Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
File:                     FgxyzFd72N5TouywCYwi81pRqp4.mft (raw, json)
Hash identifier:          n8Rf4EzRho/Ruiw3mtfU/m2ZpooKxTkF9U7W65XXbXs=
Subject key identifier:   55:AE:E9:DF:1E:1C:8E:CC:35:63:5A:9D:EC:F0:B8:0F:4D:6C:3A:ED
Authority key identifier: 16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E
Certificate issuer:       /CN=A91C8066/serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E
Certificate serial:       020C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
Manifest number:          0207
Signing time:             Thu 23 Oct 2025 03:51:23 +0000
Manifest this update:     Thu 23 Oct 2025 03:51:23 +0000
Manifest next update:     Thu 30 Oct 2025 03:51:23 +0000
Files and hashes:         1: FgxyzFd72N5TouywCYwi81pRqp4.crl (hash: CFe2laJrOgEGo2JqEXTCfgxMOJqf/hSd/yvQ6W6B91I=)
                          2: 452D9EF494F811ED85ADE381C4F9AE02.roa (hash: n8+NWSH/0jbCR4W6RjUOoVJVoSERmDVQnQldNxK/jIo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl
                          rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Oct 2025 03:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8066, serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E
        Validity
            Not Before: Oct 23 03:51:23 2025 GMT
            Not After : Oct 30 03:51:23 2025 GMT
        Subject: CN=68f9a63b-3d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:68:9c:d5:c2:7c:29:0c:26:25:56:5b:06:5f:
                    83:6d:86:bb:42:25:cd:97:28:6d:b0:81:2b:c6:e3:
                    24:35:01:50:28:69:c7:9c:c5:cd:da:2e:16:4b:9e:
                    b1:b4:ac:02:c7:0c:2b:b3:b5:09:a7:c6:cc:c9:96:
                    c4:bb:bd:99:47:df:e9:86:79:6a:c5:29:4d:8f:ba:
                    92:5f:f2:e5:62:04:d7:a9:26:28:b4:dc:e5:5a:9f:
                    6c:99:2c:13:64:8c:d6:ed:af:a6:f8:50:b0:05:e8:
                    2a:0c:a8:cb:6b:77:85:1f:29:38:38:f2:64:e0:6c:
                    ce:8c:a8:71:e2:f2:fa:84:7d:b2:78:f1:a1:95:ca:
                    88:0d:b0:49:b3:66:54:98:eb:31:e5:9a:f2:3c:26:
                    66:93:89:d6:bd:4e:13:a2:fd:5d:93:87:ad:b4:91:
                    04:e4:ad:9f:cf:3e:3f:35:1a:d7:a2:5f:ba:05:73:
                    0b:97:bb:1a:28:aa:0c:ed:49:2e:51:47:64:e3:e0:
                    d9:f4:69:a3:60:38:8b:59:de:a9:2c:e6:3f:c8:d8:
                    ed:3d:05:37:de:e9:ff:00:21:05:a0:4e:c7:8a:a3:
                    6b:c6:f9:cb:33:2b:88:ab:d2:61:fe:4a:80:ec:a7:
                    2c:f7:17:14:b5:ee:8c:fc:d1:81:80:62:51:df:b4:
                    c1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AE:E9:DF:1E:1C:8E:CC:35:63:5A:9D:EC:F0:B8:0F:4D:6C:3A:ED
