Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
File:                     FeAstOfcuwrM4igRnP-ANDhil78.mft (raw, json)
Hash identifier:          yPfT8tOgrJdh12NiSIUF78L00wAVga72Nx9bVKMK9gI=
Subject key identifier:   97:C2:C6:B3:F3:D4:AB:3C:D9:2E:63:FE:D4:3E:1A:06:9A:A0:2B:5E
Authority key identifier: 15:E0:2C:B4:E7:DC:BB:0A:CC:E2:28:11:9C:FF:80:34:38:62:97:BF
Certificate issuer:       /CN=A91BC15C/serialNumber=15E02CB4E7DCBB0ACCE228119CFF8034386297BF
Certificate serial:       34BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
Manifest number:          34BD
Signing time:             Thu 18 Sep 2025 15:10:06 +0000
Manifest this update:     Thu 18 Sep 2025 15:10:05 +0000
Manifest next update:     Thu 25 Sep 2025 15:10:05 +0000
Files and hashes:         1: FeAstOfcuwrM4igRnP-ANDhil78.crl (hash: 630m1dkE/VUb0N4RLb+Y7UlLygncdYmxq/TUmcC+8tA=)
                          2: A88B0898EC9911EE9627923CC4F9AE02.roa (hash: QO9VCVg4JBZYD4qSn+hc8302M9oNt2/POhltCbyhtbQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.crl
                          rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 15:10:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13503 (0x34bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC15C, serialNumber=15E02CB4E7DCBB0ACCE228119CFF8034386297BF
        Validity
            Not Before: Sep 18 15:10:05 2025 GMT
            Not After : Sep 25 15:10:05 2025 GMT
        Subject: CN=68cc20cd-7a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:27:e8:f2:9f:23:ce:c9:16:e8:4f:97:c3:0a:
                    e2:ed:95:ab:7f:21:29:d0:8e:6c:73:83:6f:ff:0e:
                    8a:75:92:e7:7a:82:4a:a8:b5:2a:7b:6c:7a:cf:67:
                    d8:2d:6d:28:e8:ab:c9:9a:6f:5a:b3:13:82:4d:d3:
                    f9:20:f3:c2:91:f4:b2:e3:97:2b:81:1a:be:25:e7:
                    5f:53:9a:56:57:36:75:d5:06:c3:ca:d0:00:6f:e0:
                    16:b7:1c:36:21:78:24:59:7b:2a:bb:71:9a:4c:2d:
                    de:bc:20:39:e9:d0:bc:62:a1:f0:7b:01:cf:1c:f8:
                    9b:16:ee:92:cf:be:fa:74:b0:06:e2:15:7c:57:84:
                    27:c2:ed:b7:3b:a0:69:0c:c3:14:72:2b:44:ec:33:
                    ed:20:9c:fb:4a:6a:43:d7:bc:66:7d:e0:28:49:00:
                    d5:fe:35:79:cc:f8:e5:a1:8e:0b:bc:60:bd:8b:02:
                    43:74:20:3f:b0:79:01:6f:b2:0a:02:5e:0c:5e:d6:
                    a9:74:15:6e:21:5b:07:06:f6:48:44:a1:ad:2f:65:
                    b6:c5:a3:24:5a:5a:7e:a2:da:bc:cb:05:5c:8b:2b:
                    12:db:48:fc:d2:c9:5e:c7:6c:54:9e:76:0e:b1:af:
                    fb:05:d0:9f:fe:68:4a:c8:97:48:fc:60:3c:4c:54:
                    00:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C2:C6:B3:F3:D4:AB:3C:D9:2E:63:FE:D4:3E:1A:06:9A:A0:2B:5E
            X509v3 Authority Key Identifier:
                keyid:15:E0:2C:B4:E7:DC:BB:0A:CC:E2:28:11:9C:FF:80:34:38:62:97:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:92:b8:a6:ff:38:dd:67:19:59:dc:eb:59:a7:ff:2c:48:0c:
         68:f7:ed:ff:ae:11:9c:06:f4:f7:94:ad:eb:20:96:be:52:8d:
         32:cf:f2:a6:a0:66:2b:1d:3b:b9:d6:91:f4:60:b2:de:f8:29:
         d6:c4:a4:96:3a:3f:04:9d:16:61:70:9c:fa:4f:c7:9d:9c:82:
         45:c3:3c:83:0b:f6:28:de:78:33:94:03:9c:c3:fc:9e:eb:53:
         0e:e6:e6:a0:bf:8f:c7:95:e1:67:26:8a:8a:8f:b3:80:47:2e:
         98:56:50:99:22:65:2c:ee:01:95:12:bc:4e:83:e3:17:66:19:
         34:79:e2:c8:1c:8c:44:0d:67:24:f6:c1:1e:55:ba:a5:ec:cf:
         0a:b7:98:59:cc:64:5f:05:ff:46:76:b1:84:f5:23:dc:ce:ab:
         93:bc:9a:f9:e0:31:02:b0:f5:9a:14:ac:3f:c9:c4:e8:78:95:
         1a:d4:bf:f2:f9:24:0f:c6:3b:2f:a0:de:4f:68:0f:93:ca:59:
         b3:54:97:58:b0:df:68:40:d2:f2:c4:07:a9:db:6f:04:8c:24:
         14:f5:a5:dc:78:37:68:48:7b:c2:b3:79:c5:62:d8:29:d1:c7:
         50:e3:67:07:df:8d:c8:bd:77:20:5d:1d:1e:a6:e6:c2:60:b5:
         58:f6:bd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 13:43:12 2025 by rpki-client