Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft
File:                     fcRirz5ieKghiQWhs-fbN_LveoI.mft (raw, json)
Hash identifier:          ebxKuqelH1T492B3h8mZtYF+LBiEBiAfgMT1u7T9EEA=
Subject key identifier:   77:B5:D6:F4:55:6F:82:97:86:54:DB:BE:72:1D:AD:5B:BF:F8:28:8B
Authority key identifier: 7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82
Certificate issuer:       /CN=A915B598/serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82
Certificate serial:       0C4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft
Manifest number:          0C45
Signing time:             Fri 30 May 2025 18:35:32 +0000
Manifest this update:     Fri 30 May 2025 18:35:31 +0000
Manifest next update:     Fri 06 Jun 2025 18:35:31 +0000
Files and hashes:         1: fcRirz5ieKghiQWhs-fbN_LveoI.crl (hash: I8jmqiarutpcpoiwS937sO8pC2S48fXBGAAT0JxDkSM=)
                          2: ED6D9A0C047211EAA9BAFB77C4F9AE02.roa (hash: VMA/DaW08DK9v/lxWPtZwnO804CFumuELv89I609LTY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl
                          rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 18:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3148 (0xc4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B598, serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82
        Validity
            Not Before: May 30 18:35:31 2025 GMT
            Not After : Jun  6 18:35:31 2025 GMT
        Subject: CN=6839fa74-819c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d5:20:d1:1d:1c:4b:35:d8:c9:57:29:e3:46:
                    69:f8:ad:bf:fb:e7:b3:d5:21:9b:24:23:ab:08:82:
                    e8:15:51:b2:a2:9b:fc:a9:d6:35:74:24:be:f0:8e:
                    c7:97:44:b0:15:08:10:a3:a5:68:26:ce:6c:f3:6a:
                    da:8f:98:20:12:7a:18:de:b9:21:72:df:a9:9b:91:
                    70:1e:d9:fd:22:a7:af:bd:25:71:a9:e7:a0:e0:d0:
                    9f:38:18:cc:e6:6d:d8:eb:4c:55:ea:10:fd:ff:17:
                    a9:be:22:61:c5:bd:25:b3:ba:17:44:e0:8a:14:92:
                    97:5d:3b:66:d0:c6:01:b5:31:de:62:3e:f9:8f:18:
                    98:f9:db:9a:a6:bb:6e:49:5e:7d:05:e4:57:69:7d:
                    14:2c:f2:bb:e3:aa:9a:8b:57:ab:50:e9:41:a2:db:
                    ae:6c:77:31:23:cf:f5:85:07:1b:7c:f9:fc:75:87:
                    c3:3e:d0:fb:be:1d:5f:84:ed:93:e0:3e:0f:ea:bf:
                    d7:18:2b:9c:2b:78:90:77:ab:1e:0a:84:34:43:90:
                    4e:20:2a:18:2a:ba:7d:71:86:08:44:22:27:37:55:
                    8a:ee:75:83:fa:9e:26:65:16:0d:51:ac:89:41:16:
                    b6:ce:45:cc:14:27:53:63:3d:c3:bb:2f:83:01:fe:
                    f2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B5:D6:F4:55:6F:82:97:86:54:DB:BE:72:1D:AD:5B:BF:F8:28:8B
            X509v3 Authority Key Identifier:
                keyid:7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:20:e3:80:2a:29:03:cb:d5:a5:25:b6:e4:79:30:f0:89:3b:
         7f:ba:da:0c:9f:a1:09:79:48:f0:b7:be:21:b8:6a:06:de:f3:
         a4:16:2e:26:7c:12:65:86:9c:2f:21:e9:ea:af:8a:15:a5:e6:
         d2:8d:ed:c9:62:85:c2:e0:9c:e4:b5:94:e5:ff:56:f1:de:6b:
         bc:2c:d2:56:67:d4:16:a8:bd:b3:ee:8d:8a:31:58:a8:be:a0:
         2a:53:69:c1:53:e7:07:82:53:0c:5a:45:05:d5:da:3b:a9:2f:
         a4:2e:ce:c7:b7:3e:98:99:c1:8b:4c:2e:9b:8f:3f:da:a5:5a:
         5c:db:e2:25:02:f6:a5:a5:9d:4a:f9:9b:ab:76:fd:aa:96:45:
         f3:b8:19:07:c6:14:21:cf:97:f0:d4:30:9c:d0:95:f0:a9:ff:
         b6:29:0d:dd:20:2d:3f:0f:3b:76:e1:da:15:d7:8e:78:5e:33:
         bd:9d:1b:a6:7b:f2:80:9b:9d:40:9f:97:20:60:b5:7d:73:ad:
         dc:61:a1:58:77:92:ab:93:8f:29:6f:86:39:b9:07:53:ff:f9:
         c0:02:0f:a0:02:c6:48:9c:8c:51:01:70:92:f2:f2:89:76:1a:
         7a:58:98:3f:8c:ae:ce:6e:f0:76:c6:fb:44:b0:9a:7e:c7:a2:
         e7:77:e2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:51:37 2025 by rpki-client