Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft
File:                     fSGgNfHk9MpCeHMKwuUHXbIxG08.mft (raw, json)
Hash identifier:          Xki9kXHk248OE7cuhCxGZ8QKWIq1ZB9O/N6WE7HSRNU=
Subject key identifier:   21:9F:54:87:1E:F0:87:1A:09:BB:39:1B:FF:83:19:82:6B:0C:F5:CA
Authority key identifier: 7D:21:A0:35:F1:E4:F4:CA:42:78:73:0A:C2:E5:07:5D:B2:31:1B:4F
Certificate issuer:       /CN=A916B826/serialNumber=7D21A035F1E4F4CA4278730AC2E5075DB2311B4F
Certificate serial:       0A46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft
Manifest number:          0A3D
Signing time:             Thu 04 Sep 2025 19:58:34 +0000
Manifest this update:     Thu 04 Sep 2025 19:58:33 +0000
Manifest next update:     Thu 11 Sep 2025 19:58:33 +0000
Files and hashes:         1: fSGgNfHk9MpCeHMKwuUHXbIxG08.crl (hash: OshexzJt/hy2jesm1QXjXhsAQCZEujzCAX8bIGLe1Ww=)
                          2: 705B0F54743911EAA55F0482C4F9AE02.roa (hash: dtGf9lHKD+XSra1Ic0YW/IxEbS3xgcrQOVyMLgE54Qo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.crl
                          rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 19:58:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2630 (0xa46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B826, serialNumber=7D21A035F1E4F4CA4278730AC2E5075DB2311B4F
        Validity
            Not Before: Sep  4 19:58:33 2025 GMT
            Not After : Sep 11 19:58:33 2025 GMT
        Subject: CN=68b9ef69-db62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:97:25:e9:74:91:02:ab:21:63:bb:ce:8c:e9:
                    50:a8:54:b9:ca:d7:bc:94:26:f2:87:d8:5b:2c:89:
                    e0:87:1c:4f:46:46:5a:90:c7:fa:11:1a:e7:76:7e:
                    03:04:15:b8:1d:47:71:88:bd:04:b8:82:27:ed:5c:
                    86:1d:2f:44:61:b2:39:2a:e0:5f:3e:01:c2:e9:dd:
                    09:a4:86:48:93:4d:81:5f:c7:ed:b6:d3:64:5a:2e:
                    4f:c0:c6:93:30:4e:b3:63:ab:92:6d:4e:12:11:7b:
                    c9:ed:d8:e8:ce:30:f3:b3:ed:8c:c6:56:81:a6:72:
                    34:2c:4c:52:9a:e2:9d:1e:ca:b5:59:57:3d:d9:3b:
                    80:8e:6d:e4:d4:e9:b3:ca:69:27:b4:ba:39:bf:32:
                    99:e6:0e:22:73:4f:df:4a:14:49:18:a7:75:0a:f6:
                    be:8b:0e:d4:b0:65:c8:4e:5d:47:2d:d9:e1:4c:e6:
                    dd:00:6a:62:85:58:10:9c:32:9e:90:69:85:cc:d3:
                    37:7d:31:cf:dd:88:f8:f8:71:d1:a5:28:82:11:c0:
                    49:55:59:7c:33:24:83:f4:7f:85:62:59:db:5d:56:
                    ce:0e:5b:fd:d7:8c:68:99:59:97:5c:92:74:ee:ce:
                    49:0b:d7:d4:3d:2f:c8:be:87:a7:17:7f:b5:51:70:
                    61:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9F:54:87:1E:F0:87:1A:09:BB:39:1B:FF:83:19:82:6B:0C:F5:CA
            X509v3 Authority Key Identifier:
                keyid:7D:21:A0:35:F1:E4:F4:CA:42:78:73:0A:C2:E5:07:5D:B2:31:1B:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:66:fa:57:ed:06:e5:32:6e:cd:9a:be:9c:33:29:d0:c0:8c:
         56:e0:58:4e:47:df:9f:89:f7:15:8f:a7:a0:71:31:b8:10:99:
         6e:87:a3:ab:31:ad:65:cc:97:b3:6b:fa:04:c9:f9:a4:f8:ad:
         35:40:81:48:b9:38:ee:db:e1:7a:3a:7b:3c:56:01:4b:1f:2f:
         32:e8:9c:8c:0a:44:12:71:22:62:6d:92:9f:99:09:68:34:0b:
         b4:f8:2d:e1:f6:c4:cf:04:38:e7:c6:39:dc:6c:75:4e:23:9a:
         6a:8a:21:47:e4:2c:4e:13:86:82:bd:81:76:da:37:d3:fe:44:
         4e:1e:91:d0:bd:e6:31:47:25:75:dc:8a:1a:2d:27:82:6c:1b:
         98:f1:c3:af:97:1f:c2:bd:63:13:f4:bb:d1:38:bd:05:6a:e3:
         6b:82:d0:ab:67:7a:1f:d4:37:aa:25:42:ba:40:90:e6:d1:d5:
         65:8a:f6:b6:97:90:64:bf:a1:7d:d6:5c:54:bf:d5:85:b3:54:
         2f:ee:fb:66:2a:63:c5:0f:d7:15:a9:90:74:7d:da:23:81:eb:
         87:fa:d4:49:c8:77:9d:8d:de:77:54:fe:a9:c0:44:58:fe:22:
         27:1e:19:62:44:fd:75:62:47:ac:c0:72:14:66:50:64:f3:97:
         13:62:5d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 15:30:48 2025 by rpki-client