Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft
File:                     FDeI0jX9adsvJbd3Il96t2naNQs.mft (raw, json)
Hash identifier:          I+X7WcvHILKQ5y/pzXm9UKbOypJ0LlXUV5D3JZ6EuOk=
Subject key identifier:   0F:0A:DE:54:33:16:4C:DC:5B:9B:BF:64:82:26:84:67:BF:64:FE:9F
Authority key identifier: 14:37:88:D2:35:FD:69:DB:2F:25:B7:77:22:5F:7A:B7:69:DA:35:0B
Certificate issuer:       /CN=A91C5323/serialNumber=143788D235FD69DB2F25B777225F7AB769DA350B
Certificate serial:       0577
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft
Manifest number:          056F
Signing time:             Sun 08 Jun 2025 22:58:25 +0000
Manifest this update:     Sun 08 Jun 2025 22:58:25 +0000
Manifest next update:     Sun 15 Jun 2025 22:58:25 +0000
Files and hashes:         1: FDeI0jX9adsvJbd3Il96t2naNQs.crl (hash: GymRBG8i/fWvr/I17Tg7b4wUA2L9EYhtcbVaVEjq4iw=)
                          2: 2A52AB54138811F0BA2C056DC4F9AE02.roa (hash: 0AvanG6lwhnjCogGu+WtHXRuTCMKYEBdG6vznbvbdAY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.crl
                          rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 22:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1399 (0x577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5323, serialNumber=143788D235FD69DB2F25B777225F7AB769DA350B
        Validity
            Not Before: Jun  8 22:58:25 2025 GMT
            Not After : Jun 15 22:58:25 2025 GMT
        Subject: CN=68461591-9eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b0:b7:88:db:cf:02:7a:3b:58:15:db:d0:7a:
                    6d:8c:e2:65:9b:e3:d1:d3:7f:1b:9d:31:92:91:ac:
                    d1:db:cd:76:53:6f:ee:20:d9:b8:f6:38:31:6f:fc:
                    79:af:f2:63:a1:37:19:1f:e5:2b:73:51:47:fb:fa:
                    97:dc:70:4c:ea:e5:0f:70:8a:b2:8b:84:4e:d6:73:
                    47:1d:0b:de:c9:2a:bc:b5:71:d1:e5:89:13:d5:51:
                    1f:10:c2:3e:95:09:ef:e8:2a:10:81:8f:db:dc:89:
                    32:bc:b3:78:d7:4f:78:12:d2:90:d6:14:ac:12:22:
                    d6:23:72:21:04:b3:7a:bc:1a:b5:11:5a:a2:89:bf:
                    8d:38:ad:c1:a4:c4:30:6f:82:3a:79:95:4c:9b:26:
                    66:69:4e:d5:5f:10:7c:0d:9f:b0:7a:57:55:c2:2a:
                    65:a1:31:8f:2b:c1:1b:c8:d8:9b:84:da:0f:b4:d5:
                    1e:3a:ce:b5:f8:ca:40:9d:b1:0f:38:5f:35:02:2f:
                    6d:1c:45:be:65:94:a2:7a:0b:19:5b:5e:7e:99:a6:
                    31:71:58:7e:ad:41:b5:fb:82:2c:e4:f0:df:ea:86:
                    69:6d:79:be:d8:16:f6:c5:15:fb:c9:19:97:47:e4:
                    82:a5:41:55:68:7e:bf:3a:fd:47:58:87:99:95:79:
                    a4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0A:DE:54:33:16:4C:DC:5B:9B:BF:64:82:26:84:67:BF:64:FE:9F
            X509v3 Authority Key Identifier:
                keyid:14:37:88:D2:35:FD:69:DB:2F:25:B7:77:22:5F:7A:B7:69:DA:35:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:61:05:93:0c:5c:9c:13:59:6f:a1:3e:74:ec:24:f8:22:7e:
         e7:38:c4:d3:ce:93:ec:e1:93:1b:f2:bf:21:94:8b:b5:5d:c7:
         9d:23:5a:e3:46:c4:a4:cd:2d:31:42:88:8d:23:28:3c:d4:26:
         bf:66:37:4a:95:fd:17:22:8c:83:28:07:bd:40:4e:eb:35:92:
         cb:be:53:4c:ba:ea:1d:97:95:f4:be:d3:88:9c:62:e2:49:9e:
         8d:fc:c8:42:e1:3d:c9:2e:3b:9c:ca:eb:8e:80:03:fd:e0:5c:
         19:61:7a:f5:54:ff:01:24:8c:7f:b1:35:8b:8b:f0:d3:22:0f:
         35:48:9d:bd:71:4a:dc:f2:e8:2c:44:9c:ae:c8:4c:f2:a8:56:
         b8:8b:82:2f:fd:51:b2:de:09:9e:8a:ed:bc:0d:ab:ad:c2:c3:
         5d:4c:1f:ab:78:be:cb:82:9a:fd:6a:1c:9f:58:7a:27:e9:73:
         3b:2f:c6:3e:4f:f9:02:de:cb:0e:5b:fa:a3:5a:9d:91:f3:b4:
         c3:4d:39:d8:c0:fe:a4:f2:2b:13:e4:f6:c3:36:c0:4d:a5:68:
         82:6f:0d:e2:0c:00:d7:5d:bd:c9:1d:31:a0:9d:39:51:90:76:
         7e:df:e0:77:bc:a5:dc:8c:dc:a2:02:80:ab:a4:2b:5d:ee:ac:
         3f:ef:7f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:55:43 2025 by rpki-client