Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
File:                     FXsL3g48rbKUg5vJgVZVZE2ybpE.mft (raw, json)
Hash identifier:          slt3IprxYoZ1YpypOXKEk/BwRI8zce5U+gA+cwuza44=
Subject key identifier:   8E:AA:2B:3E:FE:09:6A:77:64:45:40:F0:DF:A1:B6:9B:0E:D0:1B:5F
Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
Certificate issuer:       /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Certificate serial:       0547
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
Manifest number:          051F
Signing time:             Fri 30 May 2025 23:53:41 +0000
Manifest this update:     Fri 30 May 2025 23:53:41 +0000
Manifest next update:     Fri 06 Jun 2025 23:53:41 +0000
Files and hashes:         1: FXsL3g48rbKUg5vJgVZVZE2ybpE.crl (hash: O7DCTRJkO6qwMqVJjKcXO8Zi4/FSElcdPkQDQNLAkoQ=)
                          2: B589332C498611EF90B46962C4F9AE02.roa (hash: uDyhMVme3VTf+JhXqHqMKucF4UMzPNmrq3U6pJO1VaY=)
                          3: 0E677936853811EEAC9D230CC4F9AE02.roa (hash: Kojx3EQvXZce9VKFNEMNI2SECFOh/Zpl+d+xhc6JD68=)
                          4: 93DAAB4612BA11EF901ACD28C4F9AE02.roa (hash: P9CZgLXKg4nlDwcCC0YAzgQvS67VqqwFERe7OV2NbwE=)
                          5: 282DAABE82EC11EEB4D96065C4F9AE02.roa (hash: gm9Kdto0nMF6gnIYhzKNLY3X/9aSmX52C7f5pF3kzmE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
                          rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 23:53:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1351 (0x547)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
        Validity
            Not Before: May 30 23:53:41 2025 GMT
            Not After : Jun  6 23:53:41 2025 GMT
        Subject: CN=683a4505-034d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1c:5e:a6:22:02:34:e3:f3:94:6a:2e:21:21:
                    cb:49:14:71:41:b5:cc:c4:a8:94:ee:48:a2:37:d7:
                    51:16:45:91:e3:9a:ee:42:a3:7e:4d:d1:c1:72:49:
                    27:ab:6d:c1:13:3f:4e:7c:1c:c0:c1:a4:54:29:a1:
                    88:bf:65:3a:7d:9f:d7:67:eb:17:26:ef:54:75:b8:
                    d9:03:8e:36:5e:37:25:f9:7b:94:23:93:cf:6a:c7:
                    70:ae:1b:8a:1a:53:50:bd:00:00:5d:4c:75:4a:b6:
                    3d:78:84:88:e2:41:8d:0c:42:3e:a3:84:c5:50:d4:
                    3b:1e:dc:50:ac:fd:b0:c7:20:72:2b:a0:c6:51:86:
                    0f:2f:aa:c8:3c:c4:8e:12:8e:4f:07:33:53:e3:c5:
                    e2:84:f6:fa:e6:5f:b4:19:6b:35:a8:63:49:fc:8a:
                    d8:a0:34:d2:c5:c6:6c:00:b4:7a:14:59:3f:81:e3:
                    34:21:59:42:e0:57:49:60:a8:ea:8d:f6:72:cd:72:
                    4a:0c:74:3d:ca:95:b3:5a:8d:92:c6:28:49:ef:f8:
                    3b:cd:6a:62:83:59:71:04:bd:54:a3:41:00:05:20:
                    2b:2a:6c:2b:a0:b8:a6:bd:ed:69:3b:15:e5:5c:da:
                    76:87:4e:bb:ea:77:88:18:df:82:9b:08:05:85:ed:
                    41:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AA:2B:3E:FE:09:6A:77:64:45:40:F0:DF:A1:B6:9B:0E:D0:1B:5F
            X509v3 Authority Key Identifier:
                keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:9e:b1:e4:75:4f:8d:3e:6e:91:38:cc:97:d4:da:99:c2:67:
         26:25:f8:4d:d2:47:f4:13:a0:5a:b8:6e:6d:bf:fc:0a:44:85:
         18:33:c9:fb:cb:08:a5:58:6e:d7:df:28:82:c4:77:32:3b:35:
         20:ac:61:10:d0:3e:58:0f:29:72:a6:e0:75:ad:9f:df:72:9a:
         24:4b:3b:c2:33:bb:d1:5a:ac:4f:7f:46:79:64:00:82:ae:7d:
         81:a7:7f:73:72:3e:8f:41:8b:2a:c3:d6:b8:ba:48:67:08:48:
         11:df:f7:6d:c9:3d:2e:dc:06:28:67:b8:0c:a4:f0:78:13:fb:
         12:d8:c5:47:e7:72:f9:08:09:b7:66:88:cc:d4:5e:27:04:29:
         e2:6f:33:50:18:9b:d6:cf:c0:f2:81:6a:1d:b8:98:00:ee:22:
         44:45:af:98:9f:40:99:ea:de:66:f7:a3:03:75:37:4a:1f:0f:
         d3:07:7c:6c:ff:b3:72:a7:9c:4a:96:af:b0:b4:5a:47:a5:17:
         2f:ac:5d:bd:5a:3b:53:44:46:c1:64:80:42:41:6e:e9:b3:12:
         f7:05:b9:27:d1:b0:36:a0:db:ac:60:88:c8:b6:7c:f5:9c:59:
         9c:67:85:b3:19:c1:00:9b:62:a6:02:3b:c7:d5:71:bf:2e:3c:
         50:04:ac:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:54:54 2025 by rpki-client