Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft
File:                     FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft (raw, json)
Hash identifier:          1pa00HFWxl3pqOOnZGuPmUtayX3QHfLsgCCLZNhEgQ4=
Subject key identifier:   6A:4B:5D:E5:06:A2:B2:2E:73:25:95:12:21:E4:BE:08:83:30:78:D9
Authority key identifier: 15:36:13:47:A1:08:14:A3:E6:68:B7:26:9F:E2:07:07:B1:8E:79:73
Certificate issuer:       /CN=A912C15B/serialNumber=15361347A10814A3E668B7269FE20707B18E7973
Certificate serial:       012B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft
Manifest number:          0129
Signing time:             Sat 31 May 2025 04:15:50 +0000
Manifest this update:     Sat 31 May 2025 04:15:49 +0000
Manifest next update:     Sat 07 Jun 2025 04:15:49 +0000
Files and hashes:         1: FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl (hash: oi/YGbrWGOaoA6FKTgtFOriMsuv9YszoZ4VGbKugmgY=)
                          2: 76CF6D4C746E11EE8A2F7739C4F9AE02.roa (hash: sPgtFXkQiNpbnrX5GSASzjIh/8IU4jkwvbF5ffVha8I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl
                          rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 04:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C15B, serialNumber=15361347A10814A3E668B7269FE20707B18E7973
        Validity
            Not Before: May 31 04:15:49 2025 GMT
            Not After : Jun  7 04:15:49 2025 GMT
        Subject: CN=683a8275-209b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:32:fd:1c:79:df:e7:92:01:dc:08:7a:d9:
                    7b:82:3d:d1:27:b5:ca:98:1e:82:63:78:56:7e:62:
                    57:3a:9e:46:a3:88:d7:a3:3d:d3:8b:f4:bf:59:e9:
                    12:48:90:c4:c6:51:9a:f9:46:0b:58:e6:38:f3:bc:
                    16:7c:6d:0a:e2:a2:ab:c6:53:95:02:ae:16:2d:7f:
                    45:6b:2b:35:2a:6f:a0:c1:bc:2b:84:28:f5:74:26:
                    5e:94:6a:ac:ab:b5:bd:bd:c1:2b:3b:cc:d4:33:62:
                    b3:85:da:85:56:0a:e7:ce:ab:de:c3:46:bd:bd:b1:
                    ad:af:6a:89:53:c1:90:3b:a4:87:7c:8e:a7:14:86:
                    b9:40:9e:ad:a7:32:eb:50:34:26:1c:28:20:cf:ae:
                    9b:8e:dc:8b:f4:07:aa:70:e1:24:cf:a4:09:32:c6:
                    3e:2f:87:7c:4e:65:6c:09:cd:f8:c1:d2:51:33:b5:
                    81:1a:b1:57:d9:b2:ff:6e:50:9e:7f:d8:0e:a4:d0:
                    f9:a2:94:34:97:14:ca:3c:92:ad:bb:a0:65:96:ed:
                    2c:9d:87:09:4c:30:12:3d:42:2d:a5:31:c7:d3:8e:
                    e5:89:07:b7:4c:fd:21:b6:96:e4:21:0a:f4:7d:23:
                    52:0d:86:7d:04:ff:11:e7:3f:ea:9c:e5:18:ff:94:
                    f1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:4B:5D:E5:06:A2:B2:2E:73:25:95:12:21:E4:BE:08:83:30:78:D9
            X509v3 Authority Key Identifier:
                keyid:15:36:13:47:A1:08:14:A3:E6:68:B7:26:9F:E2:07:07:B1:8E:79:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:bb:f1:52:40:81:1b:96:0e:a7:c4:15:c5:6e:37:d1:e4:6d:
         ad:ba:70:da:b8:01:7a:5c:90:44:55:78:0f:8b:ae:6a:8b:64:
         18:38:c3:aa:71:fa:e2:0c:f7:d1:4d:80:c1:0b:51:bf:7f:32:
         d5:ae:36:3a:62:67:39:69:d0:7f:19:0d:51:6b:76:c6:17:84:
         98:78:61:44:90:c7:22:26:32:97:51:fb:96:11:4a:0d:47:a0:
         e6:af:7a:48:1c:e7:6d:30:fa:c0:08:9a:04:5a:c0:ee:12:26:
         d5:0a:aa:8d:7e:d7:40:b8:ab:f8:5a:8b:96:13:34:48:5e:21:
         90:f6:90:2b:19:c4:84:cd:30:91:fb:ba:e3:64:4a:40:b5:9b:
         67:c8:15:83:1f:b1:f3:05:a6:ff:6e:50:83:e8:3d:ec:dd:80:
         e4:bf:51:dc:1b:57:c1:0e:fd:bf:59:20:c4:72:52:f9:0e:c4:
         7a:1d:d6:8c:b0:48:2d:d9:11:9b:8a:4c:75:c6:60:cf:e4:f3:
         72:4b:b5:ad:83:4e:8f:b9:6d:39:39:e1:c4:16:82:18:bb:f4:
         b9:ab:6b:66:87:ef:87:7b:a3:57:8a:ea:1d:94:c9:41:c8:44:
         31:2f:54:50:c9:a2:3a:26:c2:dd:5d:28:2c:ac:c8:4b:ef:3a:
         f4:44:1b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:27:44 2025 by rpki-client