Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
File:                     fWXr4UwwRuc-OYaVcwKibggfGvg.mft (raw, json)
Hash identifier:          vy3WiaqS9Zs2zYhqLEeZjhy9yQAWYI9LVRNqTYz+/C8=
Subject key identifier:   63:DE:43:D9:90:79:20:B9:39:C9:F7:0B:9F:29:D8:AD:80:AA:79:BD
Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
Certificate issuer:       /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Certificate serial:       285B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
Manifest number:          26AE
Signing time:             Thu 04 Sep 2025 15:49:33 +0000
Manifest this update:     Thu 04 Sep 2025 15:49:33 +0000
Manifest next update:     Thu 11 Sep 2025 15:49:33 +0000
Files and hashes:         1: fWXr4UwwRuc-OYaVcwKibggfGvg.crl (hash: zFZOoe9WFQbdI1o/fV9m51wlciIRZkdrb3qyOcXHlaM=)
                          2: 089CB7F8E41C11E9AD4A8D16C4F9AE02.roa (hash: KhDCztJWi/b/h8TdofXt57IsiN7CYR7V5Vv9hx6DGJ4=)
                          3: 4F8D63203EBF11EBA940A946C4F9AE02.roa (hash: buzUvsC9YQBDNkx4fnJbNl9kiM+U4xX7qiwW7jQGn9U=)
                          4: E4E0C13C5EBF11EAB066F050C4F9AE02.roa (hash: fHpWyfqIpFy0SNih6H+tmGfvSlpkL/B1AUIhQ04weww=)
                          5: E5AA11C2974A11EFAE16EC38C4F9AE02.roa (hash: kJeN/UI655DbN13QHSpXrQh408ELt76DYwlRt2ZSVkA=)
                          6: EC5BF06C8A3411EFBF173E5BC4F9AE02.roa (hash: NmW3Y/m0Qnd+3MAPykcEDAwy2/PhvZXXV1bJp4RTfiw=)
                          7: 2022CF028A2511EF8F560567C4F9AE02.roa (hash: 7DsIuFioPYz3iZVdfli3bbz18O2Gwbs9BU2Is0eqm5Q=)
                          8: E44FF288EE9811EF88F8B953C4F9AE02.roa (hash: YOkeRYmWzfyeD6N+kegajw+1XbrsmV/kSBR1jXFWmA8=)
                          9: 3F2B28B4D94411E98E28CD85C4F9AE02.roa (hash: rsrHr7YKfZgSziRJ4fYTZE3PURFyCHMTrDSz518raFY=)
                          10: 7196A634B0F311E5AB30F151C4F9AE02.roa (hash: SLJ4bVw8/Sq7sVlq+NvVTRm8ROvRMC4fmrNcUaFRRzw=)
                          11: 68356576B0F311E5AB30F151C4F9AE02.roa (hash: DUbx2Fx+t93gx84kMfsEkb62vUQ8QmFeMZs1r67VJwU=)
                          12: 3D7A10E8D94411E98E28CD85C4F9AE02.roa (hash: YnnRd8dXClUSq2ox+Sn+OmT1h0ooTE5RjNlpDC8bvCw=)
                          13: 73464EBCB0F311E5AB30F151C4F9AE02.roa (hash: c0iY9Lu0n3iaEM+4s2nui07Z/TqE/8KaUyZsMqUDCCQ=)
                          14: BDA4E3289A8311EF8E25CE76C4F9AE02.roa (hash: flOC9BgqvfJjOP86rJtUD8YssT26VE7edHVyZu+Czlk=)
                          15: 3E054AE6D94411E98E28CD85C4F9AE02.roa (hash: eoaziQFsYiES3E74o+e3m1yHX51KmYZICtGgOdmxP/A=)
                          16: 40397ED6D94411E98E28CD85C4F9AE02.roa (hash: BhDUCqh173lsvs2Bnbhi7COFz82kD2xNwvdh9F0plhs=)
                          17: 3C670256D94411E98E28CD85C4F9AE02.roa (hash: WnT3cX4WRGpGldQr8iVlQEOarNqbWZCfXBgxVrrlico=)
                          18: 69CB6C488A3111EF85E56411C4F9AE02.roa (hash: 9+WpLfz/8nl9K5wkpOEpS+BWKOe1g8uJlISxyodEmPw=)
