Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
File:                     FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft (raw, json)
Hash identifier:          KOcS7h8z0o3JYGWtxKrrbxQcZtRYxuOecewzCKhTPbE=
Subject key identifier:   3E:08:04:D6:EF:F0:5B:27:AC:86:90:C8:90:BE:79:C5:43:D2:6E:7D
Authority key identifier: 16:75:DB:D9:EC:39:CE:ED:81:BB:BB:DE:42:CC:78:CF:7A:16:27:C5
Certificate issuer:       /CN=A918259F/serialNumber=1675DBD9EC39CEED81BBBBDE42CC78CF7A1627C5
Certificate serial:       0849
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
Manifest number:          0842
Signing time:             Sun 08 Jun 2025 20:27:14 +0000
Manifest this update:     Sun 08 Jun 2025 20:27:13 +0000
Manifest next update:     Sun 15 Jun 2025 20:27:13 +0000
Files and hashes:         1: FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl (hash: 8P0R7//wn1VyTRCTEyETKAsrpN9cwyAJOLwh9gtIbfY=)
                          2: 760B9414D50911EB81567986C4F9AE02.roa (hash: b2CWId8MqaA56uaZG0XW2vwyQDys6FvCX/OsZrpS0Q0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl
                          rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 20:27:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2121 (0x849)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918259F, serialNumber=1675DBD9EC39CEED81BBBBDE42CC78CF7A1627C5
        Validity
            Not Before: Jun  8 20:27:13 2025 GMT
            Not After : Jun 15 20:27:13 2025 GMT
        Subject: CN=6845f221-834e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9c:fe:47:2a:3e:d5:57:ac:c9:a4:94:a1:9f:
                    87:df:97:77:e2:2d:3b:2f:b6:b0:96:28:52:2c:20:
                    cd:3c:1f:d2:a9:fc:1f:3f:c7:52:92:d9:c1:82:78:
                    93:76:d9:28:da:c6:68:e4:2b:da:ef:5d:5f:52:7a:
                    8d:69:ec:dd:e3:0c:ad:58:aa:b4:43:48:d5:ae:c7:
                    ed:6e:74:9d:2d:a5:94:24:f5:b2:f0:de:e9:9d:b8:
                    a6:5e:4f:92:89:04:6e:d5:60:89:d0:4c:74:ae:d0:
                    ca:4a:fe:a5:47:db:92:cd:64:21:19:d0:cd:a0:4d:
                    c8:92:e9:52:95:b9:69:e0:a1:c5:f0:3e:be:63:95:
                    94:c0:c9:4e:18:04:53:46:3b:c5:ac:3a:71:87:bd:
                    e3:e6:9e:47:f6:fc:f0:df:d3:cb:c1:7a:3f:0d:7e:
                    5d:38:4f:5e:d8:a2:5b:ba:e8:5d:b6:3c:48:27:a8:
                    da:cd:93:88:8c:1b:b1:2e:f8:09:e3:4c:25:03:3c:
                    99:fd:e2:f8:9b:da:f9:7f:4d:c8:b5:9d:d2:b4:fd:
                    a3:ba:c0:e4:66:24:88:b3:4e:ed:e2:3f:f2:42:cc:
                    93:de:62:0d:94:58:1a:df:56:07:49:43:e2:45:e8:
                    1f:32:41:71:a1:7f:27:5c:6c:ff:5e:54:34:5f:c1:
                    46:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:08:04:D6:EF:F0:5B:27:AC:86:90:C8:90:BE:79:C5:43:D2:6E:7D
            X509v3 Authority Key Identifier:
                keyid:16:75:DB:D9:EC:39:CE:ED:81:BB:BB:DE:42:CC:78:CF:7A:16:27:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:53:88:27:a4:db:34:35:ae:92:66:5d:8a:a7:3f:17:32:56:
         b6:de:dd:ba:42:d7:d5:73:c9:9e:dc:39:73:dc:2b:85:03:99:
         e8:bb:88:e8:d1:66:9f:c2:34:f3:19:82:e5:89:85:e5:46:58:
         91:5f:71:da:34:e4:a8:2d:54:f9:45:60:9c:59:6b:7d:7e:5e:
         88:a1:4b:49:0b:71:24:f2:45:26:c4:cf:3e:1e:f2:bb:5e:2f:
         ab:e9:94:ac:7f:1e:cc:79:60:dc:50:8e:43:7d:41:ba:c6:e3:
         51:6e:9f:33:9a:b9:52:5e:dd:5a:95:39:83:ba:a8:6e:20:93:
         f1:07:d7:ae:f2:da:0d:74:05:af:8f:69:2c:ef:80:29:04:e9:
         2c:de:ad:63:ef:21:0b:43:0d:26:58:e0:3d:9a:ed:e2:07:8b:
         88:a2:c1:af:06:00:11:e9:49:34:d1:62:ba:ba:fc:2d:92:6a:
         4d:13:36:09:2d:fc:a8:e3:eb:a2:43:14:1e:8d:84:d2:d0:39:
         8f:61:d3:a9:2b:49:73:2b:3a:f3:32:08:46:ea:86:34:19:d0:
         7f:15:b3:35:85:2d:2a:a3:e8:1d:4d:5b:58:91:77:56:b1:7b:
         cf:91:26:25:53:c2:65:2c:f7:05:0c:7a:7a:05:70:32:52:95:
         db:2d:98:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:55:28 2025 by rpki-client