Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft
File:                     Fq85Z82e72n-cs9m28bg-wDKONQ.mft (raw, json)
Hash identifier:          kYmUhE3eMmhrMhDFdhxrqVzz+df02AroDSTtEOtYRW0=
Subject key identifier:   3A:C8:4D:24:67:FF:D9:EF:2E:CE:42:40:44:E7:25:B3:39:60:89:7B
Authority key identifier: 16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4
Certificate issuer:       /CN=A91D34D0/serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft
Manifest number:          83
Signing time:             Sat 29 Mar 2025 05:57:10 +0000
Manifest this update:     Sat 29 Mar 2025 05:57:09 +0000
Manifest next update:     Sat 05 Apr 2025 05:57:09 +0000
Files and hashes:         1: Fq85Z82e72n-cs9m28bg-wDKONQ.crl (hash: zN7HJGbpEoqiTu0lkyobu7//dpj2arLVHoLgWvyjGsY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 05:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D34D0
        Validity
            Not Before: Mar 29 05:57:09 2025 GMT
            Not After : Apr  5 05:57:09 2025 GMT
        Subject: CN=67e78bb5-bbed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:58:0f:9d:d1:9b:31:75:e8:b1:59:42:8c:e6:
                    db:2b:c9:c8:be:ba:96:1b:0d:04:39:71:93:68:29:
                    17:cc:28:b7:a4:c4:36:3c:22:df:74:81:7f:48:59:
                    ae:43:79:c1:be:1f:c6:6d:23:13:d1:b8:91:d1:8b:
                    96:0d:e3:0f:7b:55:3b:24:8c:10:4d:f3:09:2e:52:
                    f2:91:5c:64:de:a8:e5:64:fe:30:c5:45:3b:dc:7f:
                    52:97:be:5d:56:32:17:08:6a:f1:fc:f3:9d:3b:d3:
                    ec:ab:16:9f:bd:b3:13:8b:5e:b2:ce:0d:48:75:8c:
                    c1:ee:b2:f0:ca:f7:30:60:37:ff:04:0e:47:da:a1:
                    3a:d6:95:32:7e:e4:d4:58:76:ae:e5:1e:dd:21:fe:
                    d0:20:e3:3c:20:95:4a:37:2c:26:f5:3e:76:6a:9e:
                    0e:c7:26:f3:34:bb:03:95:d7:49:21:aa:82:cb:9a:
                    a4:25:66:31:70:7d:3a:c4:83:6d:4e:93:42:d4:f1:
                    e0:8f:93:68:81:90:9a:cd:83:0f:d2:8f:3b:3a:da:
                    6d:1e:e3:e4:50:10:ec:ef:e7:cf:2f:41:34:84:81:
                    e6:b5:f6:40:36:3c:9c:f7:b9:42:4c:cd:c9:02:ce:
                    c0:cb:d7:da:0f:e0:5f:fc:13:3a:05:84:8b:4a:1c:
                    28:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C8:4D:24:67:FF:D9:EF:2E:CE:42:40:44:E7:25:B3:39:60:89:7B
            X509v3 Authority Key Identifier:
                keyid:16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:96:32:80:54:b1:f0:1e:31:a9:8e:74:50:3e:72:49:27:66:
         8e:2f:1c:bd:40:19:f4:98:78:46:3e:80:76:1e:5f:a4:93:69:
         8f:90:1f:80:32:f8:07:14:6d:12:3e:d0:d4:e1:1c:3b:e1:96:
         68:e9:5d:02:ee:c5:4f:15:56:e3:da:ce:d1:bf:07:ad:d6:9c:
         0f:ec:0b:9c:ed:ad:ed:ef:17:9b:9c:c0:94:6f:90:b3:0d:81:
         0a:cf:2f:b5:64:89:56:cf:91:83:a8:29:c7:d7:df:ef:1e:b8:
         37:0e:28:02:0d:c5:8b:b9:46:35:13:8b:92:7a:d4:25:a7:2c:
         dd:b7:38:74:e5:f4:e6:5a:83:fa:03:8d:a0:d1:c1:89:e1:7c:
         5c:5a:74:ce:62:35:b8:a6:e4:2d:7d:e5:c6:b8:3e:9c:d3:85:
         71:7b:48:61:59:19:a4:cd:03:38:9e:1e:f9:52:9c:fe:11:78:
         d9:9e:b7:77:ae:b3:dd:6c:22:ed:b3:ea:57:b6:71:5d:7b:b7:
         36:20:45:89:78:f7:ea:cf:70:1d:3d:2f:34:0a:1f:ea:77:ed:
         bc:88:29:3d:28:ec:0f:ff:90:b6:8c:c4:f4:90:0a:4b:2c:7a:
         62:82:2a:46:6e:ae:e1:e2:f4:b9:78:e3:97:5c:7b:c7:fe:cc:
         ad:2f:8b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:54:09 2025 by rpki-client