Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.mft
File:                     FpcDHB024MQncP5r8o2uSO4TZJY.mft (raw, json)
Hash identifier:          W2A1t1bJ9y0VgM7QcZoIzgkZNOz/+NdAmJ9AMioXWbY=
Subject key identifier:   53:40:E1:98:63:A6:E4:E6:6C:52:D4:4A:E0:7E:D5:01:1F:A5:E5:EA
Authority key identifier: 16:97:03:1C:1D:36:E0:C4:27:70:FE:6B:F2:8D:AE:48:EE:13:64:96
Certificate issuer:       /CN=A9193B94/serialNumber=1697031C1D36E0C42770FE6BF28DAE48EE136496
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpcDHB024MQncP5r8o2uSO4TZJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.mft
Manifest number:          55
Signing time:             Sat 31 May 2025 06:47:47 +0000
Manifest this update:     Sat 31 May 2025 06:47:46 +0000
Manifest next update:     Sat 07 Jun 2025 06:47:46 +0000
Files and hashes:         1: FpcDHB024MQncP5r8o2uSO4TZJY.crl (hash: dB4DcmMnldCqGR023izVQM2kgkvh4cXU05UkpT9PDPg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.crl
                          rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpcDHB024MQncP5r8o2uSO4TZJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 06:47:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193B94, serialNumber=1697031C1D36E0C42770FE6BF28DAE48EE136496
        Validity
            Not Before: May 31 06:47:46 2025 GMT
            Not After : Jun  7 06:47:46 2025 GMT
        Subject: CN=683aa612-527e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:39:fd:50:1d:7a:f5:8f:b1:f8:08:a9:54:b7:
                    c7:7a:e2:b6:0c:6d:20:6b:c4:7d:df:1d:d8:49:29:
                    cd:da:00:e8:b6:aa:e6:32:8b:ab:99:2c:b7:ef:52:
                    e4:9a:e5:38:84:8d:ab:7e:cb:64:f8:ef:88:bd:9c:
                    96:af:f7:a2:36:f5:69:28:e8:f2:70:7e:6a:67:60:
                    d0:34:50:5b:f5:ff:f8:9c:10:cc:b6:2f:0e:bc:62:
                    14:0a:b3:f1:79:b1:7b:06:24:89:89:39:ca:2a:40:
                    e1:30:fb:d4:59:b4:de:a4:bd:ae:22:b3:43:b2:95:
                    06:ff:2a:fe:68:53:f3:67:36:6f:2d:2a:8b:c0:92:
                    28:a8:ed:bf:80:9c:ff:04:be:2a:8d:da:e9:57:38:
                    84:7b:82:d0:22:6c:3e:b2:5e:9a:fa:89:5c:c9:8d:
                    44:56:60:4c:4b:5f:fa:f4:3b:42:bb:f9:25:dc:c8:
                    d2:34:5a:02:59:3d:9b:c0:b7:ea:ce:70:44:a7:57:
                    e5:27:4a:33:85:d3:cb:68:7c:e1:de:ac:28:82:88:
                    9c:30:7f:42:75:d0:30:11:64:80:72:85:99:e2:d4:
                    b5:1f:60:49:89:55:f0:9c:77:da:af:91:d8:55:bc:
                    78:d7:bc:69:ed:e7:46:5f:6d:c4:16:64:79:8a:24:
                    24:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:40:E1:98:63:A6:E4:E6:6C:52:D4:4A:E0:7E:D5:01:1F:A5:E5:EA
            X509v3 Authority Key Identifier:
