Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
File:                     FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft (raw, json)
Hash identifier:          CcIbQ3tu//KrdRYE2Qex57ffs+QgOvvm4O2+pmOfw2s=
Subject key identifier:   08:B7:68:39:11:60:04:C0:06:94:D8:69:A3:F8:F0:CE:51:90:21:2D
Authority key identifier: 16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09
Certificate issuer:       /CN=A9158F08/serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09
Certificate serial:       0C2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
Manifest number:          1538
Signing time:             Mon 28 Apr 2025 18:48:52 +0000
Manifest this update:     Mon 28 Apr 2025 18:48:52 +0000
Manifest next update:     Mon 05 May 2025 18:48:52 +0000
Files and hashes:         1: FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl (hash: cULqNUu7ZkGuevtfF57WcOzhapiHnBZSbhL2mHPZF4g=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl
                          rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 18:48:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3114 (0xc2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158F08, serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09
        Validity
            Not Before: Apr 28 18:48:52 2025 GMT
            Not After : May  5 18:48:52 2025 GMT
        Subject: CN=680fcd94-a02e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c0:da:ee:d3:39:6a:1f:4a:4b:49:68:4f:ce:
                    01:ee:8f:75:80:0d:bb:67:98:28:ad:17:81:89:14:
                    41:b6:65:2c:5e:0d:9b:e7:a0:b7:68:bc:e5:01:c3:
                    ea:1e:a8:5f:f8:88:88:68:02:5c:89:f7:c6:7b:1b:
                    d4:dd:57:f1:2f:8a:22:67:c8:3c:d0:af:0d:33:7c:
                    97:26:28:a2:17:f1:44:6b:51:be:c2:fc:a9:a5:8b:
                    2f:e7:eb:0a:ee:d2:f9:b4:07:35:cb:a5:d7:6f:d8:
                    67:50:70:3e:60:5e:99:fb:f8:13:91:c3:c2:a1:41:
                    23:59:73:09:d8:77:21:7b:f5:f9:a7:56:3d:d5:68:
                    aa:51:fb:09:21:a9:98:f0:1c:7b:a0:38:89:fe:87:
                    71:9a:97:36:21:8b:27:4d:92:70:36:dc:1b:41:50:
                    17:6f:b7:ae:3c:f7:20:c1:59:fb:de:83:18:20:95:
                    69:1a:23:17:69:36:eb:bf:b9:1e:4c:17:eb:08:fb:
                    17:35:8d:00:79:62:98:de:93:06:63:f6:13:b2:7a:
                    7e:b6:8c:51:75:05:53:91:1f:7d:ee:1c:1d:35:73:
                    7b:70:27:b7:6e:92:da:56:f5:59:d7:60:78:aa:78:
                    c3:09:da:ce:38:c1:eb:c4:79:2d:b2:cb:8c:7f:ce:
                    d1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B7:68:39:11:60:04:C0:06:94:D8:69:A3:F8:F0:CE:51:90:21:2D
            X509v3 Authority Key Identifier:
                keyid:16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:74:18:ea:b6:ea:ac:5f:d4:e3:29:71:17:22:ce:f3:28:cf:
         b2:d3:11:53:92:14:78:e2:6d:9c:70:3e:fb:3d:28:73:eb:e0:
         2a:7c:2e:a0:d1:72:6a:7e:3c:71:7b:15:4a:17:de:ee:04:1e:
         97:b9:a5:05:ce:6f:8d:e7:3f:d3:25:1b:66:2b:e6:93:da:cc:
         aa:cd:25:65:ce:73:66:ef:4f:21:59:32:f0:55:3e:97:a7:82:
         15:e5:c4:4e:16:a0:a5:95:33:d6:42:24:26:30:73:33:9f:b8:
         f8:22:73:08:a2:a7:e7:49:9b:8d:50:a7:25:54:2d:a3:c5:87:
         4f:fd:ca:09:6f:ee:fd:09:07:92:ff:d3:1a:53:58:cc:72:67:
         9b:b0:f2:9a:0d:8a:07:1e:7b:4e:a2:38:44:fa:df:37:8c:e1:
         d9:88:60:a2:c4:b1:85:a5:02:44:f7:b2:b6:7a:ca:05:39:34:
         f3:e4:a0:c6:18:27:80:d0:4f:df:f1:6e:e0:04:a1:ff:a7:c6:
         83:de:c2:2e:72:c6:e4:da:2c:bc:35:79:7c:bb:8c:9f:3b:ee:
         8a:da:34:be:47:23:f1:29:ed:fd:a9:4e:c2:75:a1:19:b1:99:
         e1:ed:b1:57:48:06:34:c1:eb:10:ca:9c:2d:ab:29:5b:62:b9:
         26:d1:43:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:05:14 2025 by rpki-client on console.sobornost.net