Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
File:                     fiRDENekVusSe5JsQvJteems24g.mft (raw, json)
Hash identifier:          LNJHAlIIXgI57K28cLmQ+A5x74sULiZ7aTFllQnFFms=
Subject key identifier:   34:6C:3C:E0:51:B8:C9:3E:16:10:7E:53:72:8D:1C:17:B9:A3:3D:8E
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Certificate issuer:       /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial:       08AA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
Manifest number:          0850
Signing time:             Sat 31 May 2025 21:01:13 +0000
Manifest this update:     Sat 31 May 2025 21:01:13 +0000
Manifest next update:     Sat 07 Jun 2025 21:01:13 +0000
Files and hashes:         1: fiRDENekVusSe5JsQvJteems24g.crl (hash: r+k6zcOO6r8EVBsRttJjS+oK6+KqbLblc8OV7x3dC9k=)
                          2: BE33817A69AE11EEBBC89D75C4F9AE02.roa (hash: SNPBwQUb1RKoaTQTNrfH32vnIjaOv9HeTlrUpVnkMgc=)
                          3: 885A3B4C198C11EEA06C1429C4F9AE02.roa (hash: KtUrm2foeaUuoNmWh4nKKxxCo2xUAoGCx8YrdIKIWS8=)
                          4: B59B34B2A59511EFB1B8AF36C4F9AE02.roa (hash: eiCuC1YeFyOuHPZHqPQ601dUszGySRFgdPdOWzMPWtY=)
                          5: 6D0768C2770711EFBA70CE36C4F9AE02.roa (hash: tEuFHPIEilNpnG2svl8ZjY076owwpchb5SOYj1BIOvg=)
                          6: A64C29AA3D9811EE88B2694CC4F9AE02.roa (hash: P543uAxi61jv6pAr/0Afy+uliwnXO1AO2KiTZ1BtODA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
                          rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 21:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2218 (0x8aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
        Validity
            Not Before: May 31 21:01:13 2025 GMT
            Not After : Jun  7 21:01:13 2025 GMT
        Subject: CN=683b6e19-e6b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9c:d4:ab:ac:b0:0e:32:a8:a9:1e:9d:60:61:
                    dc:06:33:3a:ba:bb:69:d4:4f:64:0e:5b:06:99:5e:
                    0a:23:07:30:99:b0:c9:a3:97:5d:dd:5a:1d:7a:54:
                    3b:e9:67:6c:0c:6a:ba:0e:5f:b6:84:dd:b1:d6:70:
                    82:7a:61:8f:10:e1:46:be:8b:c9:9f:c2:32:46:2a:
                    9d:f7:52:7d:ae:1d:57:60:47:b5:0f:19:e7:c8:cc:
                    23:82:6d:37:6f:ea:c5:61:36:a6:bd:3c:81:67:96:
                    ce:d5:bc:e9:39:87:ce:55:2c:bf:82:26:3f:f2:e5:
                    1f:03:34:c0:1e:96:69:8e:5f:54:b4:da:94:e3:91:
                    27:4f:3d:32:d7:68:42:32:56:66:de:94:06:75:be:
                    d2:95:6f:42:d2:3d:a5:b5:3d:41:d5:00:45:9a:8b:
                    9f:db:a9:1d:79:ac:01:1f:d7:8d:56:47:c3:cf:7b:
                    0b:a4:b0:6b:dc:4e:b9:bc:5d:f2:3a:be:74:17:41:
                    ce:dd:d9:66:30:50:60:d6:ad:af:c5:34:ac:d3:d7:
                    0e:be:c6:32:bb:65:23:af:31:70:cb:df:4f:1b:b4:
                    50:ed:8a:52:2c:f0:71:56:41:5f:88:8c:bc:87:bc:
                    92:09:fa:be:56:86:8b:30:ac:da:11:18:52:74:7f:
                    35:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6C:3C:E0:51:B8:C9:3E:16:10:7E:53:72:8D:1C:17:B9:A3:3D:8E
            X509v3 Authority Key Identifier:
                keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a2:39:a0:e1:50:36:99:67:2f:8c:78:01:34:ba:de:24:8c:
         a7:b4:15:47:67:21:23:33:48:63:76:a7:58:0a:d4:f8:b9:83:
         de:27:b2:eb:ff:30:a3:8c:c0:ee:56:f7:c1:2a:b8:d7:90:ac:
         21:40:08:00:4e:d4:62:0c:0d:b1:b4:7b:a5:4d:d8:91:be:e3:
         9e:58:97:d0:8d:db:12:56:7a:d9:bb:95:b7:9d:bd:78:a6:e7:
         ea:8c:6e:ae:27:27:48:fc:5b:7c:28:71:bf:9f:f4:7d:5a:d0:
         5c:8a:a0:73:5d:eb:0e:e3:b1:48:bf:9d:ee:0c:ab:e9:87:23:
         66:df:68:58:aa:cd:ac:34:50:26:e3:ba:fd:e3:b8:3f:16:8d:
         54:08:ed:b2:5a:59:db:c6:80:aa:15:4a:6d:68:ef:e9:21:1b:
         17:00:8d:bb:0e:85:9a:c0:ab:6d:db:f2:55:5f:e0:d7:3d:94:
         74:18:38:08:3f:5f:06:04:28:21:c4:23:71:5d:26:a6:a0:fe:
         45:99:cb:ce:a9:89:4e:e2:03:c5:54:3a:ef:70:0e:f4:bf:e9:
         0d:9e:6e:cc:11:da:8a:ce:79:23:a9:49:6c:1e:80:6b:6e:e8:
         e1:ad:93:0b:f6:22:e2:e8:2d:d1:b4:c8:13:a9:57:3e:62:16:
         36:b0:d6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 20:10:15 2025 by rpki-client