Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
File:                     5_fdQJKCmOyeymRGoYSjWaPtXf4.mft (raw, json)
Hash identifier:          ceW+d0SZRmFGyY6wLKgOHrjQrwMgBaLH+rriR9WuDR8=
Subject key identifier:   DF:D0:12:C6:B0:8F:A0:00:AC:22:F0:2B:A4:F9:7E:DE:78:F4:07:E2
Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
Certificate issuer:       /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Certificate serial:       027A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
Manifest number:          026F
Signing time:             Fri 05 Sep 2025 02:06:31 +0000
Manifest this update:     Fri 05 Sep 2025 02:06:31 +0000
Manifest next update:     Fri 12 Sep 2025 02:06:31 +0000
Files and hashes:         1: 5_fdQJKCmOyeymRGoYSjWaPtXf4.crl (hash: acdwzCZ3PRAj52CWr4kSc+ZS2OAxRedvUsPs9jt0/WY=)
                          2: 81087EBA66EE11F0B7640387C4F9AE02.roa (hash: QFoEv4EUPu7ZByEo2FPWmM0j6Axf46LzGtXSA8Ozj4E=)
                          3: D455E69C623511F0B0F5155FC4F9AE02.roa (hash: FJRdymd8wZbvTsi6HMqdNDE91aX5F6UwCVSReU3zMAo=)
                          4: 7B9AF6D818F111F0A3CFBB17C4F9AE02.roa (hash: noXWIw2uCpk5qYLhf+pn+IMp6jTiBvJiADwyhYAjo2I=)
                          5: AAF361C0D18B11EF810E8B66C4F9AE02.roa (hash: w12orzg2QI/DnMwGWqRtnSkszoQETfTmbyGE/vvJi2w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
                          rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 02:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 634 (0x27a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE7DF, serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
        Validity
            Not Before: Sep  5 02:06:31 2025 GMT
            Not After : Sep 12 02:06:31 2025 GMT
        Subject: CN=68ba45a7-d87a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dd:10:21:c9:ba:d1:30:93:a4:1c:66:47:d2:
                    0f:fc:0a:0a:71:74:71:1b:ca:d0:89:9d:45:e2:1b:
                    a6:11:d3:2b:3d:2b:1e:4a:b3:ec:87:0b:ca:a1:e0:
                    04:65:4f:ea:b3:a7:2d:fb:01:7f:ea:43:52:3c:93:
                    0f:de:43:64:8d:8e:88:30:ed:a4:e9:5d:58:b4:81:
                    ee:dc:6d:52:08:42:75:53:0b:f4:32:96:df:0a:a3:
                    21:88:96:d3:6c:52:c6:61:5a:da:6e:64:6d:62:91:
                    fa:38:a1:aa:73:76:2e:01:f7:f7:2f:22:bf:fc:d2:
                    88:08:5a:3e:04:81:2a:b8:6f:00:67:e5:44:15:f9:
                    a7:93:13:45:48:4e:b6:2e:b7:e3:1b:5e:12:63:bd:
                    65:c2:fa:98:c6:82:af:9b:f5:f6:f3:6d:64:79:f0:
                    0c:c0:c5:fd:2b:0d:57:8e:3f:16:7d:b8:c1:53:35:
                    ae:dc:67:22:94:70:f1:29:c6:14:64:57:05:0d:dd:
                    d6:93:b8:18:f1:cd:f0:15:ce:da:2d:3f:83:62:ed:
                    eb:46:b0:a1:b2:8c:f2:29:68:a6:33:96:f3:1a:5b:
                    7d:3e:58:1c:07:81:dd:c3:60:64:33:a2:d1:bd:35:
