Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft
File:                     FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft (raw, json)
Hash identifier:          vJ4jsis3nhOooLU06QcE4TGzDw9xkcXO3IYNwZqvn0Q=
Subject key identifier:   AD:08:80:3B:CD:5C:3B:5A:F4:4B:01:BF:2B:7E:A8:C7:3A:61:AD:50
Authority key identifier: 16:33:29:F5:70:5D:E9:BC:22:35:AC:57:D7:54:F9:80:78:C7:F5:2B
Certificate issuer:       /CN=A918BB4D/serialNumber=163329F5705DE9BC2235AC57D754F98078C7F52B
Certificate serial:       067F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FjMp9XBd6bwiNaxX11T5gHjH9Ss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft
Manifest number:          067F
Signing time:             Wed 12 Mar 2025 21:55:21 +0000
Manifest this update:     Wed 12 Mar 2025 21:55:21 +0000
Manifest next update:     Wed 19 Mar 2025 21:55:21 +0000
Files and hashes:         1: FjMp9XBd6bwiNaxX11T5gHjH9Ss.crl (hash: +XeZxIeaXFvO2JAtDi3BmcfDr9l4XRTg/KZq+VZbz1w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.crl
                          rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FjMp9XBd6bwiNaxX11T5gHjH9Ss.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 21:55:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1663 (0x67f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BB4D
        Validity
            Not Before: Mar 12 21:55:21 2025 GMT
            Not After : Mar 19 21:55:21 2025 GMT
        Subject: CN=67d202c9-9f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:40:7c:ba:6f:14:d0:6f:bb:c8:59:67:f8:a5:
                    57:88:af:7c:05:79:d9:ee:cf:94:a1:93:9b:98:18:
                    88:11:cf:b2:f4:4e:93:fd:57:1f:73:ca:a0:2a:ad:
                    2a:87:df:22:d9:bf:18:c8:00:58:01:bc:cb:92:48:
                    52:73:41:63:19:48:96:42:4e:09:03:e9:16:f6:2a:
                    4f:c1:36:5f:d5:4c:61:a4:11:a0:40:73:f7:4a:f0:
                    31:ec:df:45:f0:4c:3a:95:cd:3a:0d:09:41:77:22:
                    f0:0f:ac:80:99:67:74:8a:e5:f8:58:bc:4d:6d:26:
                    08:04:00:4e:f7:ba:95:32:96:70:f2:2c:64:57:c1:
                    41:19:79:88:5f:8f:54:99:17:ee:0d:8e:78:38:f0:
                    a4:11:a1:af:17:7d:03:d3:8a:f9:5a:75:d2:39:c7:
                    34:4d:05:93:97:79:7e:2f:ff:d0:8a:64:a7:18:ab:
                    08:6d:66:0b:eb:2b:bb:64:af:b0:a6:b4:10:c8:8d:
                    9a:1f:82:d0:f2:3a:63:ad:6b:0d:9c:80:e2:06:c2:
                    21:2d:37:30:11:99:83:e7:d2:8d:23:74:91:24:a8:
                    40:e6:8e:5b:7c:be:63:2f:9a:3e:0d:12:c3:c0:32:
                    00:26:62:63:ce:84:bc:69:40:73:88:1d:43:96:f6:
                    fe:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:08:80:3B:CD:5C:3B:5A:F4:4B:01:BF:2B:7E:A8:C7:3A:61:AD:50
            X509v3 Authority Key Identifier:
                keyid:16:33:29:F5:70:5D:E9:BC:22:35:AC:57:D7:54:F9:80:78:C7:F5:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FjMp9XBd6bwiNaxX11T5gHjH9Ss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:41:de:9a:a8:95:c4:cc:d4:f3:75:92:fd:7e:9c:ee:46:ed:
         33:62:77:98:7f:3a:22:53:e3:f5:b8:93:63:89:1f:94:ca:17:
         4c:ed:9f:f3:5a:b0:93:6b:5e:f6:39:fc:72:48:86:70:e2:aa:
         ee:42:08:6f:06:41:00:50:2b:2d:80:15:66:23:59:f1:5d:cd:
         b8:d7:8c:63:0c:69:fb:f8:74:2e:88:b9:9d:74:6a:e4:d4:7d:
         da:17:76:28:00:88:89:11:89:03:aa:9b:8a:ec:85:19:09:ac:
         02:57:60:8a:b3:93:98:d9:67:b3:9a:2f:5d:ac:b7:5c:eb:67:
         af:4a:d1:d0:4e:2b:e2:f1:27:80:6c:e7:be:4b:a9:8d:f1:ee:
         f1:56:ab:76:c3:8c:1b:93:bf:0c:e5:f8:6b:a7:a6:cf:c6:aa:
         0e:52:17:95:47:a2:36:cd:04:b8:3b:df:bd:a0:50:74:88:58:
         ac:47:36:29:da:9e:8e:5e:75:f0:47:61:3b:eb:a7:bc:ba:ef:
         f4:36:d7:f3:6d:07:c9:6e:ea:d2:7d:b4:78:1f:bb:a9:b3:9a:
         97:b3:6a:89:6d:1f:71:b4:69:09:df:c4:15:be:37:b3:ee:5a:
         41:6e:1f:cc:53:11:0a:de:cf:01:4c:8c:1c:3c:a4:9f:31:6e:
         54:bd:48:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:31:03 2025 by rpki-client