            X509v3 Authority Key Identifier:
                keyid:16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:b7:64:b1:fe:b9:73:2d:dd:d5:54:bd:d3:64:aa:b4:ac:ae:
         93:fa:ab:38:19:6b:24:35:05:29:3c:1a:06:48:dc:e6:9b:1e:
         db:0f:e5:4a:57:b8:d9:d2:3c:ff:af:ad:1e:df:7a:ee:61:2e:
         ae:00:89:60:36:80:88:03:77:26:1e:9f:79:b1:3e:c9:a0:ab:
         d5:6a:97:bc:8d:e1:b3:1e:e1:22:00:37:8a:6e:ba:30:9f:37:
         fd:e0:0d:d2:2a:a1:06:7a:12:2b:43:25:eb:04:84:ac:88:09:
         15:bd:11:22:68:49:7d:c0:83:09:3b:a0:b8:8d:f1:f9:fb:3a:
         28:8d:e1:ec:f7:b9:95:a5:82:47:89:2b:7f:8c:94:ce:77:5f:
         ea:d4:5d:38:bf:32:fc:98:76:6a:67:f0:c9:20:cf:ae:35:f9:
         a5:92:d7:f0:62:e0:1d:66:64:a0:28:e0:ce:8b:a9:d6:86:e2:
         21:d7:bd:e7:e2:f0:93:a5:57:05:22:be:02:24:34:58:af:e5:
         64:d8:04:26:b5:aa:98:b6:6d:be:56:b6:69:bd:7f:0e:b1:dd:
         6f:31:14:c2:ef:cb:41:2a:50:83:21:9f:23:15:fa:0e:e1:0b:
         ef:83:08:bb:27:d2:24:ba:14:31:64:a7:ad:88:4a:b2:7b:7c:
         f5:8c:99:7a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzgwNjYxMTAvBgNVBAUTKDE2MEM3MkNDNTc3QkQ4REU1M0EyRUNCMDA5OEMyMkYz
NUE1MUFBOUUwHhcNMjUxMDIzMDM1MTIzWhcNMjUxMDMwMDM1MTIzWjAYMRYwFAYD
VQQDEw02OGY5YTYzYi0zZDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAumic1cJ8KQwmJVZbBl+DbYa7QiXNlyhtsIErxuMkNQFQKGnHnMXN2i4WS56x
tKwCxwwrs7UJp8bMyZbEu72ZR9/phnlqxSlNj7qSX/LlYgTXqSYotNzlWp9smSwT
ZIzW7a+m+FCwBegqDKjLa3eFHyk4OPJk4GzOjKhx4vL6hH2yePGhlcqIDbBJs2ZU
mOsx5ZryPCZmk4nWvU4Tov1dk4ettJEE5K2fzz4/NRrXol+6BXMLl7saKKoM7Uku
UUdk4+DZ9GmjYDiLWd6pLOY/yNjtPQU33un/ACEFoE7HiqNrxvnLMyuIq9Jh/kqA
7Kcs9xcUte6M/NGBgGJR37TB2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWu6d8e
HI7MNWNanezwuA9NbDrtMB8GA1UdIwQYMBaAFBYMcsxXe9jeU6LssAmMIvNaUaqe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODA2Ni8xOEE1MTI0ODk0
RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJONVRvdXl3Q1l3aTgxcFJx
cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZneHl6RmQ3Mk41VG91eXdDWXdpODFwUnFwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
ODA2Ni8xOEE1MTI0ODk0RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJO
NVRvdXl3Q1l3aTgxcFJxcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDIt2Sx/rlzLd3VVL3TZKq0rK6T+qs4GWskNQUpPBoGSNzmmx7bD+VK
V7jZ0jz/r60e33ruYS6uAIlgNoCIA3cmHp95sT7JoKvVape8jeGzHuEiADeKbrow
nzf94A3SKqEGehIrQyXrBISsiAkVvREiaEl9wIMJO6C4jfH5+zoojeHs97mVpYJH
iSt/jJTOd1/q1F04vzL8mHZqZ/DJIM+uNfmlktfwYuAdZmSgKODOi6nWhuIh173n
4vCTpVcFIr4CJDRYr+Vk2AQmtaqYtm2+VrZpvX8Osd1vMRTC78tBKlCDIZ8jFfoO
4Qvvgwi7J9IkuhQxZKetiEqye3z1jJl6
-----END CERTIFICATE-----
Generated at Sat Oct 25 03:35:07 2025 by rpki-client