Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
File:                     fqwMLLJ6MKE47kdbB_6X6Okz_co.mft (raw, json)
Hash identifier:          CPx3BLT2cWL74nqNS1VA0Vw60UFnw2kVZnd8cK6tgdM=
Subject key identifier:   01:5A:C7:51:8B:C5:57:4A:EC:04:B6:94:C6:BD:77:67:F1:B0:40:6C
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Certificate issuer:       /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial:       28CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
Manifest number:          2856
Signing time:             Sun 20 Jul 2025 15:37:52 +0000
Manifest this update:     Sun 20 Jul 2025 15:37:52 +0000
Manifest next update:     Sun 27 Jul 2025 15:37:52 +0000
Files and hashes:         1: fqwMLLJ6MKE47kdbB_6X6Okz_co.crl (hash: S33bWmW9HkLVlSxKEeO+FPtgyVX3JgeuqlzsqjArHpY=)
                          2: BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa (hash: 3b/+EfJ1p5yKcSM+K7504gjRkoUg1csZXTQnr7kAeRc=)
                          3: F9B7A3BEB0A911EF8706BE26C4F9AE02.roa (hash: qjrZgvPz0JrFG9Wn1XQqIINgClH8kerS1ZkagSq1RJI=)
                          4: BF6664C04C1211F0949D8B25C4F9AE02.roa (hash: SYVpgpgSK/nXZhDHIbtXA4pZD4YgNxbTaK5KwHSB1Fo=)
                          5: 83CECDE2F37711EFB7DF5759C4F9AE02.roa (hash: 0KaVGkZL/0Y7KpNtGIJZTIpqNjGhGiAxIqFaPkT8PBU=)
                          6: 9E60B12451BF11F08496463FC4F9AE02.roa (hash: G7alyc28UnPinuub9L7HxXgSKVSvMX+VK7VfHOkzhq8=)
                          7: 46E91B3AB31211EFA6BAAF1EC4F9AE02.roa (hash: b6/17IHmfruCEiR6p/M2eZlPFy6KYLkqGlsr9DlXeXk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
                          rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 15:37:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10445 (0x28cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
        Validity
            Not Before: Jul 20 15:37:52 2025 GMT
            Not After : Jul 27 15:37:52 2025 GMT
        Subject: CN=687d0d50-e85a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a8:2e:1d:07:6b:be:07:66:67:0a:07:ed:61:
                    56:a2:ee:94:a4:9a:b7:b2:ca:99:61:62:bc:2e:d3:
                    74:fe:0e:b2:a9:40:be:24:d9:90:2d:be:57:3d:65:
                    f5:1e:20:50:16:0d:82:53:f9:f8:e7:6c:5e:e8:e2:
                    63:ab:df:67:dd:58:97:d4:d0:ba:9d:c7:b1:6a:61:
                    6c:30:21:08:b6:0e:35:a6:e3:07:60:5b:4d:c2:6f:
                    92:a3:b9:f8:18:0d:5f:20:8f:9b:08:3e:58:0a:7e:
                    06:a4:c3:07:17:25:ef:96:e2:77:12:5d:5c:02:4d:
                    c1:af:57:db:12:be:8c:0f:80:99:c6:e0:d9:d6:e0:
                    91:12:6c:5c:dd:4b:af:72:5c:c8:e9:cb:91:d5:6b:
                    b7:9e:27:30:26:ed:fa:06:a9:35:b6:45:f9:38:fb:
                    9a:8e:f3:02:62:8a:10:0a:88:1b:f5:89:99:24:d4:
                    97:bd:f7:1a:d3:56:b3:57:19:89:2e:ff:8c:bd:d5:
                    9e:9c:78:ba:9b:44:36:2c:54:a8:99:99:ec:fa:62:
                    5a:b9:60:66:4f:99:81:81:6e:96:b8:73:d1:34:65:
                    dc:1d:8a:f8:e7:7f:c6:e3:14:44:b8:7b:0f:a5:9e:
                    b6:35:08:83:03:84:5b:f2:d0:b3:17:29:34:22:c0:
                    54:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5A:C7:51:8B:C5:57:4A:EC:04:B6:94:C6:BD:77:67:F1:B0:40:6C
            X509v3 Authority Key Identifier:
                keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:0c:7c:e9:7d:6a:24:53:52:37:60:0b:c8:41:04:3d:48:82:
         b6:bb:33:df:e5:0a:5c:d4:31:36:8a:72:ec:36:68:31:13:45:
         7e:b2:52:27:f9:ef:0a:80:f0:13:56:75:6a:ac:e4:c5:30:0b:
         dd:02:47:85:eb:e1:6e:3f:59:a3:81:4b:dc:d1:f2:37:a7:09:
         62:bd:82:f8:59:5d:fb:ee:b4:79:4c:c6:71:10:ff:33:58:2b:
         7c:7a:b3:06:3a:0f:1a:a4:8b:78:bf:52:44:df:2e:10:a2:c0:
         4b:9e:ec:3c:d1:87:be:ab:7e:46:90:48:82:fa:d7:76:c7:a2:
         c9:ae:37:e9:18:46:b7:09:5a:51:27:43:a6:c1:85:5e:9e:f5:
         66:57:eb:52:a2:57:48:f2:f7:f2:38:3e:3d:1e:45:35:4e:44:
         31:b8:db:46:3c:fa:ce:01:81:a1:2e:c4:7e:66:42:d4:b7:fc:
         5c:4f:b9:02:66:a0:fb:34:83:e0:cd:6b:40:77:86:58:a5:29:
         d6:17:c4:90:f5:fc:22:f2:9b:8a:56:73:6d:da:90:c7:97:34:
         1d:51:c4:87:79:f7:c0:8a:3e:45:84:b3:d3:c2:44:87:83:bd:
         d6:bd:6b:ea:dc:24:70:d5:db:73:5a:ec:16:f5:15:e6:9a:33:
         cc:96:9d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:56:24 2025 by rpki-client