44aMdjUjF3qJ5V59OemeYMLJZAouFtZX25Dx2aXA8=)
                          3: B4A14106974911EEBAFA257BC4F9AE02.roa (hash: Fb7LVlJG+JVdijAn+Ys69+wkABJKfcULX5Fgfk+/L5A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 17:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6BF0, serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225
        Validity
            Not Before: Jul 18 17:59:44 2025 GMT
            Not After : Jul 25 17:59:44 2025 GMT
        Subject: CN=687a8b90-41ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b1:69:56:6f:f5:d7:56:0b:ca:a1:21:b0:22:
                    6c:34:0f:22:1a:a4:d6:64:f4:96:ee:63:1f:50:3b:
                    43:e1:e8:dc:f1:58:6c:fe:96:1d:e8:35:fd:c4:92:
                    c1:ae:99:0f:a9:d8:68:9b:0a:55:81:5e:bf:6f:1e:
                    ce:0b:54:0c:ff:37:13:a5:65:3a:98:15:d5:91:2a:
                    19:61:9c:9b:a6:37:a1:52:41:38:cd:9c:bf:c2:cc:
                    b1:6f:1b:d1:d4:dc:46:b3:db:11:51:c8:4a:84:65:
                    6a:0d:d2:2d:d4:f3:5b:2d:fe:07:24:fd:8a:eb:39:
                    af:72:f1:b0:8e:87:ec:5a:35:b3:83:3d:14:a0:4a:
                    27:ba:97:9f:1b:e7:5d:33:8b:0d:71:be:57:30:b7:
                    aa:b0:0b:64:97:87:73:ac:9c:87:9d:e5:71:f9:32:
                    c6:c7:4f:10:91:bc:36:12:79:0b:77:3e:8a:19:39:
                    be:34:b3:15:30:a2:cf:34:57:12:0b:5e:cd:d6:e0:
                    f3:40:57:e4:35:72:de:72:2d:b2:d9:b6:09:2b:2e:
                    aa:54:85:ed:48:93:53:fc:49:27:be:bc:20:e9:39:
                    57:ec:ef:f5:9d:80:97:b2:c3:46:cf:86:df:a6:88:
                    f5:97:ed:4d:bd:25:8b:fa:7b:54:bf:37:d3:22:4d:
                    6e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:17:33:C3:9D:3D:1D:8D:DE:E9:7C:66:53:37:06:C7:9C:E4:4D:33
            X509v3 Authority Key Identifier:
                keyid:7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f1:21:a3:40:a8:8c:51:27:39:37:87:e1:97:e1:12:f2:dd:
         05:0c:df:24:3c:94:cb:45:de:11:eb:76:a4:27:66:19:4d:dc:
         ae:74:0f:9c:a4:b9:1b:3c:b5:e9:4b:62:a5:52:41:e7:37:2b:
         ec:ef:7b:ef:ba:37:c5:99:d4:93:7d:62:19:55:a9:25:7d:92:
         a4:ba:7e:fc:f2:a2:b8:de:15:47:e7:38:e3:01:29:43:0b:9c:
         c7:b2:b6:ad:bc:7c:1f:6a:3f:28:52:65:67:25:47:5c:81:63:
         3b:95:4d:a4:ea:0e:f4:5f:1e:f5:7e:46:77:cf:ce:7d:a2:0f:
         6c:0b:aa:c2:18:59:87:4e:5b:4e:2f:29:71:40:f6:f6:98:f5:
         53:7d:d1:bf:a3:e6:47:6e:92:ce:cb:59:c7:5f:e9:73:a6:e3:
         1a:ed:4c:ec:6c:90:9e:3f:37:a2:89:27:0d:fb:ea:65:9b:ec:
         e3:5c:8a:25:99:0b:74:46:4e:03:b7:3e:84:f8:c3:e1:6d:29:
         81:f4:95:14:ef:85:7f:85:2a:1f:b7:7e:84:9b:ea:48:1b:54:
         91:0d:6f:0c:a1:65:0c:6e:91:3e:ac:0c:13:b8:06:23:8c:28:
         5b:64:26:39:b7:09:00:8e:db:67:d2:b3:87:9b:4d:db:5a:a9:
         59:1c:48:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:38:28 2025 by rpki-client