Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
File:                     FxesrAU_Ex4iYUUnNlE-To9ibNs.mft (raw, json)
Hash identifier:          YDhC2xbvuOzOJIOGjvAJXLFdgISrJW3y5TJoircZeFs=
Subject key identifier:   92:60:9D:9D:4A:92:F5:EE:DF:31:ED:66:E2:EF:AD:4C:D9:1F:A2:33
Authority key identifier: 17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB
Certificate issuer:       /CN=A912986D/serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB
Certificate serial:       0B0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
Manifest number:          0AF2
Signing time:             Thu 18 Sep 2025 19:37:05 +0000
Manifest this update:     Thu 18 Sep 2025 19:37:05 +0000
Manifest next update:     Thu 25 Sep 2025 19:37:05 +0000
Files and hashes:         1: FxesrAU_Ex4iYUUnNlE-To9ibNs.crl (hash: u5Mv77+Cp5Y6eMYEZQYEHS1dmKBGgKlep8djg/HevFM=)
                          2: 618A7D781F7111F09D1AC487C4F9AE02.roa (hash: dKwlV0sWG4z1v1VE3IcZIKnEPq5EIzoE6Vqo7I/hzas=)
                          3: 13321D24572211EA88CE445FC4F9AE02.roa (hash: O5ljMaLXjT5F5QYrN31gp31zcfvR+zM4AIkQWAKZEY4=)
                          4: 090D807E05F511EEBB8E1062C4F9AE02.roa (hash: UOh7++5vEfWh4Ro/LeqzWIUlR0tMNgzC3QTRX96GET8=)
                          5: 0878844205F511EEBB8E1062C4F9AE02.roa (hash: /6Err68K4WtTvTK2vN0EmkYV4fAmF1HeKbI8wzMjgSU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl
                          rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 19:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2826 (0xb0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912986D, serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB
        Validity
            Not Before: Sep 18 19:37:05 2025 GMT
            Not After : Sep 25 19:37:05 2025 GMT
        Subject: CN=68cc5f61-61c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:56:bd:f9:64:18:80:d7:c1:79:2a:d1:4f:64:
                    fa:f6:30:bd:96:9f:9b:e8:c9:b0:6b:b6:9e:b5:63:
                    05:54:a1:27:b2:e5:33:d9:7e:35:ef:d6:ee:cd:af:
                    71:70:fa:f8:72:b5:a8:ad:88:71:a9:ab:9c:65:b8:
                    74:f4:d2:a2:0c:df:80:4c:82:4a:74:3d:4a:8b:bc:
                    b4:b0:71:f6:c6:52:ba:b8:8e:d0:b9:2e:d0:75:c6:
                    c3:34:7e:90:c2:55:db:8f:aa:ae:e3:af:8d:15:72:
                    23:31:8e:7f:7d:7e:2c:21:81:27:b9:c7:65:d5:5c:
                    ad:2d:3a:81:f1:3a:2d:36:13:1b:c3:3d:6d:af:38:
                    db:35:ce:e2:59:c4:63:ba:b7:23:02:bc:28:76:33:
                    33:d4:12:47:11:fc:92:3c:51:f1:fd:ec:18:9e:e2:
                    6b:ea:ca:57:31:d9:ee:f4:44:4d:da:3d:dd:c4:9c:
                    d0:14:1b:89:b4:de:a2:7e:7f:55:80:66:7d:2b:af:
                    6f:31:db:ec:b0:bf:5c:5d:8b:8c:32:a9:6f:c1:d8:
                    98:dc:3b:da:0a:b9:f3:25:03:d7:b6:8a:dd:22:b1:
                    86:6b:34:b4:03:59:55:60:f6:6f:99:b9:11:5d:3e:
                    17:9a:e9:ca:d7:cf:d1:07:19:25:bf:bc:27:e7:89:
                    ff:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:60:9D:9D:4A:92:F5:EE:DF:31:ED:66:E2:EF:AD:4C:D9:1F:A2:33
            X509v3 Authority Key Identifier:
                keyid:17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:1e:37:09:8e:f6:3b:69:dc:1d:66:fc:ae:67:e9:e7:a5:e6:
         91:66:9d:fa:37:09:11:47:dd:7d:3e:7d:47:3c:a7:db:b9:45:
         c9:2e:0e:e5:ad:64:57:d8:90:66:d5:55:8b:6e:32:de:57:ad:
         dd:8e:05:ba:b8:80:21:7e:1f:04:bc:f4:a7:19:9d:20:9b:10:
         b5:a0:49:a4:03:23:dd:40:e0:a3:ba:50:c3:89:8d:47:87:62:
         ac:b4:75:76:83:f2:3a:2c:e7:08:ff:c6:52:4f:7b:f7:e1:66:
         0a:41:83:c6:7c:58:99:a4:26:9b:11:1c:f9:1f:65:7c:2f:45:
         7c:f9:1f:38:3a:3f:33:f8:32:10:52:cf:45:40:b6:99:3a:d1:
         10:7e:95:37:bf:72:bc:ef:b9:0e:99:bf:68:af:31:d4:b3:bb:
         11:85:76:a6:aa:c0:f7:ce:c7:f7:a2:5f:c5:0f:5a:44:0b:50:
         25:48:c5:20:74:66:03:be:8e:18:fc:50:9b:35:57:f8:8a:8f:
         ad:f4:8a:10:06:23:e8:68:8a:e5:5b:01:8c:98:c5:2a:85:14:
         72:63:e7:80:cd:3e:7c:bc:2d:83:5f:05:21:70:c9:e1:4c:eb:
         36:e9:fb:5a:6d:76:ed:da:10:5c:c9:63:2e:01:52:3a:ab:cf:
         77:c0:ec:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:26:34 2025 by rpki-client