                    22:56:f7:24:09:de:4d:8a:37:6a:80:cf:fe:62:91:
                    28:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D0:12:C6:B0:8F:A0:00:AC:22:F0:2B:A4:F9:7E:DE:78:F4:07:E2
            X509v3 Authority Key Identifier:
                keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:0f:a8:0a:a1:87:1b:14:64:47:d9:ba:9c:54:8e:0b:7e:0b:
         69:f9:4c:89:af:c0:02:b2:9e:41:f2:d0:c5:72:8e:5c:37:15:
         a0:12:9b:0c:00:fc:5d:ea:8e:66:ed:ac:27:d2:da:f0:dd:3d:
         94:df:51:68:b2:76:fd:da:1d:c8:ac:4b:a6:29:ba:1a:d8:9b:
         32:ca:98:67:b1:a7:4f:41:15:c9:b3:20:58:be:11:b9:a9:5a:
         41:72:d5:70:a7:d6:4a:1e:21:38:af:d1:56:c1:da:e6:35:df:
         ab:72:c3:f7:f7:5a:14:7e:47:3a:b6:dd:cf:f1:45:b6:20:5a:
         c7:1a:43:59:72:de:ce:0d:6b:10:ad:c1:dd:4f:47:ef:ca:bf:
         aa:4a:b6:d3:25:b2:68:98:e9:71:0b:a4:ac:7d:da:7c:01:19:
         1a:47:d2:22:01:f9:a0:47:ef:6e:d2:14:5a:95:84:35:c7:1a:
         20:13:96:c4:5f:84:09:cb:21:7e:06:34:cc:87:01:10:d7:2d:
         15:6c:ae:d0:e5:d8:7b:cb:89:e0:d6:d5:53:1d:4a:78:e9:c9:
         6a:9e:a3:ad:8c:33:fe:cd:65:04:25:bf:62:63:f5:12:8e:1d:
         c6:32:29:f7:c7:58:36:d7:ca:50:d6:fe:ae:a2:f7:2e:8e:85:
         01:08:05:fd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkU3REYxMTAvBgNVBAUTKEU3RjdERDQwOTI4Mjk4RUM5RUNBNjQ0NkExODRBMzU5
QTNFRDVERkUwHhcNMjUwOTA1MDIwNjMxWhcNMjUwOTEyMDIwNjMxWjAYMRYwFAYD
VQQDEw02OGJhNDVhNy1kODdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuN0QIcm60TCTpBxmR9IP/AoKcXRxG8rQiZ1F4humEdMrPSseSrPshwvKoeAE
ZU/qs6ct+wF/6kNSPJMP3kNkjY6IMO2k6V1YtIHu3G1SCEJ1Uwv0MpbfCqMhiJbT
bFLGYVrabmRtYpH6OKGqc3YuAff3LyK//NKICFo+BIEquG8AZ+VEFfmnkxNFSE62
LrfjG14SY71lwvqYxoKvm/X2821kefAMwMX9Kw1Xjj8WfbjBUzWu3GcilHDxKcYU
ZFcFDd3Wk7gY8c3wFc7aLT+DYu3rRrChsozyKWimM5bzGlt9PlgcB4Hdw2BkM6LR
vTUiVvckCd5NijdqgM/+YpEowQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/QEsaw
j6AArCLwK6T5ft549AfiMB8GA1UdIwQYMBaAFOf33UCSgpjsnspkRqGEo1mj7V3+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTdERi82RDU1MkQ3MDI3
N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21PeWV5bVJHb1lTaldhUHRY
ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVfZmRRSktDbU95ZXltUkdvWVNqV2FQdFhmNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RTdERi82RDU1MkQ3MDI3N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21P
eWV5bVJHb1lTaldhUHRYZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCJD6gKoYcbFGRH2bqcVI4Lfgtp+UyJr8ACsp5B8tDFco5cNxWgEpsM
APxd6o5m7awn0trw3T2U31Fosnb92h3IrEumKboa2JsyyphnsadPQRXJsyBYvhG5
qVpBctVwp9ZKHiE4r9FWwdrmNd+rcsP391oUfkc6tt3P8UW2IFrHGkNZct7ODWsQ
rcHdT0fvyr+qSrbTJbJomOlxC6Ssfdp8ARkaR9IiAfmgR+9u0hRalYQ1xxogE5bE
X4QJyyF+BjTMhwEQ1y0VbK7Q5dh7y4ng1tVTHUp46clqnqOtjDP+zWUEJb9iY/US
jh3GMin3x1g218pQ1v6uovcujoUBCAX9
-----END CERTIFICATE-----
Generated at Sat Sep 6 07:02:10 2025 by rpki-client