Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
File:                     FX3bMj02U1BOMIJOaeDbA3U6aM4.mft (raw, json)
Hash identifier:          etmmbKtr7WpIR+QnSJ9KGeA8y8BcoMWgip6TdUDkI9U=
Subject key identifier:   3F:35:6F:2A:DA:07:A6:BE:0C:31:7C:A1:B9:D8:B5:52:08:E6:3A:35
Authority key identifier: 15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE
Certificate issuer:       /CN=A91480B2/serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
Manifest number:          011B
Signing time:             Wed 09 Apr 2025 03:43:57 +0000
Manifest this update:     Wed 09 Apr 2025 03:43:56 +0000
Manifest next update:     Wed 16 Apr 2025 03:43:56 +0000
Files and hashes:         1: FX3bMj02U1BOMIJOaeDbA3U6aM4.crl (hash: wMGWza1AYwqoATgi6nViCUwHby0Ae63MMxca90ItabQ=)
                          2: 93151D5668F911EE9916D146C4F9AE02.roa (hash: SLZLEvFIQqMp4oAp0p1ONi54RA8FIOFPctbNnoAuAEg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl
                          rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Apr 2025 03:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91480B2
        Validity
            Not Before: Apr  9 03:43:56 2025 GMT
            Not After : Apr 16 03:43:56 2025 GMT
        Subject: CN=67f5ecfc-a6c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cc:e3:4e:0f:3a:32:33:26:ea:7b:4c:9a:5e:
                    44:b1:da:4d:08:25:b4:3c:a0:bc:7d:cb:6d:10:b1:
                    cf:ec:56:68:83:41:c1:ab:ed:4e:a2:d5:1d:06:f4:
                    7a:1d:7c:8b:05:24:e8:f6:7d:59:2e:05:da:5a:61:
                    da:59:1a:ea:72:bd:14:1b:37:c8:52:16:2b:ac:d5:
                    28:a4:cd:3e:d4:42:ee:ec:d4:9f:4a:c0:46:85:ea:
                    8d:bd:89:73:e8:63:3d:39:74:bf:0e:11:e0:87:26:
                    f4:94:5a:db:09:80:7d:80:34:d0:09:be:f8:97:18:
                    dd:c0:ed:eb:00:38:b5:2c:27:7d:aa:54:c5:d0:78:
                    b4:49:a1:22:6b:b6:a3:6a:91:e0:ea:17:7e:c8:29:
                    b2:cc:29:f9:31:c8:81:40:24:25:ff:c3:16:7c:d6:
                    4c:3e:18:0d:9b:4d:74:26:07:c7:0d:f1:c0:58:ac:
                    76:a9:ff:bb:e9:70:1b:13:8d:e1:74:e8:ab:97:59:
                    9c:af:8a:81:50:a2:3a:82:8d:fe:a8:76:59:db:96:
                    fa:f0:ba:fe:3a:5c:27:f1:a6:26:4b:93:e3:55:fd:
                    af:da:4f:cd:4a:e0:1c:9d:70:fe:af:d3:61:9c:d4:
                    55:28:f8:78:9a:36:fd:af:2a:03:b8:dc:4c:22:ad:
                    26:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:35:6F:2A:DA:07:A6:BE:0C:31:7C:A1:B9:D8:B5:52:08:E6:3A:35
            X509v3 Authority Key Identifier:
                keyid:15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:43:0e:46:44:53:ea:fd:85:e9:09:78:ec:9e:5a:2e:28:c0:
         64:48:f6:2c:34:f0:8d:dd:5f:11:ae:1f:b7:56:8c:77:25:3b:
         e4:59:d4:d7:f6:8a:52:cb:f5:b6:e6:d9:dc:d2:f4:c6:f7:2b:
         e6:ef:a8:49:a9:a3:c2:d7:b0:08:ab:cf:02:49:0c:8e:43:94:
         c4:37:94:db:ce:0c:76:45:af:1e:0a:7a:cb:4f:8f:8a:6c:4a:
         86:bb:09:cf:6a:17:dc:c6:a4:7e:b8:36:b0:b5:49:d3:ba:1d:
         87:ec:ae:03:c9:10:38:fc:9f:24:b7:cc:52:3a:24:e3:e6:cd:
         06:4c:1a:97:0a:82:81:a5:4c:67:c4:1f:ab:d8:70:ab:bc:2d:
         ff:f6:35:80:88:c6:7d:15:ba:4c:0a:9a:5b:6f:c1:14:be:8a:
         12:9c:51:af:d8:af:ca:c5:2f:8e:e2:ee:49:32:f1:65:4f:06:
         be:4b:5a:5a:b8:e2:0e:12:91:23:bd:17:09:ed:75:24:d0:78:
         e3:c5:ac:9f:10:3d:61:3f:f6:8b:d5:55:fe:e0:f7:bf:2a:4a:
         a8:2a:21:2e:3a:a2:d5:d1:99:9a:cb:0c:16:b8:19:f5:36:ec:
         4d:ba:b4:2d:45:fd:40:1c:e9:e3:80:4a:c5:01:19:a5:cf:2e:
         88:62:a2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:51:35 2025 by rpki-client