Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
File:                     FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft (raw, json)
Hash identifier:          N4dhxIkqHj1FAzI+4s9O34qW3zvNvUPiNetkmWR5Ois=
Subject key identifier:   6C:1B:59:D6:EA:6B:6F:61:E6:87:A6:82:86:FE:3B:8A:6A:4E:94:2C
Authority key identifier: 14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31
Certificate issuer:       /CN=A91E4B86/serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831
Certificate serial:       1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
Manifest number:          1E
Signing time:             Sun 27 Apr 2025 06:41:18 +0000
Manifest this update:     Sun 27 Apr 2025 06:41:17 +0000
Manifest next update:     Sun 04 May 2025 06:41:17 +0000
Files and hashes:         1: FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl (hash: RYQxmJ5RsX7CSvXUBkWtIUqdiBoF2s0MZBiOcm2SnLE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl
                          rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4B86, serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831
        Validity
            Not Before: Apr 27 06:41:17 2025 GMT
            Not After : May  4 06:41:17 2025 GMT
        Subject: CN=680dd18d-277c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c9:09:21:fc:a9:e5:a5:5f:1c:ee:26:71:57:
                    8d:cf:a6:3a:c0:e7:a0:e5:80:48:39:f6:ea:ee:c9:
                    d9:a7:6f:1d:ad:b4:5f:86:ba:5d:f7:3a:1f:8e:5c:
                    22:25:52:0f:a3:b0:24:b3:3b:d5:1f:da:bd:a4:8a:
                    12:74:65:58:e3:2a:5d:db:20:a6:3c:c9:4c:ef:94:
                    6c:94:e0:50:48:29:a8:36:3d:1c:55:9a:cf:4c:6a:
                    b3:31:b6:15:80:77:bd:02:0e:ec:08:f8:c8:f0:1a:
                    c5:2f:ea:17:cb:44:ac:fb:45:d8:31:a3:e8:37:61:
                    82:8b:b5:59:71:b1:ae:63:02:4c:b8:e1:c6:8a:e6:
                    11:dc:44:1e:2f:bb:93:b5:48:f5:28:1b:e7:ad:32:
                    cc:f1:cd:ff:c5:5b:91:1f:c9:29:63:8f:30:1c:2a:
                    c7:8e:b5:a5:a3:4c:f5:93:9f:52:84:f3:7e:5c:bc:
                    4e:e6:3d:20:dc:2c:4d:12:09:2d:5a:3b:a5:61:03:
                    50:40:fb:cb:3e:b3:38:18:c4:4a:9b:0f:0b:69:05:
                    6d:27:5d:9f:ec:8c:b1:84:5f:b8:1d:85:37:9f:94:
                    aa:3b:9f:2c:91:68:a2:2f:be:68:23:f4:61:a8:b2:
                    41:ee:84:38:da:15:ed:33:5d:04:93:1f:c3:61:ee:
                    c3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1B:59:D6:EA:6B:6F:61:E6:87:A6:82:86:FE:3B:8A:6A:4E:94:2C
            X509v3 Authority Key Identifier:
                keyid:14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:65:c3:83:79:d7:33:76:65:c3:9f:0a:a1:bc:8d:6a:02:e2:
         a4:80:4c:be:78:ec:82:8c:96:1a:e3:31:40:99:3e:13:14:c1:
         f7:59:ed:fd:45:89:7a:2c:4a:df:93:c9:b6:4a:eb:68:94:82:
         2e:23:d3:28:40:54:fb:9e:fe:e1:fd:d8:2b:10:56:c4:24:bb:
         9a:3a:00:a9:99:60:e8:00:a5:f0:f0:e4:ad:9d:d3:3d:e0:f0:
         f2:4d:97:13:83:06:65:60:75:2d:ca:8a:3b:58:f6:99:49:2f:
         6c:41:a4:72:48:9a:99:23:ef:85:9f:28:9d:1f:58:69:c4:bb:
         c6:2f:df:bc:14:f7:fa:fc:03:f1:6c:ae:08:73:d2:f7:8b:c7:
         51:e3:fb:db:2c:f1:6c:f1:8e:a0:1f:cf:37:7b:28:53:89:fe:
         60:33:e6:2c:1b:f9:f7:0b:09:aa:56:40:27:ad:1f:37:ec:d4:
         6e:38:ab:e9:8d:04:51:7c:f5:a2:45:07:26:1c:8a:c6:0b:9f:
         90:ae:18:c6:2e:4b:67:eb:2e:92:35:02:db:04:fa:ce:7c:b3:
         69:d5:fb:22:35:15:cf:48:72:3b:93:08:b4:35:8e:53:6f:54:
         04:f4:cc:2a:b6:4e:db:13:f1:01:22:32:07:73:b8:12:ca:6f:
         e7:64:07:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:27:19 2025 by rpki-client on console.sobornost.net