Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/D0700E64FE0311EE998E0C49C4F9AE02/FvdX-Fv0x3-S-se_sL34aE8QKrE.mft
File:                     FvdX-Fv0x3-S-se_sL34aE8QKrE.mft (raw, json)
Hash identifier:          b7vCQmhGdFFA4J06iW66oRsocVzaMD2CvAU5RV8E5eg=
Subject key identifier:   63:CE:12:0C:F4:B5:B8:62:60:63:F3:6E:DB:2E:81:53:28:4D:52:0D
Authority key identifier: 16:F7:57:F8:5B:F4:C7:7F:92:FA:C7:BF:B0:BD:F8:68:4F:10:2A:B1
Certificate issuer:       /CN=A9172999/serialNumber=16F757F85BF4C77F92FAC7BFB0BDF8684F102AB1
Certificate serial:       A7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FvdX-Fv0x3-S-se_sL34aE8QKrE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172999/D0700E64FE0311EE998E0C49C4F9AE02/FvdX-Fv0x3-S-se_sL34aE8QKrE.mft
Manifest number:          A7
Signing time:             Thu 13 Mar 2025 01:17:17 +0000
Manifest this update:     Thu 13 Mar 2025 01:17:16 +0000
Manifest next update:     Thu 20 Mar 2025 01:17:16 +0000
Files and hashes:         1: FvdX-Fv0x3-S-se_sL34aE8QKrE.crl (hash: OB1GHj7fFps8LM27HMfvpL+tqpsMWMvFsF/qJPB7GcA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172999/D0700E64FE0311EE998E0C49C4F9AE02/FvdX-Fv0x3-S-se_sL34aE8QKrE.crl
                          rsync://rpki.apnic.net/member_repository/A9172999/D0700E64FE0311EE998E0C49C4F9AE02/FvdX-Fv0x3-S-se_sL34aE8QKrE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FvdX-Fv0x3-S-se_sL34aE8QKrE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Mar 2025 01:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172999
        Validity
            Not Before: Mar 13 01:17:16 2025 GMT
            Not After : Mar 20 01:17:16 2025 GMT
        Subject: CN=67d2321c-a336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3e:bf:b2:d5:0e:0e:09:29:96:1c:27:cc:2b:
                    49:c0:ab:f3:c3:83:bd:4d:77:cc:3d:ef:d5:16:a6:
                    c6:6b:e3:11:38:84:b2:07:e0:01:2f:cd:3c:9a:d4:
                    df:7d:66:fb:e8:f7:1b:86:5e:50:bd:78:fc:02:ec:
                    c2:88:c7:0c:96:89:01:f9:75:cc:7d:da:a5:bb:df:
                    37:58:0e:c9:07:d8:3b:31:53:ab:26:c4:66:9a:91:
                    b4:7d:e0:f1:b7:20:24:b4:28:3f:b1:d3:39:31:4f:
                    ca:f0:61:5b:4f:fd:a9:8a:4c:2a:74:68:d1:fe:39:
                    28:69:2d:02:9f:1f:5c:68:53:80:68:05:fb:57:91:
                    4a:e6:f9:8c:40:12:05:8f:e3:37:f0:7f:2b:e5:4a:
                    5e:16:83:a6:f5:79:c6:97:7a:a2:2f:72:e1:78:87:
                    0d:48:52:2c:82:ac:d2:d8:90:07:d8:c2:00:fa:5d:
                    ac:11:67:19:49:15:62:90:0f:9b:97:92:10:e2:11:
                    9e:a0:6a:04:7b:a1:4b:5d:60:9a:b6:64:01:5e:51:
                    7b:ed:a1:8f:86:a9:f4:94:ef:6b:21:e0:74:0e:cc:
                    e3:ad:62:aa:79:33:c2:86:4b:fd:f4:1d:93:a6:6e:
                    2f:9d:18:12:ed:47:da:6b:d7:d2:45:97:ab:dd:59:
                    bb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CE:12:0C:F4:B5:B8:62:60:63:F3:6E:DB:2E:81:53:28:4D:52:0D
            X509v3 Authority Key Identifier:
                keyid:16:F7:57:F8:5B:F4:C7:7F:92:FA:C7:BF:B0:BD:F8:68:4F:10:2A:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172999/D0700E64FE0311EE998E0C49C4F9AE02/FvdX-Fv0x3-S-se_sL34aE8QKrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FvdX-Fv0x3-S-se_sL34aE8QKrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/D0700E64FE0311EE998E0C49C4F9AE02/FvdX-Fv0x3-S-se_sL34aE8QKrE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:55:25:ed:b6:ec:bd:81:35:84:4a:f9:08:31:8e:0d:1d:50:
         31:0f:ea:81:e8:2a:cd:76:1a:3d:2c:42:ec:f6:3a:90:d7:04:
         39:3f:a7:dd:48:05:67:2b:3d:48:d0:72:59:23:10:4b:cb:05:
         a0:5b:e7:d1:fc:5b:a3:f5:0a:38:e8:03:e8:27:ec:ad:88:e3:
         c6:82:3f:15:43:26:6d:66:0a:9d:7d:93:e0:7b:4e:cc:12:f9:
         ea:ef:ed:5f:d5:3e:60:2c:17:bf:68:16:0a:64:ce:36:7e:1f:
         b6:b6:4c:19:87:cd:c2:3b:17:27:c1:2c:9b:53:76:96:7d:ed:
         77:9d:1f:c9:14:51:28:0b:ba:45:0a:62:ab:33:09:0a:2c:ab:
         74:c4:8f:b4:38:95:50:9d:12:11:61:8f:c8:1e:1b:e5:30:36:
         7b:da:b6:cb:74:03:b7:2e:bc:13:8a:0c:37:50:6d:ca:f8:b4:
         18:1d:9b:e1:70:72:ba:2e:38:d5:b8:aa:f3:38:47:d9:79:07:
         68:ee:87:17:45:ac:48:9e:60:6d:92:0d:7b:5a:63:5a:0d:e6:
         1a:99:0a:6e:c2:c5:35:00:65:f0:0c:5b:53:b7:ab:5e:43:c7:
         72:9e:c6:81:47:f4:c5:65:af:92:9d:70:c9:97:f7:ec:c4:00:
         c7:79:36:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:31:00 2025 by rpki-client