Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
File:                     FqgerO8cn8MyDElats0MZ2Oqg2M.mft (raw, json)
Hash identifier:          69XIVVVKWQxv/sBAw9PUTU0oL20tgnO8aWcJfsTXEnw=
Subject key identifier:   4B:72:47:0F:A3:A2:8A:E2:7C:B7:0F:A2:A9:15:93:9D:9B:13:3A:A9
Authority key identifier: 16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63
Certificate issuer:       /CN=A91DFC92/serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363
Certificate serial:       016B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
Manifest number:          0168
Signing time:             Wed 23 Jul 2025 04:07:26 +0000
Manifest this update:     Wed 23 Jul 2025 04:07:26 +0000
Manifest next update:     Wed 30 Jul 2025 04:07:26 +0000
Files and hashes:         1: FqgerO8cn8MyDElats0MZ2Oqg2M.crl (hash: nA14jdGRfB8F/XFRyIgdn2D/9b4INcLDR/HmaIXa3v8=)
                          2: 0AE7E0B6421711EE97070469C4F9AE02.roa (hash: 33dDDxYoddtq/jzJQjTw8XcFhN7Z/rBiMlfoEOF+M10=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl
                          rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 04:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFC92, serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363
        Validity
            Not Before: Jul 23 04:07:26 2025 GMT
            Not After : Jul 30 04:07:26 2025 GMT
        Subject: CN=68805ffe-f3fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:52:47:37:c0:14:7f:42:51:1e:16:54:f9:48:
                    c8:21:95:27:89:f4:43:a1:a4:9b:03:eb:c8:a6:58:
                    d7:49:92:69:ae:c9:c2:11:ae:27:f6:e0:8d:c4:da:
                    58:0f:19:50:83:86:04:6b:da:51:01:56:a8:1b:bd:
                    9a:9f:80:d5:ba:fd:8b:1b:37:00:26:91:0d:21:9c:
                    0f:21:81:62:5f:63:36:95:0a:b8:96:c1:ab:29:6e:
                    c8:fc:3c:ba:76:8a:e2:88:07:57:24:4e:e9:80:7d:
                    76:4f:d7:ab:58:c6:f0:61:4e:ee:7d:7c:04:26:17:
                    20:a5:0f:c9:1a:41:e4:ff:f4:d2:90:21:5d:78:aa:
                    14:3b:15:bc:8d:87:44:b2:7e:85:c5:e7:2e:20:89:
                    0e:2e:f1:af:9f:81:71:b0:59:0c:2e:a8:82:8a:ae:
                    84:29:bc:c7:a2:2c:de:81:f6:7d:52:c1:50:aa:bc:
                    99:cf:11:7a:62:d0:2f:a2:69:8f:95:b4:bf:df:ef:
                    83:b3:98:6d:df:92:0f:76:ca:e3:25:98:af:25:b2:
                    70:e3:0b:de:92:23:d3:66:dd:8f:5c:a4:0b:98:f6:
                    01:a6:67:bd:83:c2:b1:85:44:66:9f:73:6e:e5:74:
                    7d:06:eb:d5:be:51:27:9a:c6:b5:08:8d:15:56:9b:
                    df:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:72:47:0F:A3:A2:8A:E2:7C:B7:0F:A2:A9:15:93:9D:9B:13:3A:A9
            X509v3 Authority Key Identifier:
                keyid:16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:64:d6:39:20:c0:74:c3:a2:f9:b9:2d:71:09:25:8b:ca:82:
         3d:9e:71:f6:a5:c2:cb:f1:a4:05:1d:a1:48:60:1b:d9:61:70:
         11:fb:92:ef:9d:f2:21:f9:a1:9d:ee:83:0c:83:68:01:fb:7c:
         fb:95:03:e9:10:6a:b8:9a:fb:e7:8c:66:b6:8b:be:b9:52:15:
         a9:0c:26:25:06:c5:9f:6d:84:e2:bc:51:ff:87:ab:6f:d8:23:
         78:f5:d4:2f:3f:f5:b4:3f:71:c0:bc:7b:2c:92:45:14:a3:fd:
         46:73:35:24:9c:51:5f:3d:aa:65:de:19:ab:8c:5a:44:f0:7d:
         ad:09:60:8a:70:12:a5:b1:85:89:56:93:47:81:f7:7e:c9:df:
         0f:96:76:8f:1d:be:b7:35:ba:e0:2b:7d:01:48:4d:a1:fd:b5:
         13:f8:ca:1e:85:0a:72:a1:0e:d9:45:44:2d:0c:a0:cb:76:af:
         c3:e3:a3:3b:ab:ef:fa:2c:3c:a0:95:07:58:79:ed:35:16:b9:
         7e:47:fd:a3:5c:94:f4:75:08:05:b5:e6:42:3c:23:f5:8c:4d:
         38:d1:d3:70:43:a2:4f:dc:17:6d:73:ae:d1:89:53:2f:16:8f:
         3f:53:5d:9e:bb:f7:5b:12:8c:d7:3a:8d:37:ad:ea:ab:0d:09:
         91:11:42:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:20:23 2025 by rpki-client