Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.mft
File:                     FSLnXozBo4h_XUiEw2VwnFc0FZU.mft (raw, json)
Hash identifier:          ot8yY5vWLXSiznO6iEaRtnxw3uA3c9SqGz4eETc9do0=
Subject key identifier:   9E:A9:AE:49:B3:E7:92:EF:CF:56:10:C7:60:C2:97:51:38:C4:61:5B
Authority key identifier: 15:22:E7:5E:8C:C1:A3:88:7F:5D:48:84:C3:65:70:9C:57:34:15:95
Certificate issuer:       /CN=A9180913/serialNumber=1522E75E8CC1A3887F5D4884C365709C57341595
Certificate serial:       0514
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSLnXozBo4h_XUiEw2VwnFc0FZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.mft
Manifest number:          0508
Signing time:             Sun 02 Nov 2025 23:39:54 +0000
Manifest this update:     Sun 02 Nov 2025 23:39:54 +0000
Manifest next update:     Sun 09 Nov 2025 23:39:54 +0000
Files and hashes:         1: FSLnXozBo4h_XUiEw2VwnFc0FZU.crl (hash: 8o2QpuBRjrWuphYAmV1VeNbCPZhYlhlDKHDyfVWSyT0=)
                          2: BBE12BE88ACD11EF997F2066C4F9AE02.roa (hash: 68zEBxGXfrQ8sdNOFVU2ZHoivHL+1LfOSFnEvIXLiQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.crl
                          rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSLnXozBo4h_XUiEw2VwnFc0FZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 23:39:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1300 (0x514)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180913, serialNumber=1522E75E8CC1A3887F5D4884C365709C57341595
        Validity
            Not Before: Nov  2 23:39:54 2025 GMT
            Not After : Nov  9 23:39:54 2025 GMT
        Subject: CN=6907ebca-bf5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:68:6c:8a:2a:b7:b1:4f:ce:1d:71:50:3c:60:
                    ec:2c:b3:5d:00:38:d9:e8:fc:01:8e:ef:ec:a2:fc:
                    e3:e0:cc:6f:c0:87:57:e6:96:9c:ba:b7:81:85:33:
                    91:9e:a6:47:86:01:06:67:a8:bc:51:cd:b2:e6:41:
                    95:70:fd:24:8e:78:15:72:30:ff:a4:22:cc:1c:dd:
                    76:04:47:7c:ef:5d:3c:ed:a0:c7:5f:47:43:33:e4:
                    8d:aa:6c:ec:22:3f:c8:ec:64:87:aa:a1:21:d0:59:
                    90:36:36:9d:cc:d2:34:d2:2b:e8:48:4a:aa:3e:7f:
                    91:8b:e8:77:5e:35:7c:50:58:22:0e:ad:7f:e9:01:
                    01:e7:05:d3:ae:98:3c:1f:34:63:b0:d4:5f:59:4d:
                    88:00:ae:7f:61:00:49:c7:06:09:4a:13:3f:b6:8c:
                    b9:48:b2:c9:61:91:f5:82:57:06:a3:e5:e4:a8:31:
                    d6:53:07:4e:f9:61:41:be:95:98:e5:fc:cd:6c:a7:
                    9f:1d:42:14:88:01:4c:2e:19:4f:a5:27:68:1e:49:
                    b3:1e:5e:2b:46:fd:d3:23:91:ee:29:80:eb:6b:1f:
                    83:00:15:50:32:cf:73:bd:dd:78:aa:34:3f:3d:c6:
                    2c:3a:8f:cd:70:03:7f:90:8b:bc:9e:e3:20:ef:47:
                    62:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A9:AE:49:B3:E7:92:EF:CF:56:10:C7:60:C2:97:51:38:C4:61:5B
            X509v3 Authority Key Identifier:
                keyid:15:22:E7:5E:8C:C1:A3:88:7F:5D:48:84:C3:65:70:9C:57:34:15:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSLnXozBo4h_XUiEw2VwnFc0FZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:38:d9:ed:73:62:c5:e4:73:63:7c:b9:b3:dd:f6:1b:3e:ad:
         c0:71:75:be:b8:fa:c2:e1:81:f4:ff:29:54:ed:95:6b:73:95:
         09:08:08:88:e1:63:0b:a0:c7:8a:68:9e:42:b8:ef:68:17:10:
         a1:1c:eb:f7:ec:ba:56:26:ca:14:cd:36:f7:45:eb:ab:a5:15:
         24:bb:cb:56:e9:bb:f9:3c:9e:2d:a4:e5:f8:0a:2b:6d:28:40:
         0f:67:2d:a2:43:4a:fb:8f:0a:ef:40:4d:50:d0:08:3f:a2:7b:
         2b:ad:36:cc:7a:0a:ac:22:27:7c:4d:ca:48:bf:5c:de:b7:7c:
         ae:99:dd:04:dc:27:fe:b4:30:6b:d6:e8:87:54:63:c6:4c:f2:
         c2:5a:4f:3a:a9:c7:ef:dd:56:46:53:2a:c8:79:e3:7d:5a:59:
         00:66:11:24:16:83:89:d8:cc:bc:5f:27:bd:b5:b3:18:0f:9d:
         67:2f:ce:73:36:b0:a3:4e:c7:22:f1:56:73:74:4b:16:65:28:
         fc:96:2a:21:5d:41:0e:e0:3f:6d:dd:4b:6b:8c:96:cb:35:e4:
         af:98:d8:73:71:47:0d:10:12:99:55:cb:bd:d4:89:9b:39:14:
         4d:19:75:0f:af:a8:6b:26:41:44:0d:df:bb:d5:a5:f1:68:e5:
         74:0e:06:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:07:06 2025 by rpki-client