Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft
File:                     FGXcLLcCU-31FM1DdyZi_zu49uA.mft (raw, json)
Hash identifier:          IcqCVoL1VP8YUVtqVbe8rswsqiJ37iHpU+oDS2Vjdv8=
Subject key identifier:   F1:3B:4F:B9:C5:31:E3:B1:A7:7B:D2:0E:7D:F2:CE:50:5D:E7:66:8B
Authority key identifier: 14:65:DC:2C:B7:02:53:ED:F5:14:CD:43:77:26:62:FF:3B:B8:F6:E0
Certificate issuer:       /CN=A915280B/serialNumber=1465DC2CB70253EDF514CD43772662FF3BB8F6E0
Certificate serial:       02CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft
Manifest number:          02C1
Signing time:             Sun 27 Apr 2025 01:05:15 +0000
Manifest this update:     Sun 27 Apr 2025 01:05:15 +0000
Manifest next update:     Sun 04 May 2025 01:05:15 +0000
Files and hashes:         1: FGXcLLcCU-31FM1DdyZi_zu49uA.crl (hash: zjpqtmPOLUM/uwNBkUOu8myuVU+Q3hV2PViI/x2GZmw=)
                          2: 27EECF18EDF811ECBCAF5567C4F9AE02.roa (hash: VrxDW/DTl4sELPDbg6jTEndamNxMaPLt6ONplJztblc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.crl
                          rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 01:05:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 715 (0x2cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915280B, serialNumber=1465DC2CB70253EDF514CD43772662FF3BB8F6E0
        Validity
            Not Before: Apr 27 01:05:15 2025 GMT
            Not After : May  4 01:05:15 2025 GMT
        Subject: CN=680d82cb-f260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:16:71:1f:8d:95:f7:08:9c:74:13:be:2e:c7:
                    10:bb:49:d6:27:ea:1c:94:7e:f4:65:90:50:1f:38:
                    c8:fe:04:f8:7d:d1:1c:34:1b:9c:c7:61:2a:41:bc:
                    47:d4:50:37:1c:08:a5:c1:7b:3a:8e:99:0d:7d:ef:
                    e0:c0:9f:fb:c7:33:84:8e:15:ab:37:94:43:09:ba:
                    26:dd:78:3e:a9:11:5a:97:db:82:4d:f4:93:db:90:
                    ec:5e:cd:a2:97:9c:f3:67:e4:51:59:68:5b:fd:f8:
                    c1:9d:28:69:6e:c1:a0:2f:77:e1:a6:db:5b:9d:03:
                    ef:2c:2c:f5:eb:c0:0b:d8:5d:23:7d:51:d0:cb:b1:
                    13:10:94:56:2b:85:8f:ec:59:02:72:9c:eb:38:f0:
                    7f:8f:47:9a:29:0d:cb:2a:17:5c:1f:44:31:d8:ae:
                    bf:33:4e:e1:64:2e:31:2a:d3:3c:f6:26:fd:9e:86:
                    24:1c:a0:69:86:2d:85:c2:72:1c:e3:90:a4:dd:24:
                    d1:93:91:2f:03:7d:f4:a8:3b:dd:00:e9:ed:a9:30:
                    0d:0c:0c:f8:a2:1f:81:24:3a:53:2b:9e:7d:8b:4c:
                    fd:12:99:74:82:47:c5:95:1d:0b:29:b5:18:13:3d:
                    b7:51:8c:62:88:c7:b3:14:f2:2d:aa:18:ed:c2:55:
                    59:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3B:4F:B9:C5:31:E3:B1:A7:7B:D2:0E:7D:F2:CE:50:5D:E7:66:8B
            X509v3 Authority Key Identifier:
                keyid:14:65:DC:2C:B7:02:53:ED:F5:14:CD:43:77:26:62:FF:3B:B8:F6:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:37:b4:e9:84:75:1c:89:8f:72:6d:f9:2f:21:4b:25:49:12:
         b5:dc:76:5f:91:e3:5c:f8:1b:23:f7:b4:02:11:b0:1e:2e:ac:
         06:00:c4:b0:0a:f0:1f:90:de:50:a3:70:31:11:48:98:09:b5:
         6a:e7:15:ee:c8:b1:64:7c:06:d6:82:c6:86:23:bd:de:1a:2d:
         77:70:fa:7d:68:3c:eb:48:da:5b:24:07:5f:33:6d:60:a6:3a:
         b2:08:e8:ec:06:4e:80:a2:79:a2:68:f8:c5:47:0a:4e:25:62:
         13:43:9c:f1:98:13:bc:02:33:b4:e4:93:d4:d5:1f:34:d4:af:
         c7:47:35:a4:3a:dc:32:97:7e:7c:d0:15:0d:ad:73:0c:9d:94:
         d0:75:d3:24:38:6c:cb:3a:ae:b2:3c:ec:d5:ec:7a:cb:48:8e:
         fd:91:0b:85:5f:1c:f5:2c:7f:03:a5:bf:e5:9c:3d:e4:6d:d9:
         6f:9c:b2:62:d1:bc:5c:7a:6e:f9:af:18:f9:3a:66:79:fb:d0:
         5e:3c:60:1c:bb:a2:52:57:13:60:d0:13:b1:80:1c:61:f1:c5:
         1c:39:2c:34:77:d5:fa:9e:c5:ee:02:b1:3f:3e:6c:8f:16:fe:
         1f:b2:65:a3:37:46:b0:06:6c:8d:49:72:a7:32:36:fc:8f:39:
         60:5a:88:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:45 2025 by rpki-client on console.sobornost.net