Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.mft
File:                     FSLnXozBo4h_XUiEw2VwnFc0FZU.mft (raw, json)
Hash identifier:          KXyo+NQO2g2ykfFmTUUlJMNxxuIWZ3L9b29BuvkChtA=
Subject key identifier:   2C:9B:DE:B9:3A:03:B6:E2:3F:36:E0:0A:24:52:84:F3:F2:06:B4:01
Authority key identifier: 15:22:E7:5E:8C:C1:A3:88:7F:5D:48:84:C3:65:70:9C:57:34:15:95
Certificate issuer:       /CN=A9180913/serialNumber=1522E75E8CC1A3887F5D4884C365709C57341595
Certificate serial:       04AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSLnXozBo4h_XUiEw2VwnFc0FZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.mft
Manifest number:          049E
Signing time:             Sat 05 Apr 2025 00:07:23 +0000
Manifest this update:     Sat 05 Apr 2025 00:07:22 +0000
Manifest next update:     Sat 12 Apr 2025 00:07:22 +0000
Files and hashes:         1: FSLnXozBo4h_XUiEw2VwnFc0FZU.crl (hash: xO8IafHOvuaIaQMzaXEyFRShHqwS/H2em6r91Dw1rzY=)
                          2: BBE12BE88ACD11EF997F2066C4F9AE02.roa (hash: 68zEBxGXfrQ8sdNOFVU2ZHoivHL+1LfOSFnEvIXLiQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.crl
                          rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSLnXozBo4h_XUiEw2VwnFc0FZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 00:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1194 (0x4aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180913
        Validity
            Not Before: Apr  5 00:07:22 2025 GMT
            Not After : Apr 12 00:07:22 2025 GMT
        Subject: CN=67f0743b-976a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1f:2f:1c:89:30:48:3c:3b:04:ac:72:db:1e:
                    c7:03:4d:8c:30:ec:b6:2f:8a:79:3d:42:29:61:20:
                    78:12:7b:77:54:58:ad:de:d4:d5:72:f0:27:9e:cd:
                    ba:cf:e2:72:58:9b:09:82:78:df:6e:1e:59:fe:98:
                    a4:27:84:ca:d4:a1:4d:48:21:4a:fa:73:93:5f:24:
                    16:59:47:fe:30:b4:f4:37:68:5b:29:62:98:23:ea:
                    49:8e:1b:50:3b:84:14:cc:93:e4:01:38:a9:36:b5:
                    13:07:41:88:cb:2b:48:98:e0:ee:26:a2:f0:ec:12:
                    98:03:17:9f:a2:81:fc:84:f7:a7:ad:70:88:7c:c1:
                    a2:7f:12:ad:e1:f0:35:9b:7b:39:a0:c3:76:62:e7:
                    67:23:fc:68:c0:fd:82:c7:a4:83:76:52:4e:3a:8d:
                    99:df:b3:3b:39:1c:3a:f6:f4:d8:23:40:50:9c:0f:
                    76:2e:85:bc:87:df:b9:7e:43:18:6e:83:06:e9:3a:
                    b2:c6:82:73:14:f4:19:1f:c9:e0:f1:54:33:d7:c5:
                    64:6d:b4:96:4e:dc:ba:65:fd:91:8b:33:9f:4f:b1:
                    2d:06:e9:0a:94:e6:9d:bf:b6:6b:36:9f:38:06:68:
                    f7:18:1d:96:5f:db:00:2f:4f:43:f8:33:db:7b:bb:
                    12:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9B:DE:B9:3A:03:B6:E2:3F:36:E0:0A:24:52:84:F3:F2:06:B4:01
            X509v3 Authority Key Identifier:
                keyid:15:22:E7:5E:8C:C1:A3:88:7F:5D:48:84:C3:65:70:9C:57:34:15:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSLnXozBo4h_XUiEw2VwnFc0FZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:97:4e:83:fa:ec:65:b1:04:b2:b3:b0:c3:70:13:04:4e:1d:
         95:0e:45:6d:b7:2f:c1:e6:9a:bc:77:f5:1f:f9:36:52:40:7a:
         00:81:f0:b1:c9:94:3f:ee:27:2e:38:41:69:db:d0:ea:a0:42:
         bf:57:63:9c:08:52:85:42:87:05:85:ff:d9:9b:0c:e7:f5:be:
         73:9e:1a:1a:6a:4a:7f:c7:9b:15:36:a7:3a:65:d4:5a:5e:94:
         6b:f3:f2:fa:d5:f0:7c:e2:2c:52:c0:95:d3:29:01:6a:6e:38:
         90:67:9f:b8:64:77:4e:ad:f0:ba:6f:6b:5b:70:d5:33:72:d4:
         8b:5b:79:ff:8c:80:ee:cf:2b:c5:43:4d:de:6a:1b:a7:d8:98:
         a4:39:2a:1e:d6:e8:93:29:30:4f:81:2b:51:8d:d1:ea:b7:2d:
         61:21:08:0e:ed:48:b2:b9:55:68:37:0c:43:4d:1e:5c:50:2f:
         2b:fd:48:ce:61:1c:91:35:4e:76:3d:46:87:00:45:63:d9:25:
         f7:05:fa:d9:42:a8:1f:bc:26:09:04:20:e4:fa:62:e8:f6:f8:
         ca:a2:47:31:dc:af:c0:66:75:d9:40:15:07:87:ff:34:8f:61:
         e3:4f:92:39:ba:e3:6a:d2:6e:b7:5a:9a:4f:b7:81:ec:35:e7:
         8b:81:9e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:19:55 2025 by rpki-client