Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft
File:                     FYOTMKge2Jkgc6I4BMn1kFOPudI.mft (raw, json)
Hash identifier:          mLjmOHzOG00YBstXR3qJqvLeQsMJ3Noy3jrqAqlHhpw=
Subject key identifier:   B8:5A:BF:A0:C6:4C:A2:4D:D4:D8:58:D8:79:C2:71:20:F5:11:DB:62
Authority key identifier: 15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2
Certificate issuer:       /CN=A9159B6F/serialNumber=15839330A81ED8992073A23804C9F590538FB9D2
Certificate serial:       E3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft
Manifest number:          DE
Signing time:             Sun 27 Apr 2025 04:24:44 +0000
Manifest this update:     Sun 27 Apr 2025 04:24:44 +0000
Manifest next update:     Sun 04 May 2025 04:24:44 +0000
Files and hashes:         1: FYOTMKge2Jkgc6I4BMn1kFOPudI.crl (hash: MjCimOdnviYZ6Rl+ShZ2HysMerhdLdYv+iw3zmBhZdw=)
                          2: 30CC4814FE4D11EFBFE66B1AC4F9AE02.roa (hash: CsZn/2/QnSvPMN1U3HaNIbfp6BBtY5cFDgdleZuzI7Q=)
                          3: 318E4414FE4D11EFBFE66B1AC4F9AE02.roa (hash: bnz/Gz2cIiz69/78S45wyomzGwSQuid2xoDm6Wpn25U=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl
                          rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159B6F, serialNumber=15839330A81ED8992073A23804C9F590538FB9D2
        Validity
            Not Before: Apr 27 04:24:44 2025 GMT
            Not After : May  4 04:24:44 2025 GMT
        Subject: CN=680db18c-04d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:56:4c:82:b8:77:f1:76:a4:4a:42:ff:1e:76:
                    27:23:8e:2c:43:cb:26:dc:5b:ab:23:04:b6:b8:c5:
                    71:82:0e:87:9d:c7:67:ef:46:29:b2:c0:00:27:e6:
                    37:3a:e7:7a:18:12:e5:71:be:63:d4:a7:43:d8:d1:
                    3a:01:35:97:16:57:f5:79:d6:dd:0c:03:3f:07:23:
                    3a:a2:31:da:70:63:8d:7e:61:b6:4d:b4:7d:8e:68:
                    a8:d8:8e:9f:42:82:58:5f:70:d1:db:47:36:b8:a9:
                    31:d1:db:ab:38:99:39:21:80:a3:d3:63:41:ee:ac:
                    00:16:af:7a:3e:26:cd:c2:f1:1e:00:0f:6e:25:d4:
                    09:07:7b:b9:ed:7e:23:7c:c3:3c:ff:42:b5:c8:73:
                    33:5d:42:65:c5:2c:03:6f:c9:70:3a:cf:b1:29:75:
                    1e:7c:a6:84:c5:d2:99:f3:5c:2e:bd:21:6f:71:d7:
                    61:19:62:ed:66:da:ae:6f:d0:27:73:22:72:b1:99:
                    d6:06:d9:28:3f:95:a5:7e:1e:dd:63:55:a3:e8:e7:
                    7b:24:46:ce:2b:b1:66:c0:59:cd:fb:3a:8c:a7:6b:
                    be:92:8b:46:1c:f4:bb:1b:c3:20:6d:ad:10:9b:5f:
                    03:48:4b:35:4d:ad:4f:f7:94:23:47:d4:11:91:a4:
                    25:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5A:BF:A0:C6:4C:A2:4D:D4:D8:58:D8:79:C2:71:20:F5:11:DB:62
            X509v3 Authority Key Identifier:
                keyid:15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:5f:72:29:ce:12:85:99:02:46:39:c6:24:2a:54:4b:66:92:
         ae:ee:95:6a:b9:e0:5f:b2:cc:31:4f:27:84:c9:10:8d:55:58:
         43:af:c4:b7:27:20:4b:c1:3d:60:3f:1d:ea:16:e2:36:8d:81:
         2c:ed:00:7a:4f:8b:35:31:9a:7f:0b:d3:15:06:c8:ca:6d:52:
         79:6e:6e:5d:03:d8:e7:20:3b:fe:7b:fd:01:e2:7b:05:e1:01:
         93:d8:64:41:4c:7f:90:2d:01:ac:ca:e4:4d:3f:dc:a2:b2:3e:
         5b:d5:68:a4:ff:b1:35:00:5f:c7:26:f7:89:aa:7b:aa:e7:70:
         99:f1:f2:f0:c5:50:ec:ec:62:53:b7:93:cd:c7:e4:26:57:59:
         13:85:64:80:1c:56:68:9e:81:eb:fb:f3:7e:4d:11:44:eb:de:
         4e:bb:5e:d1:3c:46:7f:f3:21:96:1b:ff:36:21:4a:24:f4:20:
         78:77:2a:c8:85:3c:a4:0a:ff:83:9a:90:58:b1:a8:3d:6d:63:
         e1:86:b1:eb:97:49:a9:87:a7:6e:00:4b:0c:c7:c9:0a:6c:bf:
         36:bc:92:b7:68:29:28:97:ca:18:06:93:6d:e6:16:d2:72:94:
         df:65:3d:b4:a1:d3:f0:5a:b1:5b:f2:f3:bb:52:5d:04:0d:e4:
         31:01:91:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:47 2025 by rpki-client on console.sobornost.net