Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.mft
File:                     FSLnXozBo4h_XUiEw2VwnFc0FZU.mft (raw, json)
Hash identifier:          l347PJolD6i5NHhuWF+GOdwpnwNzmp7006zEQxva5X0=
Subject key identifier:   2F:EB:3E:03:99:71:82:A9:EB:1B:E8:44:6B:E0:48:58:6C:DC:3F:DD
Authority key identifier: 15:22:E7:5E:8C:C1:A3:88:7F:5D:48:84:C3:65:70:9C:57:34:15:95
Certificate issuer:       /CN=A9180913/serialNumber=1522E75E8CC1A3887F5D4884C365709C57341595
Certificate serial:       04EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSLnXozBo4h_XUiEw2VwnFc0FZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.mft
Manifest number:          04E3
Signing time:             Wed 20 Aug 2025 23:55:22 +0000
Manifest this update:     Wed 20 Aug 2025 23:55:22 +0000
Manifest next update:     Wed 27 Aug 2025 23:55:21 +0000
Files and hashes:         1: FSLnXozBo4h_XUiEw2VwnFc0FZU.crl (hash: U8K2Yd/FCzqvoXjrT79CZieYOQKxE4f+dg1DUHqtwDs=)
                          2: BBE12BE88ACD11EF997F2066C4F9AE02.roa (hash: 68zEBxGXfrQ8sdNOFVU2ZHoivHL+1LfOSFnEvIXLiQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.crl
                          rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSLnXozBo4h_XUiEw2VwnFc0FZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 23:55:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1263 (0x4ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180913, serialNumber=1522E75E8CC1A3887F5D4884C365709C57341595
        Validity
            Not Before: Aug 20 23:55:22 2025 GMT
            Not After : Aug 27 23:55:21 2025 GMT
        Subject: CN=68a6606a-f9e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ca:de:89:72:dd:1e:47:16:d5:e1:11:53:e3:
                    df:05:85:ff:05:2a:0c:bc:95:66:f9:39:71:31:ee:
                    95:2f:cf:0f:3b:4f:3b:a0:23:81:97:57:65:8e:59:
                    33:26:0c:0d:48:48:10:2e:6d:f8:67:d9:cb:69:2a:
                    03:f8:05:72:6c:5b:87:8b:65:24:80:2a:b3:d1:61:
                    07:3a:fd:59:f4:37:95:02:4f:02:9c:92:a6:93:d4:
                    84:2b:a0:08:39:92:ea:84:8f:c7:a2:0c:8a:07:40:
                    45:2b:15:58:9e:2b:8b:d0:0b:47:62:27:17:25:b0:
                    c3:cd:88:66:e2:ea:d4:fd:03:7f:55:6c:64:e7:df:
                    f3:4a:04:40:60:02:86:13:cc:32:16:64:a8:7d:84:
                    26:b4:fe:8e:f8:4a:d6:fa:de:9f:1f:83:27:56:3c:
                    27:81:4f:dc:68:5c:dc:18:08:19:60:34:af:47:31:
                    6d:a6:0e:07:83:46:85:42:4c:4b:de:d3:7c:1c:7f:
                    e4:ca:dc:0f:bc:7a:8b:99:d2:90:b3:d3:c0:22:04:
                    db:1c:5a:47:5f:5d:f2:52:a5:bf:e7:00:2c:c1:12:
                    bc:2a:df:88:c2:2f:5c:b5:01:59:2b:39:4e:20:3c:
                    17:bd:d2:7f:6d:6d:28:7c:a7:4a:01:33:d2:19:dc:
                    52:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EB:3E:03:99:71:82:A9:EB:1B:E8:44:6B:E0:48:58:6C:DC:3F:DD
            X509v3 Authority Key Identifier:
                keyid:15:22:E7:5E:8C:C1:A3:88:7F:5D:48:84:C3:65:70:9C:57:34:15:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSLnXozBo4h_XUiEw2VwnFc0FZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:1a:d7:7d:f5:57:72:cc:b5:a1:ea:da:32:42:cf:a9:2c:10:
         b9:88:d7:a3:10:ea:4a:cf:14:47:00:bc:88:a9:29:4e:73:1c:
         87:16:18:12:33:31:34:33:a6:68:0b:d7:13:e3:0e:1b:dd:99:
         3a:99:d4:a5:2e:b0:a3:31:27:59:9f:a4:c5:1e:a2:27:48:e4:
         b7:9c:5b:ef:ab:d0:14:42:25:8e:11:06:11:cc:c0:fa:d2:e6:
         ad:26:b4:fc:9d:88:d7:fd:92:09:65:4c:df:82:40:07:39:5a:
         33:98:2d:ad:94:0f:c2:bd:d9:2f:8b:56:d1:c5:b9:0d:46:d3:
         97:df:c2:a7:86:f4:33:bf:e2:6f:3c:2e:1e:1b:de:71:8c:ec:
         b6:10:30:ba:10:2d:c0:48:4a:c1:be:e0:53:e0:2b:15:6a:00:
         bf:75:d7:2d:90:28:55:f1:29:5c:1a:4a:10:a1:b6:7a:e8:e6:
         7a:6d:fc:b4:1c:07:1f:37:ea:02:1c:5e:6b:4a:16:61:9c:8f:
         ab:e4:88:fe:ef:2e:c5:20:23:ee:fb:a9:75:11:d6:78:16:06:
         d7:67:33:68:16:a9:77:94:d5:2a:84:88:63:36:75:5a:02:1b:
         09:51:73:09:e4:f4:8d:c7:ff:f0:54:eb:31:34:f0:de:03:30:
         78:79:1d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:27:15 2025 by rpki-client