Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft
File:                     FWPM6JxbrDwQTe02KznzsvJZ8BA.mft (raw, json)
Hash identifier:          HL/zVy033Wz/VIPu4tkNBFOAEi1IaqEjU5kqONxBOJs=
Subject key identifier:   BC:D7:E5:19:E0:97:97:FB:91:62:52:CD:72:5B:C3:10:6C:3C:17:1B
Authority key identifier: 15:63:CC:E8:9C:5B:AC:3C:10:4D:ED:36:2B:39:F3:B2:F2:59:F0:10
Certificate issuer:       /CN=A9186A4B/serialNumber=1563CCE89C5BAC3C104DED362B39F3B2F259F010
Certificate serial:       103B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft
Manifest number:          1024
Signing time:             Mon 28 Apr 2025 17:39:36 +0000
Manifest this update:     Mon 28 Apr 2025 17:39:35 +0000
Manifest next update:     Mon 05 May 2025 17:39:35 +0000
Files and hashes:         1: FWPM6JxbrDwQTe02KznzsvJZ8BA.crl (hash: TyoIEyAg+1IMJCaynsWu7LVoJwLGVJorwzsvLhQVuro=)
                          2: 0E37BE12773E11ECAD064E68C4F9AE02.roa (hash: SaPDHfkJq6+olJp+pCEwWUsbU8ig75YR7kl23PYTmrE=)
                          3: 98783026EB5F11ECB4060F86C4F9AE02.roa (hash: 4OlV59b2rslcN4y969OU4nFAAzSl+aCeFuF7xmQjSHU=)
                          4: 975940EAEB5F11ECB4060F86C4F9AE02.roa (hash: O6BtkliIb0k5nEfBSS9yxZFuwYbci4YZu/htGkscNCY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.crl
                          rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 17:39:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4155 (0x103b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186A4B, serialNumber=1563CCE89C5BAC3C104DED362B39F3B2F259F010
        Validity
            Not Before: Apr 28 17:39:35 2025 GMT
            Not After : May  5 17:39:35 2025 GMT
        Subject: CN=680fbd58-a5ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:78:c2:7b:60:55:ca:0c:9c:ba:8f:05:50:0f:
                    67:09:48:96:d2:84:0e:f9:80:a8:06:4d:b0:46:25:
                    31:87:53:5a:b9:54:6e:ed:63:15:ff:a5:de:97:ba:
                    58:fb:d5:44:86:0b:44:21:bd:95:15:b8:28:3b:f9:
                    a1:04:b9:12:81:85:a5:ed:12:5c:e3:82:17:21:a1:
                    31:d3:f4:64:d7:b0:10:4c:6e:65:0b:11:30:24:35:
                    ac:50:34:4f:7b:eb:38:f1:04:62:3b:56:ea:66:c5:
                    6d:b2:df:ba:e7:3a:c3:c9:3a:58:c0:3c:b0:4b:84:
                    7d:83:02:67:c6:3c:e3:f4:b3:4a:7a:cf:22:22:dc:
                    08:7f:ad:43:92:a1:9b:5d:70:dc:c3:a6:8a:74:7f:
                    83:b7:90:2b:8d:77:b2:0a:79:07:b1:bc:88:22:49:
                    30:9e:b4:ce:9f:3c:1d:b0:51:ab:46:46:d9:6e:21:
                    9b:82:22:57:6b:de:c6:06:63:10:8b:6d:40:70:9f:
                    70:52:5f:73:b1:73:e9:81:9a:cb:42:fe:0a:88:d4:
                    65:ef:b2:b3:3a:e3:0d:9a:92:f3:20:45:f2:99:63:
                    0b:c1:f2:0b:2f:89:e3:64:c8:6b:3d:42:63:6e:6f:
                    16:c8:97:2c:e7:38:2a:0a:5b:4e:81:c8:5b:69:58:
                    6f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D7:E5:19:E0:97:97:FB:91:62:52:CD:72:5B:C3:10:6C:3C:17:1B
            X509v3 Authority Key Identifier:
                keyid:15:63:CC:E8:9C:5B:AC:3C:10:4D:ED:36:2B:39:F3:B2:F2:59:F0:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:22:29:e6:c4:dc:77:2d:74:f0:d3:63:cd:f7:c9:83:8d:05:
         c2:ce:75:13:1a:37:9a:e2:a8:0e:98:62:ef:28:a6:e6:cb:2a:
         a7:7b:6b:1a:5f:d1:94:53:8f:dd:17:89:df:22:b3:ad:c4:f6:
         fd:7f:12:10:86:b7:2d:88:a6:de:9a:7d:29:14:a6:fd:42:cf:
         10:7b:a4:10:51:a6:df:1f:fe:f9:71:3b:ba:0c:ca:2c:ac:1b:
         dd:8b:2c:13:fb:ff:d4:df:32:7e:1b:f3:d1:6a:2c:eb:0d:fa:
         71:b7:a7:d2:00:69:c7:36:ff:51:6a:85:b4:d9:b4:62:06:2c:
         12:9f:d7:a3:0c:8e:ad:73:26:ec:f2:6d:57:40:6f:f8:f1:9a:
         a1:68:46:76:b4:05:1f:59:91:b7:30:f5:ff:66:e6:62:e1:ff:
         07:8e:14:b1:65:49:e7:97:ee:86:30:67:4f:a9:fe:3d:c6:fb:
         17:8b:29:e6:a2:49:61:fd:35:dd:10:5e:dd:99:51:65:7f:39:
         9a:6c:94:34:a1:4b:39:96:0d:73:15:e3:44:8f:53:cf:2d:d3:
         23:b4:e4:26:ac:79:5f:c5:ce:66:c8:e7:6d:07:cc:7b:42:12:
         fe:eb:36:18:f6:06:0c:e7:ad:c9:93:97:25:0d:4d:5f:b2:fd:
         12:ed:e7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:10:45 2025 by rpki-client on console.sobornost.net