Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft
File:                     F-lBr577tRXXwktBjmn5hnx6FMo.mft (raw, json)
Hash identifier:          xxNDhRzXzZ8miBQZqTfeouqcFd5Ab4nYhexlabrCmGE=
Subject key identifier:   C7:63:B6:44:04:3A:5E:7E:28:7A:0A:5F:D1:CC:81:9E:C2:6A:17:36
Authority key identifier: 17:E9:41:AF:9E:FB:B5:15:D7:C2:4B:41:8E:69:F9:86:7C:7A:14:CA
Certificate issuer:       /CN=A9129023/serialNumber=17E941AF9EFBB515D7C24B418E69F9867C7A14CA
Certificate serial:       B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft
Manifest number:          B7
Signing time:             Sat 31 May 2025 05:30:35 +0000
Manifest this update:     Sat 31 May 2025 05:30:35 +0000
Manifest next update:     Sat 07 Jun 2025 05:30:35 +0000
Files and hashes:         1: F-lBr577tRXXwktBjmn5hnx6FMo.crl (hash: 2bczAv3a40/lDpXKjj2voAPtuGIxHvYhWn88q9Y3Rp0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.crl
                          rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 05:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129023, serialNumber=17E941AF9EFBB515D7C24B418E69F9867C7A14CA
        Validity
            Not Before: May 31 05:30:35 2025 GMT
            Not After : Jun  7 05:30:35 2025 GMT
        Subject: CN=683a93fb-7584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:61:cb:06:ab:44:fd:83:a8:af:0a:3a:1d:c4:
                    ba:da:8b:a6:8b:99:8f:88:c3:94:c9:8a:07:32:9a:
                    42:eb:4a:93:5f:a6:16:71:eb:14:df:74:31:19:68:
                    40:6e:24:a5:ef:14:9e:fb:ce:52:36:43:75:6e:a9:
                    c4:19:68:9d:cf:b6:3f:72:61:32:1f:4b:c3:f0:7d:
                    01:2f:d7:5c:21:bd:65:2b:55:b9:ef:3a:f3:d3:48:
                    67:82:9e:d4:ba:fb:2a:82:42:44:fa:bb:59:5e:0e:
                    71:96:2f:fe:27:8e:ef:e4:4d:7c:7e:1c:14:37:55:
                    f8:9a:1c:fa:7a:80:2b:a8:5b:9b:6b:22:0e:d7:05:
                    c1:9d:00:83:89:63:cd:6b:fd:71:35:fe:75:c5:59:
                    8a:c4:21:e4:67:22:28:74:1c:26:d9:cb:94:f7:05:
                    3e:27:34:19:35:c2:18:02:1b:5c:e4:f2:e9:37:16:
                    97:e7:e8:ad:5c:4c:0e:7a:79:53:2f:49:f0:03:64:
                    74:51:b2:db:f2:db:a3:1a:27:10:38:80:19:b7:db:
                    fd:7a:39:d8:de:a4:22:14:18:d7:50:84:e5:03:f5:
                    5a:ac:8c:b7:40:eb:58:a2:f4:c9:e8:7b:14:a5:97:
                    31:55:8e:fe:35:37:0f:47:32:5e:94:4d:14:08:fb:
                    b8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:63:B6:44:04:3A:5E:7E:28:7A:0A:5F:D1:CC:81:9E:C2:6A:17:36
            X509v3 Authority Key Identifier:
                keyid:17:E9:41:AF:9E:FB:B5:15:D7:C2:4B:41:8E:69:F9:86:7C:7A:14:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:d2:ed:3e:dc:6d:55:6c:c9:21:98:28:a4:48:73:97:cd:a9:
         96:ce:98:36:95:85:11:51:73:f9:62:13:b5:f9:65:6d:f8:49:
         d3:7e:17:1b:04:ce:aa:b6:2a:6a:eb:e7:4b:e0:b3:ff:58:48:
         93:8a:90:85:23:c3:0e:5c:43:82:c6:53:f6:04:e3:4a:1e:21:
         69:e1:bc:18:8b:c4:6b:cd:b4:06:bc:25:3f:ed:46:c9:88:aa:
         fc:d7:c8:94:19:d1:32:0c:54:c0:69:fb:d6:68:89:6d:0f:01:
         46:37:23:41:bb:1e:63:42:56:c9:dd:fe:1f:8c:e0:5b:9b:99:
         36:17:fb:43:3f:81:51:dc:35:4e:40:0e:10:c0:36:72:fe:a7:
         50:3c:20:84:60:64:7c:28:93:e5:09:fe:3f:ab:0e:a1:46:39:
         3b:47:74:e6:51:d6:18:1e:7e:5f:24:40:6a:4e:b2:e3:b4:32:
         08:de:80:5c:aa:2c:83:d4:a8:af:06:d5:56:98:9f:cb:cd:c2:
         87:0d:e1:e6:db:a9:03:4e:88:0a:f8:6f:ec:dc:61:fc:6f:9f:
         2f:ad:2d:13:be:a8:36:62:5e:c7:3c:f8:46:5b:ba:a7:c5:22:
         01:8f:c6:9b:34:86:da:4e:e7:f5:49:42:ec:29:bd:34:b7:48:
         d0:3e:c6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:36:02 2025 by rpki-client