Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft
File:                     F-lBr577tRXXwktBjmn5hnx6FMo.mft (raw, json)
Hash identifier:          SqtuZH6jup5Bvuwt+VS9NrT65s/6rZqtBrqMVtRb2wQ=
Subject key identifier:   FE:B3:55:BF:91:F7:3C:EC:C2:D9:6D:23:3B:BF:82:7F:59:A4:51:B8
Authority key identifier: 17:E9:41:AF:9E:FB:B5:15:D7:C2:4B:41:8E:69:F9:86:7C:7A:14:CA
Certificate issuer:       /CN=A9129023/serialNumber=17E941AF9EFBB515D7C24B418E69F9867C7A14CA
Certificate serial:       A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft
Manifest number:          A6
Signing time:             Fri 25 Apr 2025 05:08:59 +0000
Manifest this update:     Fri 25 Apr 2025 05:08:59 +0000
Manifest next update:     Fri 02 May 2025 05:08:59 +0000
Files and hashes:         1: F-lBr577tRXXwktBjmn5hnx6FMo.crl (hash: zYTxn9FxFmi0Ts8lkMZJGSM/TLyxxIO0rFcV0qilMyg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.crl
                          rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 05:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129023, serialNumber=17E941AF9EFBB515D7C24B418E69F9867C7A14CA
        Validity
            Not Before: Apr 25 05:08:59 2025 GMT
            Not After : May  2 05:08:59 2025 GMT
        Subject: CN=680b18eb-bd2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f9:6f:88:98:e6:ed:bc:8f:60:94:b0:95:f1:
                    1a:02:56:9b:eb:f0:97:d1:3b:1b:3b:71:22:49:9a:
                    51:1b:8a:a4:85:4f:41:e1:43:ba:f9:15:8a:bf:ef:
                    8c:c3:0f:dc:07:9d:6f:cf:96:80:d5:2d:d7:0a:39:
                    f7:1f:5b:99:3e:18:e9:2b:51:1f:f7:f6:0f:30:89:
                    4e:a9:9e:af:72:84:35:fe:83:db:2a:81:82:f4:45:
                    20:b6:1c:08:8c:1a:6d:30:36:9e:4d:82:97:a4:af:
                    e2:42:13:b4:7a:82:1b:2f:24:83:34:76:73:79:3e:
                    27:11:d1:ad:dd:02:6a:35:89:c7:8d:f3:bf:c7:c8:
                    c5:d6:ae:be:af:90:97:90:ee:7b:b1:4c:f5:e0:7e:
                    42:13:2a:fb:64:c0:f9:ff:d8:b2:77:72:a7:74:f2:
                    fb:ee:eb:e3:f3:54:2a:50:8f:4e:9f:b1:62:d2:f3:
                    23:c9:7f:ef:1f:87:77:e9:e8:90:c6:2f:c8:99:17:
                    23:4f:45:95:fc:45:ec:9a:5d:24:99:bc:55:86:69:
                    e2:40:9d:5f:7d:60:61:35:d0:32:ab:06:db:c1:47:
                    18:97:58:8e:3f:3c:b2:c4:a3:51:1c:9d:6b:ab:e4:
                    5a:ac:cf:b1:20:62:53:c8:87:41:eb:80:cd:a7:91:
                    60:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B3:55:BF:91:F7:3C:EC:C2:D9:6D:23:3B:BF:82:7F:59:A4:51:B8
            X509v3 Authority Key Identifier:
                keyid:17:E9:41:AF:9E:FB:B5:15:D7:C2:4B:41:8E:69:F9:86:7C:7A:14:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:8e:b0:7c:67:a3:b3:74:5b:84:07:27:17:02:44:b8:8d:cb:
         3e:56:7d:46:e8:ed:f3:32:4e:61:6d:fd:83:43:ed:26:23:60:
         82:7f:1c:04:55:a5:01:1c:f0:fb:1b:dd:a0:24:2b:96:e8:3c:
         0e:40:31:2b:7b:e8:50:1c:bc:c5:38:fd:da:94:00:a5:5d:51:
         03:ad:84:77:1a:69:d7:3a:a2:ae:b0:31:11:ed:2e:99:8f:11:
         f6:b5:cc:03:f9:95:d0:a4:8b:3b:fe:a4:f5:e9:76:26:96:b9:
         09:19:4b:70:b0:25:38:c2:92:c0:e7:3a:fc:7b:bc:54:d6:aa:
         7a:35:dd:f3:46:c2:1e:78:89:51:78:6c:25:c8:13:2c:e7:54:
         e9:9e:21:29:32:96:37:ef:db:a6:78:e1:cc:ee:fb:61:f4:9e:
         27:f6:1e:63:9a:04:6e:2a:dc:d3:5b:34:98:72:d3:1c:17:a4:
         24:3b:ba:25:20:f4:26:f7:08:bf:39:cb:4e:c1:88:a4:2a:fa:
         40:6b:b2:27:3f:fd:bf:65:4f:c4:16:fa:ba:0a:84:f5:98:43:
         e8:e0:5c:dc:3e:cd:92:74:4b:b9:85:9d:7f:bc:00:54:00:a8:
         5a:59:d0:fe:ff:9f:49:65:35:40:e0:bb:3e:64:75:3f:8a:9a:
         ae:97:bc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:01:28 2025 by rpki-client