Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
File:                     ftF6_XNwpqkI2CYrhtq8fu09YUA.mft (raw, json)
Hash identifier:          znKXv5HzurwL27Fi8XmKI9/QcCk/2+J01srz9KRQQ6E=
Subject key identifier:   C2:9D:2B:E2:DF:6F:7C:68:64:D8:7E:0B:72:ED:83:77:AA:19:88:F0
Authority key identifier: 7E:D1:7A:FD:73:70:A6:A9:08:D8:26:2B:86:DA:BC:7E:ED:3D:61:40
Certificate issuer:       /CN=A91B6F87/serialNumber=7ED17AFD7370A6A908D8262B86DABC7EED3D6140
Certificate serial:       0730
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ftF6_XNwpqkI2CYrhtq8fu09YUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
Manifest number:          0729
Signing time:             Wed 12 Mar 2025 21:25:32 +0000
Manifest this update:     Wed 12 Mar 2025 21:25:32 +0000
Manifest next update:     Wed 19 Mar 2025 21:25:32 +0000
Files and hashes:         1: ftF6_XNwpqkI2CYrhtq8fu09YUA.crl (hash: TcGLvlY7kV5rVzBZibK+jGfKN3rMwDnloR1Ys3t/AwA=)
                          2: 69BA51482C9C11EBB49A3A32C4F9AE02.roa (hash: 61ebvHln7P8JgHVIjhyuvS6INNaPluy8PBDesNazLu0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.crl
                          rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ftF6_XNwpqkI2CYrhtq8fu09YUA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 21:25:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1840 (0x730)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6F87
        Validity
            Not Before: Mar 12 21:25:32 2025 GMT
            Not After : Mar 19 21:25:32 2025 GMT
        Subject: CN=67d1fbcc-2145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:96:e7:cc:ca:e0:68:04:7e:3b:37:eb:11:b2:
                    20:f5:0b:ff:99:7c:55:8a:17:35:c3:73:45:75:a0:
                    43:5a:51:70:e6:65:d9:c0:fb:70:50:92:fb:cb:df:
                    3a:e9:b0:7b:88:66:83:0f:39:92:a9:91:3b:2b:6f:
                    9c:e8:0e:a6:ac:25:62:28:9b:16:3b:a4:d7:03:ba:
                    0c:56:76:a4:6c:53:6c:92:c0:f5:7b:63:1c:ed:76:
                    8b:fe:e6:f8:cb:6b:8c:5a:8a:29:00:9e:ef:b0:e0:
                    96:05:36:f1:eb:87:32:8c:e1:61:a7:11:cc:c9:8e:
                    82:52:4f:dc:d6:f4:f6:97:c5:0e:1c:94:ad:01:43:
                    47:79:7e:ef:5e:d8:ee:6b:69:58:79:ec:6b:ac:32:
                    d7:f3:f8:ca:73:92:df:ce:e5:47:d5:33:9b:21:2c:
                    b6:5d:08:54:c1:58:f7:49:9f:8f:06:11:27:74:a0:
                    54:6b:80:a5:52:90:3a:ad:ce:33:a5:d6:c3:8d:d8:
                    ae:20:f4:b2:4f:4c:f8:aa:81:0b:92:d0:24:84:c3:
                    cb:f4:84:49:90:35:c5:e7:7e:d3:7a:a0:95:98:0e:
                    c3:e6:33:0b:1d:38:54:95:56:76:a0:4b:3c:a9:bf:
                    4a:31:d3:e0:1e:9b:99:63:a5:94:9f:bd:27:5e:0c:
                    7f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9D:2B:E2:DF:6F:7C:68:64:D8:7E:0B:72:ED:83:77:AA:19:88:F0
            X509v3 Authority Key Identifier:
                keyid:7E:D1:7A:FD:73:70:A6:A9:08:D8:26:2B:86:DA:BC:7E:ED:3D:61:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ftF6_XNwpqkI2CYrhtq8fu09YUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:3a:ac:ac:00:c8:ba:43:20:2d:6d:6d:a4:c0:f4:ce:4a:9e:
         89:77:19:58:8b:00:93:a5:42:50:80:5b:1f:d3:9f:56:17:96:
         20:fb:cd:26:3c:38:54:dc:95:1e:ed:ce:8f:90:96:20:4f:49:
         35:ab:cb:24:f1:ca:c2:5a:d6:e6:c5:e2:85:e7:33:b3:6d:f6:
         fe:c2:e2:cd:90:8a:6a:ce:96:25:ba:c1:23:d9:3b:26:4b:ee:
         bd:08:a3:e5:59:a5:67:f8:1b:16:c6:5b:69:29:d6:db:76:5d:
         1b:c9:db:1d:dc:68:e3:e6:67:a0:5f:89:dc:90:1f:ee:d0:2e:
         cf:ff:b2:95:e8:12:06:8e:03:73:54:f6:97:a2:7d:33:4a:71:
         ba:85:1b:24:6d:b5:6e:e8:99:7f:4f:66:86:55:2e:a5:b4:33:
         39:d1:58:a3:c3:c3:8b:ec:1e:88:3c:66:f6:ea:bb:c8:18:96:
         fe:d6:f5:4a:0a:0e:33:5b:ec:4b:74:14:a2:6c:21:f8:ca:23:
         c8:8c:2d:a9:f1:fd:20:2a:73:19:a1:b7:71:e6:2c:b0:ce:ed:
         7b:f4:b4:de:86:fb:1c:4f:9c:7c:1f:f9:ee:32:fc:de:28:17:
         ef:6a:b0:fe:d3:a3:f2:10:4b:23:63:94:d4:eb:6c:b2:94:d3:
         48:e4:38:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:31:42 2025 by rpki-client