Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
File:                     FggPXxr0qlYST_cZXRPoW5OllSE.mft (raw, json)
Hash identifier:          rqHGpov41fj4z82z/jqWMF/F9DjhJA+0ZCY+bSGgbCI=
Subject key identifier:   C9:FC:F7:C4:03:5D:C1:83:17:C8:D2:74:E9:41:AB:53:CF:E2:55:16
Authority key identifier: 16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21
Certificate issuer:       /CN=A9193267/serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521
Certificate serial:       01E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
Manifest number:          01DD
Signing time:             Sun 15 Jun 2025 01:59:53 +0000
Manifest this update:     Sun 15 Jun 2025 01:59:53 +0000
Manifest next update:     Sun 22 Jun 2025 01:59:53 +0000
Files and hashes:         1: FggPXxr0qlYST_cZXRPoW5OllSE.crl (hash: O75wMOjofDF7X7y5Wf+pcoSDOr88BomJzaJfTAkId9Y=)
                          2: F29D0E026EE311ED94338E61C4F9AE02.roa (hash: 33mYAJEejTIdphmOfEnKCIbd2zZ81lml8aEGejVT4Nk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.crl
                          rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 01:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481 (0x1e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193267, serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521
        Validity
            Not Before: Jun 15 01:59:53 2025 GMT
            Not After : Jun 22 01:59:53 2025 GMT
        Subject: CN=684e2919-894e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3a:a9:b8:da:17:e1:91:22:f4:a5:e1:4b:0b:
                    13:a9:fa:2b:0d:39:c7:f3:22:d2:b0:fa:c6:02:b8:
                    e7:8b:84:25:92:03:e3:4a:9a:d9:53:e9:9f:3d:dc:
                    71:e9:92:7e:f3:40:33:9b:dc:a2:dd:f6:79:45:f3:
                    21:86:69:ce:56:e6:41:4c:98:c8:97:b2:8d:e7:ae:
                    8d:0b:8c:32:75:d7:b3:1f:ab:7f:a3:4b:5a:ef:f4:
                    d7:9d:76:de:87:be:22:84:2d:01:4b:e3:ab:26:3a:
                    13:68:f0:04:32:22:c9:ce:ba:21:d3:e9:ba:f8:50:
                    63:c9:38:aa:51:54:e6:25:c6:bb:53:92:91:e6:57:
                    25:91:35:0d:56:ca:8d:c0:6c:26:c5:ed:af:dd:a6:
                    73:15:e8:64:85:c0:94:cb:80:7e:5c:81:2f:f9:5f:
                    bd:9e:6a:eb:e5:a2:d0:f4:33:eb:80:2d:b0:1a:d3:
                    4e:84:ad:47:40:c7:19:5b:cd:ec:74:33:1a:ae:61:
                    b3:60:c4:92:db:8e:15:27:c3:55:85:e0:50:a4:9d:
                    15:41:05:c5:2b:df:83:81:27:66:e7:74:4d:bc:80:
                    15:73:30:c2:fd:5c:ae:4e:9b:8f:23:9d:dd:0b:48:
                    2f:4d:36:6d:9d:11:65:bd:14:17:e5:69:90:78:a2:
                    c7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FC:F7:C4:03:5D:C1:83:17:C8:D2:74:E9:41:AB:53:CF:E2:55:16
            X509v3 Authority Key Identifier:
                keyid:16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e6:0b:80:e1:e9:31:02:ae:46:46:4a:48:b9:6d:18:ff:45:
         99:d1:a9:59:af:e5:fb:1a:c0:db:d9:90:a8:5f:8a:b1:e4:09:
         60:b7:4a:ba:3f:3e:47:5f:f4:5e:62:57:77:d0:c9:b5:d7:a9:
         45:6b:80:cf:07:5f:dd:a1:2c:af:2c:da:8c:8a:6d:cf:75:d1:
         6e:1e:3e:ee:bc:49:ea:bd:df:78:f2:99:66:fa:ca:f2:f6:6d:
         d6:d3:50:75:00:7b:5f:df:60:0d:68:e7:e0:28:35:43:55:d2:
         46:c7:39:df:ec:34:49:18:39:29:3e:74:fd:0f:d5:dc:4c:29:
         ba:22:ae:41:d3:c3:83:15:c4:80:53:99:69:2a:3f:73:3d:7a:
         eb:32:c3:f7:60:1f:e1:d9:5e:89:2a:59:f8:95:b6:b4:45:95:
         df:8e:f4:0a:c8:c4:02:f1:b1:a6:c5:f2:6f:5b:12:23:25:17:
         af:3c:94:e2:f0:55:80:8a:59:8c:ec:f4:a2:de:86:d4:46:2a:
         e2:4a:8c:32:3e:d8:ac:b5:28:c7:86:b8:4e:c0:3a:4d:f7:34:
         0b:e4:0a:1a:c4:c2:f4:04:a7:82:54:bd:54:5a:28:7d:96:82:
         ca:77:0b:0a:42:a5:6f:34:95:a4:13:ce:20:14:d4:3c:ca:cd:
         a6:f5:d5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:15:08 2025 by rpki-client