Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
File:                     FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft (raw, json)
Hash identifier:          cBQ4X/cMVJnPX2G7yxIZWRCAzE8VtWE8D7HSehrEXy8=
Subject key identifier:   9A:4E:6A:48:F1:DE:B3:03:CC:82:4E:6B:2C:4D:18:82:5A:E2:90:63
Authority key identifier: 16:75:DB:D9:EC:39:CE:ED:81:BB:BB:DE:42:CC:78:CF:7A:16:27:C5
Certificate issuer:       /CN=A918259F/serialNumber=1675DBD9EC39CEED81BBBBDE42CC78CF7A1627C5
Certificate serial:       084B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
Manifest number:          0844
Signing time:             Thu 12 Jun 2025 20:29:07 +0000
Manifest this update:     Thu 12 Jun 2025 20:29:07 +0000
Manifest next update:     Thu 19 Jun 2025 20:29:07 +0000
Files and hashes:         1: FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl (hash: TGJaztMAn97GCCe/s4haIRnyFBfOvyQKzxvJFBaRRcY=)
                          2: 760B9414D50911EB81567986C4F9AE02.roa (hash: b2CWId8MqaA56uaZG0XW2vwyQDys6FvCX/OsZrpS0Q0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl
                          rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 20:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2123 (0x84b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918259F, serialNumber=1675DBD9EC39CEED81BBBBDE42CC78CF7A1627C5
        Validity
            Not Before: Jun 12 20:29:07 2025 GMT
            Not After : Jun 19 20:29:07 2025 GMT
        Subject: CN=684b3893-f209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:48:6e:ea:3a:f0:f3:13:d2:e9:f2:cb:f5:44:
                    fa:59:78:f9:7c:3e:5c:4e:2d:e6:b2:ad:bd:72:98:
                    d6:40:1c:44:ca:0b:84:48:9c:21:ca:79:97:48:a9:
                    6f:04:14:6f:2b:a5:29:1c:2d:0e:5f:48:12:e7:6f:
                    ed:76:f9:f2:89:eb:07:ab:e8:ee:50:62:86:bb:e4:
                    11:01:b0:35:df:aa:6c:25:da:82:7e:ca:d7:a2:9e:
                    c0:a3:6c:31:99:47:f3:f0:f7:47:ce:3d:69:00:a3:
                    27:71:79:cc:2e:44:d5:b9:50:f7:96:79:1a:44:4c:
                    9b:b9:aa:ae:58:98:b4:16:84:66:81:5e:ee:90:69:
                    66:81:0f:28:66:88:8d:4d:1c:8e:d4:f6:c8:31:32:
                    15:90:d4:02:a4:1c:a0:38:aa:e9:0f:c8:d4:2e:eb:
                    2b:4a:cd:8c:78:a5:12:66:bd:2a:95:94:44:07:62:
                    c7:c1:90:3e:eb:d7:d7:cf:58:cd:0c:10:d2:7c:66:
                    70:a4:3b:42:12:6a:cc:d5:db:61:81:53:e9:38:7a:
                    58:c3:8a:a3:1a:12:0d:b5:e6:aa:18:8a:16:e9:16:
                    86:1d:fc:d2:e7:2b:09:03:8b:58:23:64:f8:c5:1b:
                    1e:e8:d5:2b:57:f6:6c:bf:c7:c0:99:de:d5:16:18:
                    ff:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4E:6A:48:F1:DE:B3:03:CC:82:4E:6B:2C:4D:18:82:5A:E2:90:63
            X509v3 Authority Key Identifier:
                keyid:16:75:DB:D9:EC:39:CE:ED:81:BB:BB:DE:42:CC:78:CF:7A:16:27:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:53:ce:aa:d1:12:08:09:43:e0:eb:5e:7f:75:e7:21:26:7c:
         64:fb:06:5f:7d:ee:50:39:e0:b9:f4:73:d4:8e:4f:69:ea:1c:
         c7:ea:b8:05:86:c4:73:1e:51:9f:3e:49:18:8b:28:1f:d2:27:
         a5:f7:95:af:62:74:ad:95:39:72:bc:04:d3:95:3b:ea:52:f1:
         4f:dd:68:0e:08:e0:ef:c8:6d:8e:f0:c2:12:cf:9a:12:8b:c5:
         c1:85:4c:28:11:2e:dd:43:5a:fc:7f:9c:0c:8f:a4:84:52:b2:
         e8:3c:39:d2:48:c4:24:7c:c5:4a:0a:c8:5c:7e:dd:77:b8:b1:
         24:fa:58:9a:8b:3b:90:74:30:15:a0:c1:b6:06:cf:5c:ee:69:
         b8:3e:15:a4:65:d8:c0:ec:f8:60:d6:62:de:80:16:b2:29:6c:
         e5:f1:fa:d1:f6:b7:4f:72:7e:64:7f:a7:39:27:40:53:6c:dc:
         2d:34:a9:d1:b1:38:00:05:75:53:6e:82:e1:35:8d:1c:47:af:
         e5:df:2e:1a:8c:dd:d1:9c:58:db:f8:a5:a0:32:c8:e1:32:0c:
         d7:65:aa:12:7a:cf:46:e8:57:fe:a8:4a:c2:8b:f5:e5:67:cf:
         23:96:e1:5c:24:c4:77:bb:e7:23:8f:ca:07:4e:1c:6f:c2:99:
         e3:c8:62:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 01:24:27 2025 by rpki-client