Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
File:                     FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft (raw, json)
Hash identifier:          N40+72xXjEDQ3/TYir7SQQMJnby1qR95S4AIwrOV38c=
Subject key identifier:   3E:CC:21:A0:4D:3C:35:D2:8B:46:CD:CB:86:37:02:9B:5F:EF:8E:84
Authority key identifier: 14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45
Certificate issuer:       /CN=A9173CF2/serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745
Certificate serial:       069C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
Manifest number:          0696
Signing time:             Mon 08 Sep 2025 22:20:39 +0000
Manifest this update:     Mon 08 Sep 2025 22:20:38 +0000
Manifest next update:     Mon 15 Sep 2025 22:20:38 +0000
Files and hashes:         1: FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl (hash: LM7hlRh+oLcERCfPTqTJtJVpXjMBAAEdcqc2tRn5G8c=)
                          2: D9E7CFF681EF11EBAEE9D17AC4F9AE02.roa (hash: c9M9mRbjF0BZcSk0yGj1HQe17Ih56nG/Gq+RFkDxc6g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl
                          rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 22:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1692 (0x69c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173CF2, serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745
        Validity
            Not Before: Sep  8 22:20:38 2025 GMT
            Not After : Sep 15 22:20:38 2025 GMT
        Subject: CN=68bf56b7-177b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:49:66:71:86:82:38:c1:ca:75:2c:e3:61:76:
                    b7:cf:f3:91:54:77:e2:32:5d:ad:13:35:0e:46:c1:
                    0a:3b:3c:52:24:62:84:0d:ba:cf:ac:bd:17:85:ab:
                    82:fa:d1:1a:c6:48:ef:dd:e2:fb:e1:75:30:37:e3:
                    9b:ff:e7:d5:ae:8f:fb:0c:ef:ca:fe:6e:88:21:17:
                    6f:5b:e3:19:44:dc:9e:b3:48:6e:30:9c:72:f6:ce:
                    85:42:b2:50:6e:cd:5c:47:69:a8:d9:32:d6:af:61:
                    89:41:b5:00:1d:86:a5:7e:6a:68:22:97:f8:a7:7a:
                    1e:fb:f0:ec:ff:d1:0e:a3:07:e2:1e:26:37:51:52:
                    6f:01:18:4c:d8:1a:7e:28:ef:30:be:81:b9:25:51:
                    55:20:46:73:6a:48:36:5c:44:00:2d:ed:aa:33:59:
                    4c:f3:f2:3f:f3:9c:21:07:7a:cf:ae:fa:a8:86:f2:
                    62:df:e7:92:e3:93:0e:d4:1c:b4:fa:5f:de:6c:55:
                    13:22:3c:e7:21:13:e9:2e:b1:78:ca:28:38:cc:c2:
                    0c:5b:28:4d:38:5c:8f:95:2d:12:3d:b7:a2:f9:a2:
                    b6:dd:9a:a3:db:8b:1d:2c:3b:5f:ef:a1:c3:e1:84:
                    f7:18:76:23:9b:ab:3d:0f:09:e9:6d:62:a9:39:9c:
                    4a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CC:21:A0:4D:3C:35:D2:8B:46:CD:CB:86:37:02:9B:5F:EF:8E:84
            X509v3 Authority Key Identifier:
                keyid:14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:37:84:ab:74:4e:30:21:29:16:99:fa:0b:be:b1:62:a1:03:
         31:37:2b:62:54:a2:f2:af:67:d6:1b:7a:7f:27:28:a6:ab:35:
         69:ee:d9:8d:91:ff:d2:d5:b5:58:66:39:a9:84:15:e1:d2:a8:
         3f:61:5a:9c:e7:81:ef:d6:d4:46:4a:8d:d5:c5:f6:81:4a:c2:
         4e:68:9b:c9:02:1c:59:3f:a9:81:3c:3a:59:84:04:e4:e6:c5:
         c0:5b:86:98:68:a6:6c:7f:4a:dc:5f:95:e3:2b:f4:ea:fb:45:
         af:a3:24:8e:54:16:98:f3:10:98:8a:63:3f:17:7c:07:f3:3e:
         98:78:e4:3b:87:a7:8a:3d:bc:c3:c6:2a:1d:db:76:52:fc:ec:
         c4:78:44:17:94:9e:52:97:5e:0c:2a:df:79:36:59:64:c2:35:
         42:b7:01:0e:42:9b:17:21:e6:d1:ca:3c:a0:d3:da:82:4a:2a:
         22:e7:76:6a:be:bc:28:cb:0f:84:e3:4c:94:87:5d:06:dd:a6:
         8d:01:8e:6d:cb:2f:63:53:e8:4a:4a:c2:5e:7b:54:c4:9b:0d:
         9f:81:be:6c:6b:c5:07:08:fa:5b:45:85:94:eb:6b:79:d9:da:
         94:95:8f:5f:6a:8a:bb:46:30:31:2d:49:fd:a0:74:6a:02:05:
         76:4d:e6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:37:20 2025 by rpki-client