Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
File:                     _Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft (raw, json)
Hash identifier:          a6l3sQigNuTkycSjB6uVK0DRfzz7lqHgK7Un4UwL+2I=
Subject key identifier:   48:61:B6:69:7E:F7:1F:98:2D:E6:F2:26:58:F5:18:21:44:85:04:0D
Authority key identifier: FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC
Certificate issuer:       /CN=A91C93EE/serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC
Certificate serial:       0CC9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
Manifest number:          0C90
Signing time:             Thu 18 Sep 2025 18:46:17 +0000
Manifest this update:     Thu 18 Sep 2025 18:46:16 +0000
Manifest next update:     Thu 25 Sep 2025 18:46:16 +0000
Files and hashes:         1: _Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl (hash: fCaU5/u6kvCEcsInX7SNh0RyTTxfU2ILc6eXriiL4F4=)
                          2: 34E6B680511A11F0B256FA65C4F9AE02.roa (hash: DotKGlewQf4vCmtjp0W5XPKIyQK3DWXLsRQy4LfbCHQ=)
                          3: B256D8FC479711F09A25BE59C4F9AE02.roa (hash: g0SoJEOW6hbapp+G2W5wkFaJTTHS/dc2FgUbvjsjuIM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl
                          rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 18:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3273 (0xcc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C93EE, serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC
        Validity
            Not Before: Sep 18 18:46:16 2025 GMT
            Not After : Sep 25 18:46:16 2025 GMT
        Subject: CN=68cc5379-55b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:07:d1:5d:95:de:94:0a:54:65:d5:4e:94:78:
                    21:e0:ac:fe:0a:df:d5:f3:e3:49:18:d4:d1:53:cb:
                    42:d2:29:38:41:34:6c:00:40:d9:f0:5f:8b:77:4c:
                    86:28:a1:b0:f7:e9:e5:e5:2d:f5:d5:71:e5:d2:db:
                    6e:ae:39:4e:08:b8:50:75:bf:97:a5:99:5f:e0:12:
                    a2:d8:3f:91:e8:32:31:b6:b0:e2:ea:67:d7:b2:01:
                    3f:8a:60:14:96:14:fd:95:75:35:9c:4c:94:9c:a7:
                    21:e7:0d:ee:83:93:dc:52:9f:b0:a3:91:22:a9:23:
                    99:57:12:75:2b:c9:cd:90:61:36:f1:4c:e1:5f:f3:
                    d1:44:bc:ad:3b:ef:26:52:38:f8:68:25:7b:7c:73:
                    ab:22:fe:2c:72:8d:5f:7b:65:3b:1f:63:a3:4e:aa:
                    9c:26:6b:c3:20:7b:93:03:cf:ff:23:34:a4:57:bb:
                    4d:f8:1b:78:f0:9c:20:bd:e5:df:ef:4b:06:96:a1:
                    7e:50:f0:36:20:b9:c6:c7:5a:cb:a7:a4:d1:4c:14:
                    23:4e:1f:df:86:43:89:31:9f:67:fc:0e:fe:37:9b:
                    32:82:08:f9:24:bd:4e:31:50:2c:92:db:1c:61:75:
                    33:15:1f:7e:01:a0:c8:57:e5:1b:17:b4:9d:8f:33:
                    48:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:61:B6:69:7E:F7:1F:98:2D:E6:F2:26:58:F5:18:21:44:85:04:0D
            X509v3 Authority Key Identifier:
                keyid:FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c2:c7:49:fa:06:62:31:9a:97:4b:c4:60:0a:31:02:55:a0:
         9a:ff:fa:35:7c:60:57:ee:37:cd:82:61:6e:a8:9b:d8:95:05:
         2e:af:b2:0d:46:ff:01:5e:41:62:93:a3:f1:d7:1c:78:74:72:
         19:a5:ba:41:44:bf:26:17:04:ad:01:dc:d9:c1:7e:79:2d:38:
         9b:e6:92:a6:04:b1:24:a9:c8:7c:0c:55:f0:53:68:a2:80:d0:
         77:14:03:db:f3:ba:df:e3:ae:f4:8f:b1:26:45:6b:72:7c:b0:
         3e:69:7a:85:29:e8:ed:05:32:1b:7b:32:cb:d4:8c:ed:c8:ff:
         02:da:20:1a:40:de:aa:99:9d:78:c7:db:7e:5e:d1:ff:d8:6c:
         40:71:96:a3:42:67:ac:0d:eb:89:0c:e0:ee:da:9b:a1:38:e4:
         79:9e:d0:66:0b:3f:cb:cf:d7:71:9c:54:de:fc:08:2d:bd:c3:
         c2:81:b1:45:eb:d6:76:5e:56:b5:95:db:3a:0e:ad:30:d5:16:
         4d:fe:ff:8a:76:b8:f1:a5:f9:19:20:79:f1:5b:f1:e9:5f:07:
         02:70:dc:57:ca:13:6c:e3:fd:2b:fe:2a:ae:e5:b7:11:1a:95:
         2f:fe:e2:9f:bb:23:ea:80:43:99:f6:cb:05:9a:4d:be:3b:12:
         f0:82:05:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:31:36 2025 by rpki-client