Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.mft
File:                     Fp97ebHLC9YNnChOysqKz1dZgFE.mft (raw, json)
Hash identifier:          woFO7cRe1pITXSw5nBgiIy/DjZTcj2VAxRG99am6eqY=
Subject key identifier:   5E:8B:41:F6:3B:6E:83:6A:81:12:F1:AA:1A:83:79:88:90:B1:60:5C
Authority key identifier: 16:9F:7B:79:B1:CB:0B:D6:0D:9C:28:4E:CA:CA:8A:CF:57:59:80:51
Certificate issuer:       /CN=A9137627/serialNumber=169F7B79B1CB0BD60D9C284ECACA8ACF57598051
Certificate serial:       68
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fp97ebHLC9YNnChOysqKz1dZgFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.mft
Manifest number:          66
Signing time:             Tue 03 Jun 2025 06:51:09 +0000
Manifest this update:     Tue 03 Jun 2025 06:51:09 +0000
Manifest next update:     Tue 10 Jun 2025 06:51:09 +0000
Files and hashes:         1: Fp97ebHLC9YNnChOysqKz1dZgFE.crl (hash: IN9IMP6jGqED/wyoOMCc3AvXzk3Q0e5bK5u4NIABzQo=)
                          2: 3C249D62A89211EF881C732EC4F9AE02.roa (hash: 16sFKWaBVI982QZ/6/KmLXMiB3r2iqeJrJq3Bgjp0jI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.crl
                          rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fp97ebHLC9YNnChOysqKz1dZgFE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 06:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137627, serialNumber=169F7B79B1CB0BD60D9C284ECACA8ACF57598051
        Validity
            Not Before: Jun  3 06:51:09 2025 GMT
            Not After : Jun 10 06:51:09 2025 GMT
        Subject: CN=683e9b5d-a6f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:85:dc:6d:3a:0a:a2:ff:f6:78:f4:c8:8c:08:
                    07:2b:f3:9a:08:aa:ee:31:19:b9:ba:88:2e:b1:53:
                    3c:d3:b2:a2:dc:e0:92:33:64:bb:54:f5:2a:52:d7:
                    9e:99:63:54:89:b6:ec:0d:2b:31:fd:23:21:68:d9:
                    09:c7:6f:23:86:88:33:74:39:44:04:c7:ca:b8:13:
                    17:9b:6f:5c:03:bd:25:44:1a:66:36:fd:ac:4e:18:
                    28:ea:e4:9c:1b:5e:9d:81:cd:a4:d9:9f:b3:86:6e:
                    94:de:fd:a2:29:59:cc:23:19:ce:a9:2d:ad:91:7e:
                    22:12:cf:5a:13:8a:e7:7d:e3:54:74:d0:4e:4b:18:
                    91:ae:b2:4f:a9:0d:cb:4e:f2:13:79:ea:d9:e1:7d:
                    76:83:79:74:80:26:11:c5:27:05:bd:b7:8e:4b:46:
                    f2:e1:93:59:06:4a:f3:20:b4:96:84:f4:5a:2d:65:
                    7d:35:fa:63:85:a1:09:14:1d:29:b3:f2:f9:58:e0:
                    ae:b7:52:9e:7a:b8:d7:15:9b:6c:4c:4a:12:29:3a:
                    c7:5a:7c:0c:34:cf:29:e0:d5:27:85:87:01:28:7d:
                    74:c1:2b:74:2c:0c:0e:cf:fa:55:da:ea:10:d9:41:
                    db:de:6d:fd:b6:72:f6:cb:cf:f2:50:e7:99:d9:c5:
                    95:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8B:41:F6:3B:6E:83:6A:81:12:F1:AA:1A:83:79:88:90:B1:60:5C
            X509v3 Authority Key Identifier:
                keyid:16:9F:7B:79:B1:CB:0B:D6:0D:9C:28:4E:CA:CA:8A:CF:57:59:80:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fp97ebHLC9YNnChOysqKz1dZgFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:f3:68:df:f2:31:61:10:21:d7:be:1f:53:54:4c:12:9e:00:
         1a:4d:8e:ce:11:0b:0c:e6:fc:8f:5e:e1:0a:f3:5b:38:3d:37:
         75:b3:7b:8f:69:d6:34:54:5e:54:a4:28:da:97:a1:48:f8:70:
         b6:e6:d6:e3:4f:ad:20:4e:84:9f:13:e3:6a:fa:96:31:ad:56:
         d0:c6:f8:c9:5d:9f:a6:7b:60:17:20:f2:7c:fb:b0:73:74:de:
         70:29:a3:49:34:f3:63:ae:5a:49:a9:30:66:56:0b:bc:94:0d:
         17:d9:1f:87:5c:41:38:4c:23:6a:f9:5a:56:de:c2:c8:9e:a0:
         77:94:3d:a8:c5:5b:50:00:dd:bb:1d:40:ea:3d:7c:ed:75:0f:
         a5:6e:72:a5:20:e0:c3:9f:ca:b9:ab:c7:98:0d:75:c1:d7:57:
         a4:d1:32:70:ee:cb:a7:b1:e5:29:3f:6d:43:57:84:e7:a1:7f:
         3c:46:04:b2:32:07:a3:0e:bc:91:c1:ba:34:8b:dd:3c:fe:19:
         15:ba:3c:c8:30:10:d0:8d:86:ec:a2:06:fe:58:d7:1a:65:f7:
         cf:ac:91:c9:35:ac:df:85:58:35:a8:05:2f:4e:c7:30:16:04:
         15:ee:75:99:10:6c:e1:9e:58:0e:8f:83:d9:72:66:a0:11:57:
         ef:57:8a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:53:35 2025 by rpki-client