Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.mft
File:                     FTXKeQmuekjAuzjAgnrtdm4w-Co.mft (raw, json)
Hash identifier:          IurMKyRCAUhIiCs6fZf6swPI2UxOSFR+jLgsl6ILMM4=
Subject key identifier:   19:BD:C4:62:1B:C4:13:83:13:3C:8F:A1:6B:A3:4F:DC:74:80:D1:28
Authority key identifier: 15:35:CA:79:09:AE:7A:48:C0:BB:38:C0:82:7A:ED:76:6E:30:F8:2A
Certificate issuer:       /CN=A913854D/serialNumber=1535CA7909AE7A48C0BB38C0827AED766E30F82A
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FTXKeQmuekjAuzjAgnrtdm4w-Co.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.mft
Manifest number:          85
Signing time:             Fri 05 Sep 2025 07:07:12 +0000
Manifest this update:     Fri 05 Sep 2025 07:07:11 +0000
Manifest next update:     Fri 12 Sep 2025 07:07:11 +0000
Files and hashes:         1: FTXKeQmuekjAuzjAgnrtdm4w-Co.crl (hash: 64YTOPrajPP/4ratcYbwUUEJK8zqgig/YCHDJvGFOhY=)
                          2: A90D181AC36C11EFAF838D35C4F9AE02.roa (hash: 5yVwTXwHog4Q0IanZkL0bw8GxEJ/NReVj7nFHVmCcnE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.crl
                          rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FTXKeQmuekjAuzjAgnrtdm4w-Co.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 07:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913854D, serialNumber=1535CA7909AE7A48C0BB38C0827AED766E30F82A
        Validity
            Not Before: Sep  5 07:07:11 2025 GMT
            Not After : Sep 12 07:07:11 2025 GMT
        Subject: CN=68ba8c1f-1a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:92:02:43:e1:45:95:9c:be:9b:9c:c7:fe:eb:
                    0a:b5:3a:85:b4:f9:09:9b:d4:30:2d:a6:c3:18:c9:
                    1d:87:a0:41:8c:04:61:50:ed:5c:ac:a7:52:eb:ad:
                    9f:9d:4d:8c:5a:c1:03:06:67:73:8b:71:24:bd:d2:
                    af:f5:39:7b:3f:1c:14:eb:99:3a:25:c5:2f:60:3c:
                    80:e5:22:93:b8:06:85:71:b1:7e:68:e5:61:da:10:
                    42:20:52:35:e6:5c:eb:f8:13:ee:e4:2e:40:fd:56:
                    7f:b4:51:16:1e:12:3d:9f:24:db:86:60:da:18:89:
                    65:72:54:ad:42:cb:85:79:50:6f:ad:77:06:52:44:
                    77:ff:5c:88:09:d4:db:b8:70:a3:2e:b7:c7:b3:ad:
                    f0:7e:6d:df:22:ea:dc:bf:45:81:15:3a:d7:9c:cc:
                    04:ef:ab:bb:59:99:0d:3c:f3:0c:46:26:8d:10:e4:
                    5e:e8:ce:b6:04:3b:bf:53:fe:ad:3d:39:91:b7:1b:
                    33:e2:e7:91:7c:f1:ad:fc:ca:a1:a4:13:34:2e:4d:
                    de:e1:3e:eb:3f:f0:c4:d2:4f:0b:40:8e:24:be:bf:
                    2b:38:e6:35:d0:94:02:85:af:81:1f:4d:54:1d:59:
                    2e:54:53:52:ee:d5:2a:ee:ac:45:ec:b3:d5:22:85:
                    a5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BD:C4:62:1B:C4:13:83:13:3C:8F:A1:6B:A3:4F:DC:74:80:D1:28
            X509v3 Authority Key Identifier:
                keyid:15:35:CA:79:09:AE:7A:48:C0:BB:38:C0:82:7A:ED:76:6E:30:F8:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FTXKeQmuekjAuzjAgnrtdm4w-Co.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:de:6d:5e:18:a9:18:cf:2e:ce:f5:c1:61:63:16:14:3e:a3:
         d9:b8:e6:e0:90:f7:19:b1:1b:39:ff:e7:c9:fc:73:37:72:07:
         e7:e3:2c:ea:1f:c4:fb:10:23:1a:4d:34:09:72:07:e6:6a:22:
         c7:60:c5:e1:19:7c:76:7f:14:80:93:a5:3c:22:af:d0:03:0b:
         e5:a1:f6:6f:43:45:00:1a:83:a5:28:f4:44:8a:6f:97:ca:3e:
         1f:d7:04:c0:c2:f4:d0:58:07:14:14:b8:d6:a9:ce:a7:1b:a1:
         bf:d6:41:1e:82:51:ce:26:86:43:a0:b6:b8:f9:4d:3a:76:c4:
         2a:7d:0a:aa:ce:83:6c:12:b1:02:35:a8:95:99:dd:4e:a6:1d:
         92:75:b6:ca:15:76:9d:94:d1:82:d6:1c:44:21:6a:c9:56:e7:
         fd:04:c8:39:2f:3b:b2:d1:fb:5e:7a:d5:b4:0b:41:c8:a7:9e:
         3a:66:71:58:46:37:e8:73:da:ea:bc:4b:a5:ed:75:42:02:bf:
         5e:8f:c4:fe:4e:83:85:32:4f:b5:a6:19:c2:12:71:e1:02:24:
         ce:ed:4e:32:b1:f0:8a:14:e5:e9:5e:ab:5f:e4:a2:5c:b4:40:
         76:d2:52:7b:5e:13:a8:f1:04:62:df:89:c0:8f:31:59:9d:cf:
         b1:f2:52:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 21:10:09 2025 by rpki-client