Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft
File:                     FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft (raw, json)
Hash identifier:          v9hkOunudm8ZJkj0rq4tbWWFBY/+GfVfYRnTcwemnQM=
Subject key identifier:   3F:3C:86:62:DB:3A:B4:3F:7D:34:3A:21:8D:F9:F4:DC:6D:4D:1D:DF
Authority key identifier: 14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29
Certificate issuer:       /CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29
Certificate serial:       0106
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft
Manifest number:          0104
Signing time:             Sat 05 Apr 2025 04:22:28 +0000
Manifest this update:     Sat 05 Apr 2025 04:22:28 +0000
Manifest next update:     Sat 12 Apr 2025 04:22:28 +0000
Files and hashes:         1: FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl (hash: qJAymDnxjHLr/ihNq9qyLYY69gpWj2bpOzsaB7b3gMI=)
                          2: 91FC411C836411EE80C08641C4F9AE02.roa (hash: Ig/coMPIPbPWfq5557ThCTPPOBkbOYZiHHJV9OEcZtI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl
                          rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 04:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121188
        Validity
            Not Before: Apr  5 04:22:28 2025 GMT
            Not After : Apr 12 04:22:28 2025 GMT
        Subject: CN=67f0b004-0e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:47:44:9b:1d:00:cd:cd:b9:14:7b:3d:36:ed:
                    99:a4:cc:ee:42:4c:7f:21:a7:49:b1:1c:a2:cc:fc:
                    0f:60:a2:57:d9:d5:99:91:7c:31:b2:ee:d2:05:b1:
                    b2:5d:27:ce:8d:87:f5:bb:3e:96:86:76:dc:03:b0:
                    e3:7c:c8:42:0e:c6:01:4f:84:fe:1c:e7:72:c3:6c:
                    b3:08:f7:12:8a:ad:25:24:0b:0b:de:8a:46:ea:be:
                    62:56:2a:b3:7a:68:c2:8d:19:aa:b6:b0:9c:59:7c:
                    40:eb:f8:45:28:04:6f:cb:f0:ed:2a:19:0d:65:f4:
                    53:93:cb:b5:70:13:03:4a:40:e7:c3:96:b2:0d:26:
                    59:fd:07:15:62:37:85:5e:6d:65:2d:62:f2:ce:3a:
                    7c:29:e1:12:52:ae:f1:fc:60:f6:11:73:56:ea:69:
                    f3:4f:e6:af:a1:9d:e0:d2:c9:6d:33:12:82:db:6a:
                    fb:ec:e2:04:ba:61:db:6a:5a:8d:67:ee:b6:ab:40:
                    2e:05:b2:75:04:2a:f8:3d:0d:57:ff:ad:ad:38:9b:
                    2f:50:98:47:f7:5a:71:54:1a:47:0b:f4:5c:2e:51:
                    57:74:01:28:a2:00:74:40:f9:d5:41:03:4d:07:42:
                    c7:9a:13:c9:df:0f:a7:31:c1:72:d0:87:12:33:79:
                    68:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3C:86:62:DB:3A:B4:3F:7D:34:3A:21:8D:F9:F4:DC:6D:4D:1D:DF
            X509v3 Authority Key Identifier:
                keyid:14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:22:7d:33:73:5a:fa:fc:05:91:2a:cc:30:09:ba:0c:4a:5a:
         69:84:9a:86:80:ac:a1:2a:9e:7c:f6:e6:24:69:0f:26:b3:72:
         e6:fc:d6:f6:bc:4f:f3:98:61:c8:fa:76:4a:0e:95:9f:94:25:
         4d:cf:cf:54:d3:a8:08:56:4b:ee:dd:d5:3b:3d:19:c2:cf:c9:
         51:2a:8a:20:d9:88:66:f5:8f:dc:57:29:8b:ac:b3:22:89:bb:
         4f:41:67:fa:7c:a8:b2:a9:dc:9c:a0:c1:df:db:ee:ee:0b:e9:
         a3:4a:5c:0e:5c:2d:34:83:79:2d:68:89:fa:54:0b:fb:c4:70:
         06:80:6a:c8:4f:f4:07:62:01:90:f2:37:c9:3b:ab:0e:45:c3:
         56:3d:e5:2f:70:de:ad:96:43:b2:59:80:76:f1:f4:91:ec:16:
         99:48:05:58:f9:ef:73:27:4e:50:66:74:c9:70:15:52:b5:31:
         99:a0:cd:ae:ae:c9:f5:41:24:4a:e7:0e:f6:af:e7:93:79:07:
         73:81:25:42:69:8e:18:7a:8c:8b:d8:01:43:0f:57:ec:24:a1:
         09:10:a6:06:8c:45:d9:3f:b1:ed:6b:96:79:2f:7b:cd:e8:bc:
         6b:36:f7:93:c0:2d:c4:5c:5d:25:4d:83:ea:13:6d:b8:1d:22:
         bb:25:35:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:07:26 2025 by rpki-client