Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
File:                     FSDys0q93K6U-pIu9HV802FA8lQ.mft (raw, json)
Hash identifier:          rwjAZHmW+raC2mrEQ1+jGBKPIqax5Phemm8tBbgc9F0=
Subject key identifier:   3F:11:B8:F4:AB:BA:DA:83:26:BB:E2:47:AF:3F:4C:21:B3:E6:91:65
Authority key identifier: 15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54
Certificate issuer:       /CN=A9143FE9/serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254
Certificate serial:       06F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
Manifest number:          06E9
Signing time:             Wed 02 Apr 2025 22:01:08 +0000
Manifest this update:     Wed 02 Apr 2025 22:01:08 +0000
Manifest next update:     Wed 09 Apr 2025 22:01:08 +0000
Files and hashes:         1: FSDys0q93K6U-pIu9HV802FA8lQ.crl (hash: lJ5ARUq2fba9kUX6e7nkj0etgs8f+9gHavbUrsAIQS0=)
                          2: A6864ACE7BA911EDB41A851EC4F9AE02.roa (hash: in5sPndy+m94d5TFTDzmLk0rnuoauLzhEu9bOOaeDaw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl
                          rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 22:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1782 (0x6f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143FE9
        Validity
            Not Before: Apr  2 22:01:08 2025 GMT
            Not After : Apr  9 22:01:08 2025 GMT
        Subject: CN=67edb3a4-9039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:40:41:04:ff:a9:69:7b:ec:0c:7e:8c:35:95:
                    f0:40:a1:8b:cd:8f:dd:21:a1:c6:8b:ef:d6:09:45:
                    b4:a9:10:99:8e:06:b3:f8:9e:1f:34:39:2e:5d:26:
                    4d:cc:19:4d:32:0f:55:e5:b7:a7:d7:c1:07:ba:90:
                    da:08:ea:b8:bd:c4:51:7a:cc:3e:f9:55:f8:d3:4e:
                    3d:bb:4a:9b:d7:4f:9e:bd:da:81:15:ec:4d:f3:2c:
                    01:d8:07:1b:a7:6c:6e:9b:cb:d3:9d:bc:10:9d:c7:
                    94:89:0f:e5:8d:fc:4b:4f:79:63:85:90:aa:b3:e4:
                    90:a3:71:df:4f:9d:5e:f1:6b:38:6f:fa:a0:0a:e7:
                    59:85:2d:1f:ff:0b:69:b1:26:49:da:be:bb:24:63:
                    fb:0e:62:f7:77:96:69:d5:97:b0:9e:83:09:b9:b2:
                    7a:d7:c9:95:c4:47:fb:ae:73:cc:df:8b:6b:b3:7e:
                    b6:c4:a4:f6:2c:be:92:5f:62:9e:8f:70:7a:38:00:
                    00:cc:31:ae:04:2b:e5:2a:93:70:92:8e:b1:4d:77:
                    2b:63:12:7b:91:0a:81:ed:5b:d3:d8:42:c6:20:4d:
                    da:c5:79:00:54:3b:4d:71:20:9a:74:4c:cb:4a:75:
                    65:bf:bc:e9:51:99:9f:f4:d3:6e:f5:3a:18:ab:ec:
                    8d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:11:B8:F4:AB:BA:DA:83:26:BB:E2:47:AF:3F:4C:21:B3:E6:91:65
            X509v3 Authority Key Identifier:
                keyid:15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:6e:7c:5a:83:83:56:47:94:4f:7c:22:d1:4c:d6:d6:fa:47:
         64:02:fb:29:b9:f1:d4:31:e1:30:c0:94:87:5a:ba:12:ab:84:
         0a:6e:7f:98:a5:f3:97:10:27:1d:12:68:74:2f:fd:d1:d9:dd:
         e7:ff:85:07:94:5b:50:2b:6a:9d:5e:89:51:14:57:45:fd:84:
         43:d2:7a:a5:2f:bf:ec:7b:44:c3:e1:f0:e4:09:d5:ab:08:3f:
         09:74:6e:c5:e8:61:f5:24:c0:e1:cc:32:30:7a:52:50:c2:48:
         47:99:66:e8:a8:85:80:ea:7a:a8:39:3c:fa:72:1d:54:fa:08:
         d9:f7:f0:07:3a:4b:6d:bd:74:15:74:ce:83:3e:6a:0e:c9:8b:
         ca:a3:8b:ba:c5:b9:01:2b:ab:bd:41:51:49:ee:31:00:62:a3:
         65:4c:88:28:ff:d0:df:2d:98:09:8e:3a:b9:23:1e:b2:2d:79:
         23:18:b2:3c:50:c8:79:1f:ea:7c:e1:60:9c:d1:b1:ad:30:87:
         d7:29:a7:ac:72:7b:9d:83:72:8c:f9:63:b3:75:af:f7:fb:3f:
         d8:ad:06:68:ea:e6:61:b3:af:b7:a8:69:3c:16:5e:45:e2:29:
         8b:72:19:fd:a4:a9:13:06:78:34:5c:e6:6e:f1:b2:f0:40:23:
         f4:ee:5f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:10:32 2025 by rpki-client