                keyid:16:97:03:1C:1D:36:E0:C4:27:70:FE:6B:F2:8D:AE:48:EE:13:64:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpcDHB024MQncP5r8o2uSO4TZJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ef:f4:20:24:e6:d4:87:05:1d:db:69:ce:8f:94:24:18:d4:
         1a:3a:e3:66:14:c1:f0:a8:c7:f8:93:6b:4c:00:b2:70:d9:13:
         4b:b1:3b:55:09:ce:4e:cd:7b:65:6c:22:3c:7a:96:c0:52:dc:
         68:c2:0b:fa:e4:5f:a4:86:96:9c:f3:55:17:41:76:d5:b8:70:
         27:43:9f:5c:65:93:ae:74:26:e2:b8:7b:2d:be:b1:6d:f3:5c:
         dc:99:6e:f4:73:24:85:79:ff:92:e3:7f:87:54:30:aa:68:da:
         4e:18:44:d1:57:cb:33:d4:f1:c0:0a:7e:5f:bc:2c:74:0f:ed:
         98:de:bb:6a:e6:50:c7:90:b8:d0:6d:c7:9e:2e:f8:11:da:8b:
         c8:37:67:bd:35:1c:d5:65:90:67:65:9c:3a:b2:59:c5:f5:e5:
         b4:d6:67:d6:80:13:a1:bb:aa:a7:27:40:ae:cd:75:f3:8d:77:
         39:fc:f7:1f:da:c2:4d:6f:6b:fc:35:67:eb:a9:21:61:bf:d2:
         02:26:aa:64:c8:42:26:36:aa:d8:29:32:c3:cf:02:f3:ae:11:
         f1:76:11:d2:84:29:d0:b4:44:30:94:df:e7:5c:38:eb:2a:85:
         e3:c3:a3:88:1b:40:5f:cb:29:6e:63:4e:50:c1:6e:76:15:24:
         31:12:b8:d0
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
M0I5NDExMC8GA1UEBRMoMTY5NzAzMUMxRDM2RTBDNDI3NzBGRTZCRjI4REFFNDhF
RTEzNjQ5NjAeFw0yNTA1MzEwNjQ3NDZaFw0yNTA2MDcwNjQ3NDZaMBgxFjAUBgNV
BAMTDTY4M2FhNjEyLTUyN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDAOf1QHXr1j7H4CKlUt8d64rYMbSBrxH3fHdhJKc3aAOi2quYyi6uZLLfvUuSa
5TiEjat+y2T474i9nJav96I29Wko6PJwfmpnYNA0UFv1//icEMy2Lw68YhQKs/F5
sXsGJImJOcoqQOEw+9RZtN6kva4is0OylQb/Kv5oU/NnNm8tKovAkiio7b+AnP8E
viqN2ulXOIR7gtAibD6yXpr6iVzJjURWYExLX/r0O0K7+SXcyNI0WgJZPZvAt+rO
cESnV+UnSjOF08tofOHerCiCiJwwf0J10DARZIByhZni1LUfYEmJVfCcd9qvkdhV
vHjXvGnt50ZfbcQWZHmKJCRRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU0DhmGOm
5OZsUtRK4H7VAR+l5eowHwYDVR0jBBgwFoAUFpcDHB024MQncP5r8o2uSO4TZJYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzQjk0L0I3NzkxNjIyQkNE
OTExRUY5MkFCMzMxM0M0RjlBRTAyL0ZwY0RIQjAyNE1RbmNQNXI4bzJ1U080VFpK
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRnBjREhCMDI0TVFuY1A1cjhvMnVTTzRUWkpZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz
Qjk0L0I3NzkxNjIyQkNEOTExRUY5MkFCMzMxM0M0RjlBRTAyL0ZwY0RIQjAyNE1R
bmNQNXI4bzJ1U080VFpKWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJrv9CAk5tSHBR3bac6PlCQY1Bo642YUwfCox/iTa0wAsnDZE0uxO1UJ
zk7Ne2VsIjx6lsBS3GjCC/rkX6SGlpzzVRdBdtW4cCdDn1xlk650JuK4ey2+sW3z
XNyZbvRzJIV5/5Ljf4dUMKpo2k4YRNFXyzPU8cAKfl+8LHQP7Zjeu2rmUMeQuNBt
x54u+BHai8g3Z701HNVlkGdlnDqyWcX15bTWZ9aAE6G7qqcnQK7NdfONdzn89x/a
wk1va/w1Z+upIWG/0gImqmTIQiY2qtgpMsPPAvOuEfF2EdKEKdC0RDCU3+dcOOsq
hePDo4gbQF/LKW5jTlDBbnYVJDESuNA=
-----END CERTIFICATE-----
Generated at Sat May 31 16:32:15 2025 by rpki-client