Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft
File:                     ft761lb9iDJvbfriSHAQWAQCo18.mft (raw, json)
Hash identifier:          8/7Et1R4G1kv2T659BZhQ2ahTYvLM1E2chHqKFUxvso=
Subject key identifier:   DF:FF:95:14:31:62:7F:08:CB:C0:98:00:A5:B1:6E:D6:12:93:9A:DE
Authority key identifier: 7E:DE:FA:D6:56:FD:88:32:6F:6D:FA:E2:48:70:10:58:04:02:A3:5F
Certificate issuer:       /CN=A91D9785/serialNumber=7EDEFAD656FD88326F6DFAE2487010580402A35F
Certificate serial:       1A49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft
Manifest number:          1A34
Signing time:             Thu 18 Sep 2025 16:29:15 +0000
Manifest this update:     Thu 18 Sep 2025 16:29:15 +0000
Manifest next update:     Thu 25 Sep 2025 16:29:15 +0000
Files and hashes:         1: ft761lb9iDJvbfriSHAQWAQCo18.crl (hash: exODEnRf9UE9z0+pCgedCiAhkrDwMGXetyRfMIxfbNs=)
                          2: CBCD905AA6E811EFB43BBB4EC4F9AE02.roa (hash: /HeNZUmasiA1sFyQ07qK6IR+x8tI1Ek4b4MMz3sVfn8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.crl
                          rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 16:29:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6729 (0x1a49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9785, serialNumber=7EDEFAD656FD88326F6DFAE2487010580402A35F
        Validity
            Not Before: Sep 18 16:29:15 2025 GMT
            Not After : Sep 25 16:29:15 2025 GMT
        Subject: CN=68cc335b-15b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9b:18:67:aa:5c:98:08:52:d7:18:32:b6:c5:
                    d7:b3:8b:1c:51:bd:2c:70:5c:c7:cb:d6:9a:8c:a0:
                    4b:9d:b6:57:1d:cd:09:53:86:1f:71:21:0a:20:0e:
                    ad:03:4e:f0:ae:40:9b:46:b1:3a:b6:04:f9:2f:0e:
                    c5:dc:cd:a1:e4:77:8d:c7:75:ce:a2:27:32:aa:2a:
                    3f:c0:42:c4:53:dd:96:d4:51:3b:4c:aa:67:b7:5c:
                    66:fb:a2:85:85:4d:e3:d2:94:c1:1d:81:ec:32:cf:
                    1f:ee:60:cc:3b:fe:42:ec:f7:95:ce:dd:09:29:55:
                    64:21:32:2c:bf:3e:73:d7:41:ab:c7:25:44:84:04:
                    7f:d2:88:05:19:26:f8:77:39:91:27:cb:b9:ab:ee:
                    bb:84:dc:94:eb:29:df:b3:2f:aa:20:13:e7:63:59:
                    14:32:b8:f8:97:07:dd:11:19:17:e9:5c:09:6f:48:
                    b2:20:e3:a2:62:32:19:c3:6c:51:39:33:b2:fc:f0:
                    cd:04:75:1b:29:5e:84:fb:9f:37:a9:05:24:7e:25:
                    59:02:72:3e:26:bd:79:84:a9:e1:7c:4a:a5:85:31:
                    d2:93:41:35:c4:bb:1b:4b:af:07:63:4b:c6:67:f3:
                    9c:9e:70:04:bd:de:bf:85:4f:ec:13:c8:e8:fa:4d:
                    7a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FF:95:14:31:62:7F:08:CB:C0:98:00:A5:B1:6E:D6:12:93:9A:DE
            X509v3 Authority Key Identifier:
                keyid:7E:DE:FA:D6:56:FD:88:32:6F:6D:FA:E2:48:70:10:58:04:02:A3:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:8d:f0:12:24:31:e7:12:26:1b:c3:71:87:5e:10:c6:70:ac:
         fd:1d:6e:77:a5:a5:c3:2d:1d:37:a8:23:ce:30:c6:ef:8a:dd:
         4b:50:30:4b:27:59:01:ab:54:c6:05:73:e5:b8:cd:22:20:0c:
         f6:07:b2:95:8a:14:b5:be:88:b3:a2:93:12:81:2a:ae:c3:a3:
         ac:a5:dd:ea:1e:71:3c:0f:31:7d:5c:44:ea:e5:e6:56:76:e0:
         de:97:d0:f6:f3:af:fc:50:3e:c5:24:d8:db:1a:95:4b:49:8a:
         f5:54:30:96:f8:4f:be:4f:a0:5c:1d:b8:25:48:bd:08:cd:13:
         63:12:f8:02:f3:61:50:34:1c:52:be:8b:38:7d:0e:8f:74:b7:
         6f:1d:6f:1f:9d:b8:c5:d7:27:e2:6c:cf:d1:43:d9:4d:f0:62:
         6b:61:d1:9e:f0:27:e9:3f:b1:e6:a0:e4:30:b5:cf:1c:d4:7c:
         9a:58:44:2c:63:af:e6:01:27:28:cd:60:6b:ac:ef:4e:b4:b9:
         d0:e6:5a:74:c4:c3:fb:ad:7c:40:90:9a:cb:81:14:59:f7:da:
         f8:f8:68:ca:99:04:cd:ac:55:03:33:36:63:37:a9:18:5f:e1:
         69:01:9a:db:b1:72:9b:4f:4c:2f:45:2a:c4:f8:b3:0c:08:cc:
         9b:ad:7f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 21:37:34 2025 by rpki-client