Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft
File:                     FGXcLLcCU-31FM1DdyZi_zu49uA.mft (raw, json)
Hash identifier:          3seKD+WmIiRvol0tUY6lNzHAn8gaqavZiGu2l7jit2o=
Subject key identifier:   D6:85:2F:20:F4:35:26:63:23:4C:3A:1C:F1:B1:D4:B7:0C:FF:E7:EE
Authority key identifier: 14:65:DC:2C:B7:02:53:ED:F5:14:CD:43:77:26:62:FF:3B:B8:F6:E0
Certificate issuer:       /CN=A915280B/serialNumber=1465DC2CB70253EDF514CD43772662FF3BB8F6E0
Certificate serial:       030E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft
Manifest number:          0304
Signing time:             Sun 07 Sep 2025 01:39:17 +0000
Manifest this update:     Sun 07 Sep 2025 01:39:17 +0000
Manifest next update:     Sun 14 Sep 2025 01:39:17 +0000
Files and hashes:         1: FGXcLLcCU-31FM1DdyZi_zu49uA.crl (hash: PQUaLwGiJSbn2V1W1PU7r4HHjapIN0y3tkUi9bRxxLc=)
                          2: 27EECF18EDF811ECBCAF5567C4F9AE02.roa (hash: VrxDW/DTl4sELPDbg6jTEndamNxMaPLt6ONplJztblc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.crl
                          rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 01:39:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 782 (0x30e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915280B, serialNumber=1465DC2CB70253EDF514CD43772662FF3BB8F6E0
        Validity
            Not Before: Sep  7 01:39:17 2025 GMT
            Not After : Sep 14 01:39:17 2025 GMT
        Subject: CN=68bce245-b713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:58:28:dd:fc:74:4c:9d:64:81:64:d1:84:62:
                    f8:48:39:71:e3:16:55:22:06:de:ed:9f:18:ca:0e:
                    d9:ae:13:af:d5:3b:65:0a:4d:df:35:59:0b:e9:a3:
                    55:46:2d:ca:4f:f7:15:81:bf:39:66:65:a6:65:65:
                    c0:94:8f:3d:36:6a:3d:92:94:93:41:cf:48:f9:2a:
                    27:34:95:48:b2:79:c4:59:95:36:db:c9:d5:0e:81:
                    30:9b:19:4d:ed:fa:88:6b:e1:11:a8:0c:54:d8:9e:
                    fe:a6:3d:53:4a:09:7a:87:90:f9:69:7f:6e:39:2e:
                    4c:f2:dc:37:be:0b:0e:ec:b3:84:5b:1f:f4:86:95:
                    61:6b:86:a7:9d:61:63:ed:ab:27:2c:fb:69:f3:c6:
                    6d:4b:2c:48:95:55:37:85:9c:1c:6e:11:0f:d3:f4:
                    5c:70:0a:4f:d6:70:32:fa:dc:d4:ed:16:d5:3e:42:
                    42:2b:8f:c9:a6:ba:6f:c8:fc:9c:88:95:e1:df:71:
                    65:9f:a6:11:f9:cc:0f:ea:6a:bd:b2:b2:1f:8f:48:
                    e5:14:77:d5:a6:2f:d0:24:48:b4:20:d8:d4:03:4b:
                    51:22:06:85:cc:6f:74:cd:e9:1d:63:f3:e1:18:d8:
                    5a:08:c1:b8:b5:2e:f1:c6:4c:4b:40:e2:4b:f0:ef:
                    dd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:85:2F:20:F4:35:26:63:23:4C:3A:1C:F1:B1:D4:B7:0C:FF:E7:EE
            X509v3 Authority Key Identifier:
                keyid:14:65:DC:2C:B7:02:53:ED:F5:14:CD:43:77:26:62:FF:3B:B8:F6:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:e5:fd:1a:ef:b7:c9:08:ac:ae:8e:a0:d6:60:eb:6a:1f:91:
         c4:79:77:10:e4:32:05:0d:c2:19:fc:e4:d0:11:99:69:0b:0f:
         e0:cc:87:a5:08:b1:1b:73:c1:cc:de:4b:5c:58:b1:d2:63:08:
         d7:43:96:e1:a1:12:0c:33:27:74:e7:5a:b1:35:7d:0b:af:ad:
         f2:c4:6b:31:8a:94:36:8f:7e:44:e0:93:d5:18:fc:a0:65:65:
         55:d4:65:0e:6c:0b:e5:da:1b:16:c9:f1:2c:7a:0f:85:46:bb:
         70:bd:7b:56:23:63:82:8a:f7:82:09:94:71:15:d3:7f:36:d5:
         fd:fe:04:ab:24:6f:58:ec:fb:3a:c1:4c:3d:be:10:bc:43:9b:
         a3:ed:9b:4e:25:c7:ee:66:bc:e4:df:7b:9b:bd:65:c9:56:07:
         69:22:68:bb:68:30:36:50:20:7a:57:8d:29:b7:1c:f9:95:a8:
         68:f2:c8:4d:f5:46:f6:42:2a:d4:63:45:68:d6:ee:10:cd:0d:
         40:e0:7a:bd:3e:f9:94:79:e6:48:b5:fc:ce:8a:3b:c4:71:0b:
         b9:65:de:b4:d0:b5:c6:ad:4a:32:dc:35:e6:d6:e3:53:54:90:
         85:d3:21:a1:73:52:89:90:34:ca:e2:de:f3:86:1d:11:4a:e7:
         20:b8:09:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:25:11 2025 by rpki-client