                          19: 40E8489ED94411E98E28CD85C4F9AE02.roa (hash: 60EW2fbzOqG92Ix/gO279NK0BBUbrc3vTv6HG90hKwE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
                          rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 15:49:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10331 (0x285b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
        Validity
            Not Before: Sep  4 15:49:33 2025 GMT
            Not After : Sep 11 15:49:33 2025 GMT
        Subject: CN=68b9b50d-ef09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:81:f4:10:f3:95:00:9a:2a:81:58:c1:2b:22:
                    eb:2b:cb:8b:6f:37:69:75:17:6b:d3:1a:71:1a:e5:
                    8b:9b:2b:3e:19:e1:4e:1d:e9:f9:ce:3f:c2:ef:ce:
                    ac:bb:8b:b2:cb:2b:70:67:da:14:fa:3b:04:84:fa:
                    9f:92:35:84:b2:43:05:c5:20:00:ea:51:78:4f:6b:
                    38:e4:9e:8b:1b:e3:ce:4b:79:79:49:0f:25:cf:41:
                    89:40:2e:cb:45:f7:66:85:ad:d4:c2:43:03:b1:1e:
                    6b:ad:ae:1a:c4:c7:3a:d6:03:b2:2e:4b:0e:ef:a8:
                    21:41:dc:48:fd:84:c9:f1:c1:17:31:21:53:bc:8a:
                    86:04:b4:cc:e3:85:ea:7e:0f:05:c5:21:42:f4:37:
                    e9:58:c3:f0:32:a3:24:83:35:9e:e4:d0:de:fb:55:
                    72:83:e5:d1:50:62:a1:3b:9c:0f:75:b1:f0:a5:aa:
                    61:05:61:e8:77:7a:6e:e2:84:00:9b:47:c2:15:a2:
                    c0:7e:75:82:c6:2f:67:70:25:79:a2:c6:bb:50:bc:
                    3b:45:31:1b:8f:c5:7e:c4:71:75:31:1f:e6:9b:e2:
                    d3:dd:84:14:7f:58:f1:d1:87:ec:37:80:b0:29:80:
                    89:4c:9c:d8:e9:aa:b0:14:a4:bd:2f:df:af:c8:8b:
                    03:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DE:43:D9:90:79:20:B9:39:C9:F7:0B:9F:29:D8:AD:80:AA:79:BD
            X509v3 Authority Key Identifier:
                keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:12:ee:6b:f6:6b:de:81:8c:2f:91:23:20:20:8c:b6:9e:e7:
         c1:d4:4b:93:d6:6f:d6:6d:50:e3:c9:cf:9d:59:0f:bb:cf:6a:
         66:c9:64:96:a7:62:15:5e:c4:cb:d7:96:12:97:81:f5:b2:4c:
         93:cf:c7:49:94:58:97:69:35:f9:3b:dd:80:a3:9e:c4:1c:a6:
         70:8e:2d:77:f0:1f:f1:54:5b:58:9c:f0:3c:20:cf:32:c9:7a:
         80:d3:29:69:a4:e0:58:83:72:86:27:50:86:6e:92:4b:ab:94:
         d9:4c:ab:3b:40:16:36:44:be:75:7e:68:f3:ee:53:24:5c:b8:
         0d:db:9d:38:e5:a1:bf:b1:27:9f:fe:b9:a8:3d:87:21:1e:63:
         7e:95:fb:f7:83:b5:80:f4:29:e0:c4:7b:3c:f1:e4:47:70:c7:
         ef:54:3e:18:ac:f3:00:61:15:18:92:6f:78:74:0c:24:20:14:
         09:cc:8f:e6:88:20:79:11:ab:18:cb:1b:c6:6c:63:80:57:3a:
         1e:a6:20:1b:c0:75:9a:6f:e9:d4:c3:46:1e:1f:37:3e:1a:dd:
         df:40:cf:bc:f5:d4:49:88:36:65:6c:c7:06:dc:f0:78:9e:5a:
         39:87:88:ff:a4:0b:0d:87:24:63:63:85:69:5f:58:ed:92:40:
         6a:99:5d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:11:57 2025 by rpki-client