Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/FeHN3a7M6rtlZl4wrPRF-XKWY-E.mft
File:                     FeHN3a7M6rtlZl4wrPRF-XKWY-E.mft (raw, json)
Hash identifier:          QJaFrATBowbX8qI2g4HCOx8mPJ02dCBtZrkmNlEIRQU=
Subject key identifier:   B1:A9:84:90:39:21:BD:98:56:7B:74:7D:68:11:F4:DA:41:50:22:54
Authority key identifier: 15:E1:CD:DD:AE:CC:EA:BB:65:66:5E:30:AC:F4:45:F9:72:96:63:E1
Certificate issuer:       /CN=A913EDDF/serialNumber=15E1CDDDAECCEABB65665E30ACF445F9729663E1
Certificate serial:       0135
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeHN3a7M6rtlZl4wrPRF-XKWY-E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/FeHN3a7M6rtlZl4wrPRF-XKWY-E.mft
Manifest number:          0133
Signing time:             Sat 29 Mar 2025 03:56:16 +0000
Manifest this update:     Sat 29 Mar 2025 03:56:16 +0000
Manifest next update:     Sat 05 Apr 2025 03:56:16 +0000
Files and hashes:         1: FeHN3a7M6rtlZl4wrPRF-XKWY-E.crl (hash: oxOTJQ3Rei1pYwN7Y+RDPtzXXwIM9oXaVUzZliPeF6M=)
                          2: 9D4041FA376411EEB0C70459C4F9AE02.roa (hash: ZFtHcBc54ZeKS+b4WzXq0vpdKRKFZcVziUY5NK5/ml8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/FeHN3a7M6rtlZl4wrPRF-XKWY-E.crl
                          rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/FeHN3a7M6rtlZl4wrPRF-XKWY-E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeHN3a7M6rtlZl4wrPRF-XKWY-E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 03:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EDDF
        Validity
            Not Before: Mar 29 03:56:16 2025 GMT
            Not After : Apr  5 03:56:16 2025 GMT
        Subject: CN=67e76f60-0491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ab:f4:d7:5b:1e:1c:b0:73:a3:a2:f6:b8:79:
                    65:4c:33:79:14:59:96:6b:f8:8a:51:d9:47:3b:88:
                    ac:10:d3:bd:5a:fc:e3:54:ad:b1:1e:f5:f6:b6:b9:
                    79:0d:0f:70:57:9a:ce:26:61:fa:f2:68:3b:2e:8b:
                    81:11:ba:e9:b6:ad:17:39:4a:2f:01:56:be:2f:5f:
                    f2:9d:c0:cc:df:b1:4a:37:d5:28:37:68:cf:2b:61:
                    42:c4:87:93:e0:43:c1:00:05:c0:f3:4e:9b:88:09:
                    f4:95:93:12:97:59:9b:9d:84:0a:00:57:30:d1:72:
                    ae:10:f7:b5:6f:9a:fe:d2:f2:64:74:2c:aa:e8:ea:
                    4d:40:ee:7e:17:0b:29:7c:6b:1d:e5:1c:a0:d4:ad:
                    f0:7e:42:c5:16:42:76:a2:cf:1a:ac:c0:82:90:6a:
                    0e:c2:ad:e7:3a:f1:d1:3d:f1:2f:64:0b:95:7e:7b:
                    ed:95:67:56:40:35:7f:41:b3:81:d5:a8:b7:83:50:
                    ca:80:00:83:00:12:18:30:6e:df:f1:a6:5a:f1:2c:
                    43:61:0f:19:30:2a:79:91:cd:03:00:4d:9f:57:f1:
                    bf:ef:67:89:6a:71:1a:c8:67:78:ff:5c:bc:8b:f3:
                    d8:8b:f3:a0:65:3f:d0:13:46:eb:9c:75:ce:0f:cc:
                    e6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A9:84:90:39:21:BD:98:56:7B:74:7D:68:11:F4:DA:41:50:22:54
            X509v3 Authority Key Identifier:
                keyid:15:E1:CD:DD:AE:CC:EA:BB:65:66:5E:30:AC:F4:45:F9:72:96:63:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/FeHN3a7M6rtlZl4wrPRF-XKWY-E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeHN3a7M6rtlZl4wrPRF-XKWY-E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/FeHN3a7M6rtlZl4wrPRF-XKWY-E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:2a:27:ab:44:10:63:d7:1f:fa:00:bd:2f:6e:0f:cb:f7:f5:
         fd:6b:c1:55:80:26:73:53:63:72:3f:31:18:50:60:12:60:9a:
         dc:84:d9:a6:0d:66:f8:61:99:dd:3d:11:4c:33:59:c9:86:26:
         32:ba:de:dc:80:ab:c5:7a:60:71:aa:f1:5f:39:be:63:6d:a9:
         d2:0d:7c:4f:b1:90:12:a2:c3:df:63:29:0e:fc:1c:e9:0c:5f:
         8b:38:16:dc:62:84:70:d4:f2:0c:4d:03:3a:fa:43:22:20:a4:
         71:51:4b:94:7f:35:5c:0f:e2:c3:66:bc:9b:b2:e1:01:2b:cd:
         a3:4d:1b:af:81:e9:30:a7:28:27:9d:c8:7b:5a:d0:b0:ef:91:
         fb:7e:00:1a:3d:03:4c:47:ed:93:56:70:f4:1a:cd:f3:a8:d8:
         a8:26:90:2b:fc:35:d6:f7:e0:e4:8a:96:1d:63:69:c4:c7:cf:
         26:90:e3:f9:1c:f8:68:e9:56:1c:75:23:38:c2:7d:1b:49:4f:
         84:fb:60:2a:0b:c8:02:bc:f2:0b:0d:26:7a:f0:13:04:b8:13:
         ab:af:ae:d3:83:44:84:04:4f:ec:f6:c5:a8:9c:98:c5:a6:d9:
         fe:aa:bf:32:33:16:ea:67:90:71:fc:45:84:54:ac:a1:65:3d:
         bd:3d:7b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:37 2025 by rpki-client