Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft
File:                     Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft (raw, json)
Hash identifier:          +xALuwtVo5sloaKXWs2ndQNW9GAJvbNAwGILtc5NgLY=
Subject key identifier:   5F:C6:4A:9E:D2:BC:F0:4D:CA:57:4D:F9:DB:DA:8C:FD:8A:95:EC:13
Authority key identifier: 16:7D:6E:C3:2A:D0:B3:58:15:F2:88:47:AD:D7:97:0E:B6:7F:2D:BA
Certificate issuer:       /CN=A9197CBD/serialNumber=167D6EC32AD0B35815F28847ADD7970EB67F2DBA
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft
Manifest number:          F2
Signing time:             Fri 25 Apr 2025 04:19:34 +0000
Manifest this update:     Fri 25 Apr 2025 04:19:33 +0000
Manifest next update:     Fri 02 May 2025 04:19:33 +0000
Files and hashes:         1: Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.crl (hash: 6BAhy5Rd+NHu/3nfYhXbus5V3U3dDgC/47K1toPKJD8=)
                          2: BD16D2BCB11411EE9B803C66C4F9AE02.roa (hash: lR8Bw6f2BJOLO8ooe7J/r1W5noPvKu/D4s9lgSl+fj4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.crl
                          rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 04:19:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197CBD, serialNumber=167D6EC32AD0B35815F28847ADD7970EB67F2DBA
        Validity
            Not Before: Apr 25 04:19:33 2025 GMT
            Not After : May  2 04:19:33 2025 GMT
        Subject: CN=680b0d55-76d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:48:51:07:1d:df:69:ed:dd:35:96:13:2d:6f:
                    91:67:2c:bc:0b:cf:6f:10:47:c7:ae:30:75:15:c3:
                    70:44:1e:13:76:33:90:e6:5a:70:6d:55:a0:7b:d7:
                    5a:d5:26:63:52:51:b0:56:e8:79:f8:96:32:50:c2:
                    bb:b1:3e:d9:24:ca:a5:2d:91:61:dc:f5:52:c3:5b:
                    33:4d:82:c2:08:21:e3:b8:03:4b:f7:26:a4:18:f9:
                    16:6c:04:5b:1e:9e:d4:57:df:d3:f1:35:ca:d9:f8:
                    b5:55:e0:23:2a:fe:c8:c0:3d:83:46:4b:af:2b:08:
                    7e:1c:e2:23:ca:92:8e:5a:1d:e9:11:c3:e1:ff:02:
                    2e:b0:fe:72:58:d7:d1:6e:0c:3d:27:ac:a1:34:9c:
                    04:39:d2:2c:05:5e:e7:8a:4e:08:c9:a0:ed:7f:c1:
                    4a:e9:0d:cc:4e:92:2b:8d:83:ee:29:b7:3b:10:30:
                    f5:8d:23:fb:0f:de:32:bd:6b:82:9b:8e:62:26:ed:
                    86:17:64:17:59:11:cd:33:4b:58:6c:cf:20:f2:d5:
                    de:ad:c8:2e:45:a1:1d:14:00:89:d0:43:87:da:df:
                    84:9c:d6:b4:17:e9:0f:3e:bc:b3:8b:57:41:1f:0a:
                    06:e6:66:90:c5:4c:09:54:ae:d7:b7:fe:d9:7f:ec:
                    d8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C6:4A:9E:D2:BC:F0:4D:CA:57:4D:F9:DB:DA:8C:FD:8A:95:EC:13
            X509v3 Authority Key Identifier:
                keyid:16:7D:6E:C3:2A:D0:B3:58:15:F2:88:47:AD:D7:97:0E:B6:7F:2D:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b1:b7:a0:8e:d3:03:e3:4e:fd:df:95:af:0b:08:f4:9a:c0:
         37:3f:ee:d5:c1:15:d9:d9:a7:65:77:64:0b:9e:53:64:ea:4a:
         87:81:19:8d:ae:99:ad:d5:26:a9:87:3f:1b:00:38:57:87:de:
         2e:cb:43:a7:45:e5:f1:61:8e:c4:5b:6f:f7:ce:f2:53:8e:c0:
         80:a6:a1:06:85:eb:d6:b2:32:ca:dd:5c:4d:17:ab:01:b8:4c:
         63:8c:f1:86:02:e0:6f:ad:10:62:91:98:39:aa:24:5a:ab:3c:
         b6:e8:d4:c0:fe:85:2a:00:e8:5a:1d:63:12:fc:29:4a:ec:52:
         2b:71:bb:49:e5:d5:68:61:b5:67:38:5a:c3:9e:6a:fb:37:27:
         3d:3a:a2:d7:42:b4:c0:44:bb:d7:53:9c:58:fa:2f:dc:36:cb:
         4d:f8:4c:cb:2d:2f:65:f5:e4:cd:97:b2:bf:16:e0:cb:7c:73:
         7d:79:ff:b8:9d:28:43:30:e9:fb:d8:82:43:21:40:a7:64:39:
         36:d9:93:6f:b8:78:bb:82:93:94:10:df:e5:b0:c7:28:d2:77:
         61:95:bd:70:20:51:4c:b7:6e:03:1b:61:ba:c2:cf:81:ca:56:
         05:38:d5:7c:94:98:5a:2c:bc:0a:57:5f:79:57:18:b4:92:d9:
         78:23:2c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:04:53 2025 by rpki-client