Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.mft
File:                     fvtg2-isjcfDKzQJTcvj-mYiH6E.mft (raw, json)
Hash identifier:          eRMiDej9okd1BEaBBwSPj3nx2oOVevBUfcBIoPn5l44=
Subject key identifier:   A1:0F:0C:3B:58:89:E9:8D:4B:E7:F0:7D:34:8A:08:5F:A4:22:92:18
Authority key identifier: 7E:FB:60:DB:E8:AC:8D:C7:C3:2B:34:09:4D:CB:E3:FA:66:22:1F:A1
Certificate issuer:       /CN=A9166CD3/serialNumber=7EFB60DBE8AC8DC7C32B34094DCBE3FA66221FA1
Certificate serial:       0388
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvtg2-isjcfDKzQJTcvj-mYiH6E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.mft
Manifest number:          0380
Signing time:             Fri 25 Apr 2025 00:39:06 +0000
Manifest this update:     Fri 25 Apr 2025 00:39:05 +0000
Manifest next update:     Fri 02 May 2025 00:39:05 +0000
Files and hashes:         1: fvtg2-isjcfDKzQJTcvj-mYiH6E.crl (hash: h6Y0Y7vZDOO+uFaGq8hFuhGTfqeuO5z++xab6XDCWEc=)
                          2: 49B77AF49F8911EC8270CE39C4F9AE02.roa (hash: A4cA8YN7jcZngdZa3tpI+IpUHK4WS+VtSTZQ60gb8Cc=)
                          3: 52EBB7524AE611EEB1E51972C4F9AE02.roa (hash: wld/ogIBPh3DW/laqIddglVEpnzlKpHA4pEqwL9PJOE=)
                          4: 465066A44AD811EEB55E2071C4F9AE02.roa (hash: rooAY+QwHq+MWUAdb5diehizwCwb4BdEaaA2+5EIoQo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.crl
                          rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvtg2-isjcfDKzQJTcvj-mYiH6E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 904 (0x388)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166CD3, serialNumber=7EFB60DBE8AC8DC7C32B34094DCBE3FA66221FA1
        Validity
            Not Before: Apr 25 00:39:05 2025 GMT
            Not After : May  2 00:39:05 2025 GMT
        Subject: CN=680ad9a9-ac9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f4:65:81:d0:a4:07:d7:3b:37:f7:cc:89:99:
                    d1:11:c4:fd:1b:1f:70:73:50:a2:6f:6f:4d:67:d9:
                    4f:e1:e0:e0:c5:97:ae:6b:0d:67:78:4e:a5:d8:d4:
                    32:2c:02:5d:f5:78:79:59:15:bd:fc:d3:ca:18:0f:
                    98:e9:b4:97:38:69:3e:20:c3:fc:61:ff:57:60:65:
                    66:45:93:ca:4f:ae:ee:b2:22:18:fc:de:d4:c1:81:
                    af:4d:7f:f9:53:34:46:7b:2b:e7:f3:c3:fa:76:01:
                    9a:3f:5f:77:ec:5b:f2:dc:fa:a9:27:00:37:76:b9:
                    f5:7f:d2:53:af:3a:d1:69:d5:d4:b1:4b:b4:44:41:
                    da:61:b1:f5:48:99:46:bc:35:5e:30:1c:51:b6:af:
                    22:10:ed:c9:01:68:32:20:60:f2:b4:44:79:dc:1b:
                    16:7d:35:1b:c2:8c:25:07:c1:3d:70:1a:d3:f5:10:
                    14:6b:25:c9:2f:07:1e:c7:e6:3b:ef:78:fb:2b:7c:
                    2d:09:d0:54:08:92:df:98:02:a5:be:6e:c9:7e:f0:
                    62:7f:07:a4:47:9f:e4:7f:ea:4f:ed:82:d2:f8:1b:
                    39:e7:ac:a7:60:fb:a8:57:28:40:d9:85:d1:eb:42:
                    5c:61:4c:86:ff:02:d5:f6:fc:76:b5:e0:30:86:42:
                    9c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:0F:0C:3B:58:89:E9:8D:4B:E7:F0:7D:34:8A:08:5F:A4:22:92:18
            X509v3 Authority Key Identifier:
                keyid:7E:FB:60:DB:E8:AC:8D:C7:C3:2B:34:09:4D:CB:E3:FA:66:22:1F:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvtg2-isjcfDKzQJTcvj-mYiH6E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:70:4d:91:1b:ef:53:6c:7d:ea:da:81:48:f3:4c:9a:fc:f6:
         90:8a:59:42:40:de:95:25:49:dd:e2:59:a3:14:4a:39:6f:a2:
         7d:ae:bc:d0:1e:d0:7d:e5:07:8c:08:53:42:3d:55:aa:3a:31:
         4d:08:56:da:58:ea:06:dd:85:6d:1d:46:f6:d8:cc:c3:b5:64:
         54:fb:62:20:41:79:d5:7d:8f:e5:7f:02:f4:0b:d3:22:3f:9e:
         67:6b:3e:f3:d6:b3:2e:35:52:2e:4d:ea:8e:dc:3e:05:44:fd:
         9f:ae:ca:e3:db:e9:2f:ed:a1:53:97:05:4d:f7:9e:3e:04:4d:
         5c:ab:30:bb:64:a5:93:77:d3:eb:80:f5:e5:b7:41:77:2a:cf:
         71:5a:07:d8:f0:a1:52:47:7b:bd:2f:4d:11:f9:bc:f3:24:e1:
         c7:5c:03:c8:05:62:11:f2:33:f2:79:95:a8:63:c5:06:d4:46:
         6e:66:d7:10:e5:f8:c9:0d:97:15:65:89:3b:1d:24:08:ab:20:
         5e:14:dc:35:38:89:73:82:3b:d9:b2:5a:1a:4d:94:61:62:76:
         93:ea:0c:79:82:7f:1a:bd:d9:ad:85:ec:09:00:c5:2d:3a:66:
         b1:8a:7b:7e:70:5d:9b:00:2f:a7:08:4a:eb:42:e9:03:aa:6d:
         e6:25:d6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:58:40 2025 by rpki-client