Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft
File:                     FMR1z9KLd-wRUsLvM-XkPhdawiE.mft (raw, json)
Hash identifier:          kMkTSrD3L9xUIjbN8k8BC+crCfBHkYOSmDCM7uJrajo=
Subject key identifier:   4E:AF:5A:97:82:13:17:88:79:D4:68:21:BB:B2:01:0F:3A:60:30:A9
Authority key identifier: 14:C4:75:CF:D2:8B:77:EC:11:52:C2:EF:33:E5:E4:3E:17:5A:C2:21
Certificate issuer:       /CN=A9180542/serialNumber=14C475CFD28B77EC1152C2EF33E5E43E175AC221
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMR1z9KLd-wRUsLvM-XkPhdawiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft
Manifest number:          1391
Signing time:             Mon 08 Sep 2025 17:57:42 +0000
Manifest this update:     Mon 08 Sep 2025 17:57:42 +0000
Manifest next update:     Mon 15 Sep 2025 17:57:42 +0000
Files and hashes:         1: FMR1z9KLd-wRUsLvM-XkPhdawiE.crl (hash: sIbyvuQUS/7VJnskoBekK3K15R4A6up/pCPLr+nmU4s=)
                          2: 07F7821E890011EEB1D8307EC4F9AE02.roa (hash: Ex+6JUYUT1fn58MXzUbTsKkSfKCLrTn1oSCE194tkqo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.crl
                          rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMR1z9KLd-wRUsLvM-XkPhdawiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 17:57:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180542, serialNumber=14C475CFD28B77EC1152C2EF33E5E43E175AC221
        Validity
            Not Before: Sep  8 17:57:42 2025 GMT
            Not After : Sep 15 17:57:42 2025 GMT
        Subject: CN=68bf1916-06c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:79:33:d3:58:4e:8d:e4:9a:d1:34:b8:6a:81:
                    c3:af:3e:e3:6d:ec:6d:b1:a2:90:8b:1c:18:60:a1:
                    c9:12:c9:d1:01:e6:41:f0:55:36:d5:9e:e9:0b:4e:
                    89:82:86:4e:91:e3:35:c1:1a:6b:57:09:c2:65:23:
                    63:1d:ca:10:5d:28:3f:ad:03:1e:59:30:8d:33:67:
                    75:a0:e6:6d:f1:aa:df:e7:2f:14:cf:9c:3f:9f:af:
                    17:cc:65:c8:0c:43:11:0a:b9:f4:05:37:55:7b:ca:
                    a4:c2:94:fd:95:0f:80:7a:4d:d9:9a:62:f2:dc:a1:
                    c9:68:75:5a:a4:64:02:4b:40:61:a4:57:bc:5d:e4:
                    60:d7:ff:b4:94:ba:fe:4e:66:fa:53:5a:32:9d:01:
                    30:e3:97:4f:88:3a:26:ef:5e:8b:6e:9a:cc:49:74:
                    f5:41:98:62:b2:96:75:06:1d:51:bd:77:7a:2a:3b:
                    eb:99:84:8c:b6:65:67:cb:35:b2:02:f4:1b:f8:36:
                    24:62:80:c3:aa:e8:71:9d:8c:09:51:25:6e:1c:ac:
                    12:5d:53:f1:d4:e8:aa:57:1a:fb:e6:e4:fa:66:d9:
                    eb:e0:c2:01:0e:bc:f0:d7:83:3e:21:86:2e:f4:65:
                    fe:36:e0:a2:69:f0:78:6a:c8:33:b0:6f:f6:61:36:
                    0e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AF:5A:97:82:13:17:88:79:D4:68:21:BB:B2:01:0F:3A:60:30:A9
            X509v3 Authority Key Identifier:
                keyid:14:C4:75:CF:D2:8B:77:EC:11:52:C2:EF:33:E5:E4:3E:17:5A:C2:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMR1z9KLd-wRUsLvM-XkPhdawiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:68:56:d8:6f:db:3e:2c:cb:6e:4e:15:81:fb:58:54:0a:f6:
         6b:d8:bc:a3:10:9e:38:69:f7:6a:62:1f:27:8c:08:cc:e7:63:
         98:68:9f:50:ae:59:db:49:a8:de:88:10:07:49:1e:9f:5d:95:
         d5:52:b6:7c:cc:15:cf:eb:c8:9b:c9:15:3c:27:d9:60:db:69:
         5f:f9:fe:18:43:d8:e7:0f:16:e1:82:6a:48:4d:c3:94:40:83:
         e5:4f:7a:ae:5e:91:e4:b7:62:c6:c3:dc:58:27:c7:4a:78:d6:
         a8:7f:ea:d1:5f:80:fd:e4:40:be:da:14:3c:3d:c8:d6:4b:b0:
         ee:6d:79:e3:d4:78:a3:34:24:88:3a:e4:a0:02:47:e3:b7:8e:
         75:e6:13:ed:52:87:a5:04:d1:0e:d8:6b:61:4c:1b:df:cf:61:
         fb:74:ec:da:ea:0a:9e:83:2a:8e:50:43:8c:b9:b9:84:36:27:
         75:bc:18:53:2b:54:cb:8c:59:ed:4c:aa:7a:5d:11:3e:db:b8:
         3d:c5:a0:0f:04:71:31:04:64:33:4d:ac:61:da:00:a4:12:e4:
         02:35:22:85:52:5e:49:ad:82:c7:9c:fd:2a:72:18:6e:6f:a1:
         1f:c4:05:a7:26:bc:dc:c1:f5:3b:4e:a1:df:53:55:be:fd:cd:
         92:2d:86:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:11:38 2025 by rpki-client