Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.mft
File:                     FTXKeQmuekjAuzjAgnrtdm4w-Co.mft (raw, json)
Hash identifier:          BgfuMzro0D1E3yGX0iijhU8AV89wb/n8zMo5q0oTWnA=
Subject key identifier:   77:3A:6E:2D:27:A9:4F:AB:53:CC:B0:1C:88:59:CC:F6:EF:9F:2B:DE
Authority key identifier: 15:35:CA:79:09:AE:7A:48:C0:BB:38:C0:82:7A:ED:76:6E:30:F8:2A
Certificate issuer:       /CN=A913854D/serialNumber=1535CA7909AE7A48C0BB38C0827AED766E30F82A
Certificate serial:       42
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FTXKeQmuekjAuzjAgnrtdm4w-Co.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.mft
Manifest number:          41
Signing time:             Sun 27 Apr 2025 06:16:32 +0000
Manifest this update:     Sun 27 Apr 2025 06:16:32 +0000
Manifest next update:     Sun 04 May 2025 06:16:32 +0000
Files and hashes:         1: FTXKeQmuekjAuzjAgnrtdm4w-Co.crl (hash: Osaps1ujh/9sg2TV5loNShop2/MqmtZKd+avcLwDIIg=)
                          2: A90D181AC36C11EFAF838D35C4F9AE02.roa (hash: qIXjoMWJqdmpLdtv27bH3BBsHVxShzn3gjUvaayskJM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.crl
                          rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FTXKeQmuekjAuzjAgnrtdm4w-Co.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913854D, serialNumber=1535CA7909AE7A48C0BB38C0827AED766E30F82A
        Validity
            Not Before: Apr 27 06:16:32 2025 GMT
            Not After : May  4 06:16:32 2025 GMT
        Subject: CN=680dcbc0-253c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:32:90:94:36:a3:eb:39:2a:51:24:58:c1:3b:
                    5a:a3:77:75:d3:2f:8a:18:1e:df:43:0f:c2:65:d0:
                    27:e7:3a:37:c1:3e:e2:b6:b4:ec:8e:cf:99:cb:9b:
                    6b:2c:42:92:75:26:20:fa:25:99:a8:cd:aa:64:79:
                    66:ae:60:58:53:e9:b0:2b:7d:df:e2:5e:81:16:e2:
                    57:98:6a:0e:b2:5b:32:c9:8c:3e:3f:a7:66:d4:ea:
                    52:cb:ec:2b:95:0e:e4:02:36:e9:97:f3:29:a9:db:
                    aa:5d:25:e4:40:1c:f7:ca:76:b1:72:8f:7d:c3:84:
                    15:9c:d0:b0:ac:28:c6:62:2b:b1:f7:93:52:c5:f4:
                    56:ca:91:c6:bc:a1:73:fa:1c:a2:95:86:c8:2e:1f:
                    9f:c8:41:6d:f1:20:4a:bc:e8:91:ed:11:32:92:83:
                    fc:5f:b3:65:fe:a1:d5:77:22:0b:6a:ca:73:b0:58:
                    60:df:b9:0c:65:f8:49:f4:38:96:ac:f8:63:8c:a0:
                    34:64:36:5b:d5:6b:ba:22:ee:25:e6:41:00:f9:89:
                    99:7c:e9:ac:2c:1e:5a:0f:37:15:3d:f1:32:69:09:
                    e0:fb:c4:0a:6e:92:c8:6a:71:a5:ee:f9:b2:0d:47:
                    af:3b:b9:2d:36:a3:d4:5c:6b:3c:fe:9c:39:b4:69:
                    5b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3A:6E:2D:27:A9:4F:AB:53:CC:B0:1C:88:59:CC:F6:EF:9F:2B:DE
            X509v3 Authority Key Identifier:
                keyid:15:35:CA:79:09:AE:7A:48:C0:BB:38:C0:82:7A:ED:76:6E:30:F8:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FTXKeQmuekjAuzjAgnrtdm4w-Co.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:24:93:47:3b:57:ff:d3:0c:13:a5:6f:e3:13:eb:94:2d:1b:
         4b:b0:4e:8f:ef:76:a0:bf:2c:a5:1f:b4:49:9e:e1:ac:8d:06:
         68:d5:9b:02:6f:19:fd:74:1f:4a:bd:f9:03:96:96:e4:93:33:
         21:0c:ee:9f:fe:71:fc:2b:a9:76:7e:c9:27:b0:bf:1d:b8:79:
         3e:bb:e5:3c:67:79:cc:6f:aa:57:ee:6e:55:f9:31:1e:51:83:
         34:27:04:c0:bd:ba:e9:64:df:4a:53:d2:ca:60:b1:1d:aa:e3:
         d5:b2:13:2f:85:53:a6:fe:ad:e4:97:ee:11:0f:8c:a9:91:c0:
         5e:52:7b:e8:24:95:36:d0:46:b1:d8:0c:88:c8:f9:2c:15:00:
         3b:04:fd:3a:d1:44:15:39:aa:ff:8b:03:61:57:a3:a4:d4:e7:
         42:4f:10:ac:e9:25:67:f9:e3:15:e8:f9:a4:d3:d6:6a:a0:43:
         25:2a:04:05:44:be:a8:1e:54:56:63:04:02:f9:52:5e:8e:4f:
         60:ae:c5:13:b2:a6:0d:e9:b0:80:ef:27:e6:53:11:24:06:e4:
         61:35:37:a5:65:e5:a3:c7:fa:a2:62:5f:80:22:d0:67:73:a2:
         02:49:ab:28:22:95:4b:5e:99:8f:05:c6:4a:a9:04:35:4d:86:
         0c:c8:90:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:42 2025 by rpki-client on console.sobornost.net