Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
File:                     FXsL3g48rbKUg5vJgVZVZE2ybpE.mft (raw, json)
Hash identifier:          m061tIYowgLOmzUgC4HapN3BLpN418e7aGIh52DHRk0=
Subject key identifier:   79:E1:D4:49:13:20:4C:0A:EA:70:EC:91:0A:31:05:2A:99:F5:F9:08
Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
Certificate issuer:       /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Certificate serial:       0537
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
Manifest number:          050F
Signing time:             Sat 26 Apr 2025 23:23:42 +0000
Manifest this update:     Sat 26 Apr 2025 23:23:41 +0000
Manifest next update:     Sat 03 May 2025 23:23:41 +0000
Files and hashes:         1: FXsL3g48rbKUg5vJgVZVZE2ybpE.crl (hash: T3lzmIlmTzvQgBjZdpf30ENK2BB+GsE/lWuw1YpQEac=)
                          2: B589332C498611EF90B46962C4F9AE02.roa (hash: uDyhMVme3VTf+JhXqHqMKucF4UMzPNmrq3U6pJO1VaY=)
                          3: 0E677936853811EEAC9D230CC4F9AE02.roa (hash: Kojx3EQvXZce9VKFNEMNI2SECFOh/Zpl+d+xhc6JD68=)
                          4: 93DAAB4612BA11EF901ACD28C4F9AE02.roa (hash: P9CZgLXKg4nlDwcCC0YAzgQvS67VqqwFERe7OV2NbwE=)
                          5: 282DAABE82EC11EEB4D96065C4F9AE02.roa (hash: gm9Kdto0nMF6gnIYhzKNLY3X/9aSmX52C7f5pF3kzmE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
                          rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 23:23:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1335 (0x537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
        Validity
            Not Before: Apr 26 23:23:41 2025 GMT
            Not After : May  3 23:23:41 2025 GMT
        Subject: CN=680d6afd-aea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e4:6d:37:dc:04:91:d0:db:be:76:a4:de:9d:
                    be:a5:5f:98:77:8a:c1:a0:04:c3:7b:be:eb:35:1c:
                    b6:f4:9a:68:0b:90:be:50:08:8c:cd:00:4c:8e:46:
                    0b:d0:fa:07:c4:83:4f:a9:eb:e2:a9:4d:12:2b:ce:
                    30:9c:66:b7:b0:5a:8d:a5:36:fb:ca:42:42:3f:83:
                    0c:11:a2:57:c3:f5:1a:48:0c:36:9b:bc:f8:21:b6:
                    61:0a:7e:7f:c7:d7:45:0a:d3:be:3e:7b:a0:0b:3a:
                    55:38:92:07:fb:44:e9:c2:05:bc:2d:b9:aa:be:79:
                    72:b1:fc:1e:6b:11:7f:68:c4:af:09:2a:09:81:1d:
                    83:03:8e:da:cf:0c:0b:03:72:50:78:ab:cc:36:81:
                    07:bb:de:23:4a:db:fa:79:10:30:a2:e6:be:13:0c:
                    7a:ba:8d:37:4e:be:a3:66:4a:64:35:86:9a:02:2e:
                    c6:f0:b2:53:3a:ab:6e:c2:f0:06:1e:c0:d0:ec:e0:
                    9e:7a:16:60:1a:8b:a8:26:76:08:3e:9f:a9:a6:96:
                    26:0b:67:10:f5:95:80:11:2a:11:94:14:a7:91:5c:
                    32:d9:2b:9d:c3:10:d2:b7:13:89:d3:da:ef:98:7a:
                    d8:96:55:71:c1:74:17:00:4d:f0:25:eb:19:ec:1e:
                    be:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E1:D4:49:13:20:4C:0A:EA:70:EC:91:0A:31:05:2A:99:F5:F9:08
            X509v3 Authority Key Identifier:
                keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:5a:a0:12:60:43:be:e3:ce:ac:e1:7d:7e:74:bd:c9:7c:29:
         bf:ff:4a:2b:65:7c:2d:34:0c:da:54:a4:6e:82:ed:5d:53:3c:
         d3:63:2d:d8:93:f1:eb:2f:05:f1:ca:f1:01:6f:a5:09:14:70:
         f2:f1:04:1c:20:d9:d8:05:98:a4:ca:8e:f5:4d:77:8d:c6:02:
         16:1f:be:f1:52:e2:e1:54:d7:eb:e8:3b:99:2d:7d:94:a6:58:
         56:eb:ba:97:1a:79:4f:31:2c:c3:42:2d:08:65:6b:55:f4:25:
         72:e2:44:60:ea:95:e8:0e:29:e7:f9:8f:32:75:f1:5c:81:78:
         c5:56:b3:a4:a4:90:00:24:f4:fb:e6:c5:64:ae:99:48:43:dc:
         14:be:71:20:19:3d:7e:23:4a:a3:68:57:76:01:58:db:26:3a:
         a6:ee:8a:22:94:54:f8:96:cd:07:2a:af:27:b4:54:18:1d:20:
         2e:70:6c:c0:70:1d:09:f4:9a:cb:84:d1:15:71:9b:16:cb:44:
         09:71:a8:36:a2:f0:c2:90:ae:09:65:e2:d7:fd:ad:fb:37:9a:
         61:33:57:a5:25:fb:74:91:ec:f8:f5:71:98:57:73:7b:0b:ab:
         48:34:55:0f:d4:47:3b:cb:a1:42:3f:0e:20:1c:82:cd:cf:29:
         b7:3a:a7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:40 2025 by rpki-client on console.sobornost.net