Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
File:                     _Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft (raw, json)
Hash identifier:          Zxo0jLLazWslEdI+o1RcOPYvYGqRAXXUSgflhYSn504=
Subject key identifier:   1E:03:FF:B2:58:34:E7:EB:55:4A:0E:3B:86:D2:42:E2:01:58:E3:3A
Authority key identifier: FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC
Certificate issuer:       /CN=A91C93EE/serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC
Certificate serial:       0C5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
Manifest number:          0C30
Signing time:             Fri 04 Apr 2025 18:49:33 +0000
Manifest this update:     Fri 04 Apr 2025 18:49:32 +0000
Manifest next update:     Fri 11 Apr 2025 18:49:32 +0000
Files and hashes:         1: _Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl (hash: ml/7jL04i0wiWKYjedFTqrYr0iuXPlY3yrDOtrEXDqU=)
                          2: 1B07853EA4F711EF84B06E42C4F9AE02.roa (hash: Gm1fun7pnQKByDLxI/azTsTDDryvchojFZK6+n4D1PU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl
                          rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 18:49:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3167 (0xc5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C93EE
        Validity
            Not Before: Apr  4 18:49:32 2025 GMT
            Not After : Apr 11 18:49:32 2025 GMT
        Subject: CN=67f029bc-a732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1f:d6:a3:51:d3:8f:99:5e:1a:af:35:21:61:
                    6d:d8:55:f9:49:87:a2:41:6e:ea:c6:7f:6c:81:fa:
                    f4:f8:4f:6d:78:b5:56:a1:f5:e7:0a:e5:c2:78:3b:
                    20:b3:ce:47:98:8c:7e:ea:69:92:ab:c4:68:4b:00:
                    2f:05:3b:7f:be:9d:76:ae:0f:4b:1e:65:7d:13:f9:
                    9d:4a:c8:88:53:7a:60:aa:87:08:e6:a1:da:a9:ba:
                    6c:86:5d:3f:26:e6:0d:b0:b9:3b:60:e1:91:ea:ae:
                    e8:bb:ea:28:63:38:8e:52:94:78:25:fa:3a:2c:6f:
                    f1:a0:8e:e9:56:4a:70:17:89:be:fa:69:cb:46:aa:
                    6b:52:61:ee:b7:81:30:8a:0e:1d:1f:77:06:05:75:
                    3c:a5:f8:99:49:71:66:00:fc:dc:64:bf:b7:22:c2:
                    ac:cf:69:7e:18:d9:14:3a:02:b4:cd:f2:ab:d6:3d:
                    6f:44:65:8e:b4:ea:80:0e:5a:21:06:04:93:d1:74:
                    10:11:61:d8:53:b1:52:d7:ac:98:f3:8c:06:ef:16:
                    07:b4:ae:dd:88:a1:83:7e:b1:0d:a0:82:15:eb:99:
                    d3:d1:ca:4a:17:a1:1a:ce:97:88:61:e3:3a:53:63:
                    94:cc:2d:75:e0:1b:2a:05:6a:b8:3e:41:36:62:e9:
                    83:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:03:FF:B2:58:34:E7:EB:55:4A:0E:3B:86:D2:42:E2:01:58:E3:3A
            X509v3 Authority Key Identifier:
                keyid:FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:27:9f:0c:1b:22:70:ce:bc:9a:e8:fd:ce:b2:51:38:fe:7f:
         c1:b6:c7:7e:d5:a1:cb:97:72:5b:c0:ee:08:8b:a0:45:8a:7f:
         ae:ea:f9:d9:ea:b2:b4:87:a9:c5:12:e2:8d:6b:c9:3f:aa:de:
         bd:0f:e8:4d:95:84:34:e5:9c:cb:19:42:76:5e:cc:45:9d:75:
         77:a9:b0:ce:33:1e:5a:c9:53:54:88:eb:9e:f5:50:3e:63:f8:
         43:25:8d:dd:e4:f0:eb:8c:d3:6b:91:90:4b:44:f9:28:53:5c:
         f8:96:5f:f8:46:56:c6:26:de:ab:e9:4b:0c:f2:30:08:88:c4:
         ae:46:f5:5e:c8:27:ac:fe:ac:9f:0a:0a:4f:f8:36:d3:e2:61:
         f9:1b:83:35:53:54:af:1a:2c:2d:1d:a1:12:d1:ee:0a:6b:c8:
         c2:5c:3f:9c:f7:dd:b8:cd:d7:18:f0:1c:c6:9e:d6:89:ce:c0:
         46:47:f3:4a:06:89:2e:fb:c5:be:7c:73:6d:87:72:0f:95:be:
         d4:2b:56:52:c8:17:2e:ad:f8:70:b4:bc:8d:f9:4d:d1:e1:52:
         5a:46:b5:6a:39:43:b0:99:fc:cd:ee:af:68:01:0a:86:5a:fd:
         e3:cb:0e:a7:b1:e5:f3:4f:db:ed:65:19:c1:41:60:51:72:d5:
         10:a4:35:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:11:45 2025 by rpki-client