Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/D0700E64FE0311EE998E0C49C4F9AE02/FvdX-Fv0x3-S-se_sL34aE8QKrE.mft
File:                     FvdX-Fv0x3-S-se_sL34aE8QKrE.mft (raw, json)
Hash identifier:          9IKAlKdmLQCe1Ox3ZqokoSP0tKzjqFPnIbEKEEDkSBs=
Subject key identifier:   5F:1E:10:B2:D5:EB:3D:84:49:6E:AA:C7:59:C1:F4:B6:8B:4B:F8:7F
Authority key identifier: 16:F7:57:F8:5B:F4:C7:7F:92:FA:C7:BF:B0:BD:F8:68:4F:10:2A:B1
Certificate issuer:       /CN=A9172999/serialNumber=16F757F85BF4C77F92FAC7BFB0BDF8684F102AB1
Certificate serial:       BF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FvdX-Fv0x3-S-se_sL34aE8QKrE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172999/D0700E64FE0311EE998E0C49C4F9AE02/FvdX-Fv0x3-S-se_sL34aE8QKrE.mft
Manifest number:          BF
Signing time:             Sun 27 Apr 2025 01:15:09 +0000
Manifest this update:     Sun 27 Apr 2025 01:15:09 +0000
Manifest next update:     Sun 04 May 2025 01:15:09 +0000
Files and hashes:         1: FvdX-Fv0x3-S-se_sL34aE8QKrE.crl (hash: BlsKVemMsDoVNjCkOZtQ5cVxKRx97VGGZ4IAQAibXts=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172999/D0700E64FE0311EE998E0C49C4F9AE02/FvdX-Fv0x3-S-se_sL34aE8QKrE.crl
                          rsync://rpki.apnic.net/member_repository/A9172999/D0700E64FE0311EE998E0C49C4F9AE02/FvdX-Fv0x3-S-se_sL34aE8QKrE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FvdX-Fv0x3-S-se_sL34aE8QKrE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 01:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172999, serialNumber=16F757F85BF4C77F92FAC7BFB0BDF8684F102AB1
        Validity
            Not Before: Apr 27 01:15:09 2025 GMT
            Not After : May  4 01:15:09 2025 GMT
        Subject: CN=680d851d-4b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:46:7b:60:61:4f:4d:1d:17:bc:4d:22:57:36:
                    4b:fe:bf:21:53:bc:a9:ed:a5:a1:3d:55:a8:1e:9c:
                    6d:83:fe:15:ba:b3:b8:d9:51:a2:08:3b:40:68:0a:
                    d4:93:e6:e4:fe:2a:fc:2c:18:1a:34:ae:18:cf:dc:
                    da:a0:ec:50:93:e6:92:a9:a7:c7:3c:04:07:d9:c8:
                    d3:ed:62:65:fb:5f:76:03:5c:27:cc:36:5d:74:d9:
                    b4:7c:4e:7d:1b:c2:9a:a2:e6:4e:2e:b3:c5:31:cf:
                    6a:59:89:2e:ca:0f:df:65:50:6a:2d:fc:73:d2:cc:
                    46:74:de:f0:73:b1:14:be:64:de:d6:e8:cb:0a:c5:
                    8c:14:49:c8:89:d2:d6:92:f8:10:eb:12:3e:93:12:
                    78:ad:cb:4b:87:5d:fa:06:d5:f0:4f:ad:2c:8a:db:
                    83:95:4b:58:d2:b1:f6:68:5d:2a:d0:d1:92:76:82:
                    dc:e7:7d:53:23:a0:b6:29:9a:a5:bf:9d:f5:ea:48:
                    35:2e:79:11:50:cb:cd:a7:ff:35:cb:09:0c:1a:5f:
                    81:a9:71:f6:4a:ab:18:75:eb:94:bc:5a:97:06:cc:
                    a2:3e:eb:2f:58:b1:18:56:f3:27:cd:57:c9:b7:26:
                    c6:2b:23:24:51:bb:0a:43:17:46:e1:3c:3e:b4:cb:
                    4c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1E:10:B2:D5:EB:3D:84:49:6E:AA:C7:59:C1:F4:B6:8B:4B:F8:7F
            X509v3 Authority Key Identifier:
                keyid:16:F7:57:F8:5B:F4:C7:7F:92:FA:C7:BF:B0:BD:F8:68:4F:10:2A:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172999/D0700E64FE0311EE998E0C49C4F9AE02/FvdX-Fv0x3-S-se_sL34aE8QKrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FvdX-Fv0x3-S-se_sL34aE8QKrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/D0700E64FE0311EE998E0C49C4F9AE02/FvdX-Fv0x3-S-se_sL34aE8QKrE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:79:eb:e3:15:fa:1b:2e:bb:89:09:29:2f:14:d8:3a:9b:f5:
         f8:b2:82:81:81:51:bf:dd:e3:37:13:13:fd:60:4d:84:79:34:
         c7:cb:4b:30:a4:b3:aa:98:09:f6:0d:17:95:e8:ca:64:6c:7c:
         27:b0:5d:d9:9e:bc:c5:19:d8:e6:29:7b:db:24:ab:50:d0:20:
         05:28:9e:7f:18:51:52:1a:4a:fb:e6:e4:c8:ef:a5:c1:52:ba:
         79:f3:fc:d8:2e:3f:64:d0:72:1b:4b:2a:c8:0d:02:e7:1f:15:
         b2:c0:ae:96:06:1d:91:2d:c8:11:27:21:e6:dd:dc:6d:e9:67:
         f9:06:c4:db:b6:74:47:67:72:d7:8d:5e:87:2b:5b:23:93:da:
         43:27:51:55:8b:36:fc:b8:ef:35:1f:cf:f8:55:15:86:4a:16:
         18:c6:0f:57:75:79:b5:ee:2d:29:e3:b9:06:dd:c7:e4:a5:b7:
         93:a6:e2:47:16:93:2c:7e:ff:b8:18:4c:af:b4:1b:2c:08:e5:
         61:bc:1f:09:a8:07:5b:03:0d:cd:25:6c:82:a2:98:cd:05:6d:
         a5:6f:8d:d3:33:c2:29:0e:cb:75:22:81:c9:43:4c:10:c5:47:
         a0:d9:63:f8:e0:e3:ca:b6:e4:47:37:ee:30:4e:1a:a0:32:80:
         91:9e:2b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:03 2025 by rpki-client on console.sobornost.net