Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
File:                     FizOhuKjaX6Ri3y11W2goALHk3E.mft (raw, json)
Hash identifier:          GQ+n9MJpnbrQmn6DKB+p3OaN1K0uzlEtfGia7vHUHyk=
Subject key identifier:   DB:CD:44:2F:05:61:9E:87:86:71:A9:D4:8D:3B:BC:18:39:70:5F:1B
Authority key identifier: 16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71
Certificate issuer:       /CN=A91D17E6/serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371
Certificate serial:       14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
Manifest number:          14
Signing time:             Sat 31 May 2025 07:33:15 +0000
Manifest this update:     Sat 31 May 2025 07:33:14 +0000
Manifest next update:     Sat 07 Jun 2025 07:33:14 +0000
Files and hashes:         1: FizOhuKjaX6Ri3y11W2goALHk3E.crl (hash: L58axOFJ+XgkWcGb8D8GhuLkKm7JCQjxWj/ab2riBKM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl
                          rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 07:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D17E6, serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371
        Validity
            Not Before: May 31 07:33:14 2025 GMT
            Not After : Jun  7 07:33:14 2025 GMT
        Subject: CN=683ab0bb-3368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:52:c7:93:d3:d0:b2:16:16:8c:ee:92:82:59:
                    08:50:d0:48:8a:65:46:6b:f1:7d:6d:da:9d:8c:c2:
                    88:91:1c:e0:e2:41:40:19:0a:d6:ff:1a:10:c7:f2:
                    0a:46:57:37:92:d2:80:c1:89:d2:4f:fb:c5:21:af:
                    dc:ae:e5:3a:48:5b:0b:ab:e9:09:37:99:32:8c:8a:
                    ce:2c:a9:0e:b0:19:08:dc:72:d1:bd:2c:4c:2f:25:
                    bb:f4:1f:28:06:18:3d:34:eb:c3:b1:8f:b8:1a:55:
                    ff:ff:cd:83:1f:f9:f3:eb:56:26:04:da:2d:8f:03:
                    44:74:8d:81:07:40:97:4d:fc:74:2f:44:33:d9:b7:
                    2c:34:35:e5:34:be:cc:c3:e8:b0:13:86:55:e4:64:
                    cf:95:c6:4a:b2:ce:cf:bf:76:82:12:5c:9f:51:bd:
                    32:cc:45:be:17:dd:1b:a3:f1:a6:c1:48:55:c1:6a:
                    0d:eb:db:6c:2a:50:c6:b4:1a:0e:b9:45:42:92:99:
                    d6:32:b7:62:96:19:51:f5:2b:d0:03:f9:e6:65:da:
                    f8:ff:ec:8c:76:b6:eb:13:f0:61:9e:e5:df:5f:08:
                    9a:45:23:90:b1:9d:b6:df:13:18:6f:5b:08:e7:f2:
                    23:19:f0:b0:9c:a2:a8:ba:f3:b0:d0:79:0e:26:4b:
                    20:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CD:44:2F:05:61:9E:87:86:71:A9:D4:8D:3B:BC:18:39:70:5F:1B
            X509v3 Authority Key Identifier:
                keyid:16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:9a:0b:2e:05:e4:27:8f:10:dc:7f:4f:0d:3f:a1:f8:c8:20:
         26:93:21:e7:b2:55:13:79:f2:ec:b8:ec:2f:ad:31:74:ad:f1:
         d1:2b:60:6b:85:47:7c:f3:21:f0:40:6d:4c:ab:1b:17:29:36:
         97:44:a0:0c:e4:69:05:a7:50:8f:6b:0e:75:fb:55:b3:4c:0a:
         63:fb:c8:bb:5f:eb:ab:4a:53:48:d2:1e:af:39:60:d3:58:2c:
         36:c4:42:37:60:b1:cc:61:9b:e3:d9:ac:0d:64:7e:8b:66:8c:
         bb:a0:14:67:53:c8:38:76:b0:06:0a:61:51:1b:06:a7:db:67:
         b8:95:f7:7b:4a:bc:4d:1a:ab:c0:ed:86:4f:44:50:ab:00:c5:
         d8:59:95:23:e5:29:f9:ab:2b:72:fe:4c:1b:33:b7:2a:d3:fc:
         5f:8f:ff:b8:87:74:83:35:42:e5:3a:bd:c8:f4:02:65:1f:94:
         e2:02:25:52:27:fe:64:dc:26:bc:c9:a6:df:78:c7:5f:65:a0:
         49:e1:32:11:f5:7a:b0:cb:01:a2:c5:c3:08:8f:5e:5b:39:3f:
         42:33:20:51:77:0c:62:84:53:19:1c:d7:44:c7:22:76:70:ec:
         1a:ea:23:45:32:95:68:59:47:c4:7e:64:88:b8:b0:6a:10:f8:
         20:ee:3d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 15:23:10 2025 by rpki-client