Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft
File:                     FrgD2zk43LFdxZooyXcZ2h_yClM.mft (raw, json)
Hash identifier:          x/2T/glzflcUl7ms8kfKWIbQANqpeoj+G1GkindtNWY=
Subject key identifier:   79:D6:BC:97:49:24:15:CA:93:09:E6:3C:3D:86:8C:3E:24:9E:58:16
Authority key identifier: 16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53
Certificate issuer:       /CN=A9149E0D/serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53
Certificate serial:       0B4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft
Manifest number:          0B44
Signing time:             Thu 12 Jun 2025 18:57:36 +0000
Manifest this update:     Thu 12 Jun 2025 18:57:35 +0000
Manifest next update:     Thu 19 Jun 2025 18:57:35 +0000
Files and hashes:         1: FrgD2zk43LFdxZooyXcZ2h_yClM.crl (hash: gJxVwpRUpaoyLuNYni+gOUgUCO3EiL3T+x8I0Q5ZMPU=)
                          2: C8FB48F808AF11EBAB78DF6BC4F9AE02.roa (hash: QwMnRtpt+1eT07NMpTybXiiH3v3R91ylnqw2cVEHLL0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl
                          rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 18:57:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2895 (0xb4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149E0D, serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53
        Validity
            Not Before: Jun 12 18:57:35 2025 GMT
            Not After : Jun 19 18:57:35 2025 GMT
        Subject: CN=684b231f-3cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3a:9c:d2:c7:e2:50:00:d3:83:30:72:89:05:
                    50:f3:39:b8:fd:31:31:e1:cb:a8:0e:fd:ec:32:e7:
                    ac:82:d3:5f:39:6d:df:ab:01:51:b6:1a:20:7c:71:
                    98:4e:30:d2:99:68:4b:68:42:83:2b:12:bc:aa:5e:
                    52:d6:d1:ac:d1:18:36:2b:9e:a0:ff:5f:45:9b:cc:
                    81:96:cd:aa:f9:8a:7f:a7:94:38:81:73:62:7c:e5:
                    53:75:7d:d9:00:e6:a4:ce:78:70:56:36:61:d0:3d:
                    d0:bc:46:f4:ff:ff:d4:30:af:81:26:a2:59:6e:17:
                    c6:f0:e4:95:af:24:87:bb:ff:d8:fd:ff:6a:86:db:
                    b4:d0:d5:02:6d:e5:fd:c0:49:2b:b3:ce:de:77:d6:
                    ba:6f:bc:6f:e0:b3:0e:83:f0:48:01:b6:22:28:27:
                    df:69:5b:9f:93:dd:ab:05:20:82:24:4c:ea:1f:ed:
                    09:98:bd:2d:d8:40:53:98:af:1a:43:2b:3e:ba:9c:
                    8e:0d:21:2b:cb:64:31:4a:7a:8e:10:fb:eb:22:ff:
                    9d:68:c1:48:26:ef:cf:8f:34:27:2b:71:ec:e5:f7:
                    93:ab:f8:23:17:9f:eb:ab:18:53:7f:80:43:25:8c:
                    27:34:a6:17:24:3c:fd:a3:bd:42:60:92:3e:12:22:
                    f2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D6:BC:97:49:24:15:CA:93:09:E6:3C:3D:86:8C:3E:24:9E:58:16
            X509v3 Authority Key Identifier:
                keyid:16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:56:36:a2:ae:cf:ba:11:2d:71:15:c3:00:29:1e:b1:bd:4f:
         65:3f:57:a8:8b:34:9e:93:5d:6d:db:94:e9:de:25:0a:da:a7:
         87:ef:26:b2:71:d8:fa:f7:8e:5e:0a:5e:7c:42:a3:11:81:09:
         5a:33:ae:3c:dc:74:7e:8b:5d:d4:d7:10:ee:b8:ed:12:78:5c:
         3a:e3:c3:29:b3:e2:99:d2:08:cd:c6:3e:df:e6:97:14:90:50:
         96:f0:69:84:c7:dc:82:05:96:98:49:7f:5a:31:a0:0a:a0:56:
         ad:68:a7:1f:b8:37:e4:61:8a:a4:f4:1c:b9:f5:9e:26:b9:83:
         fd:c9:84:59:73:70:26:9c:e8:a5:6a:81:47:74:09:78:ce:ec:
         2a:8d:88:75:82:61:c2:35:67:1f:49:3a:d0:c5:ec:9f:ca:e8:
         7a:fe:bc:2a:0e:d5:38:4e:e7:e9:b9:f9:d1:28:ed:07:d4:d9:
         f3:98:0d:4c:31:96:c1:75:ac:89:23:5e:7c:58:1e:db:72:48:
         09:26:03:77:95:3f:3f:2d:70:59:5c:6c:3a:62:1a:fc:c0:14:
         d3:c4:2c:55:24:b1:c1:d9:17:46:3b:cb:de:af:eb:42:7c:fc:
         a0:7d:77:ac:2d:bb:46:53:b9:47:f0:76:f9:bc:81:9c:bf:25:
         0b:89:49:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:38:38 2025 by rpki-client