Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
File:                     FeAstOfcuwrM4igRnP-ANDhil78.mft (raw, json)
Hash identifier:          mmi2II7YZWUd0XgTwMqrfCQwK+qBgj9Eo47uYFJbHJY=
Subject key identifier:   F1:71:15:30:8A:FF:A0:92:A8:E1:6E:C9:8F:1F:B3:E9:C9:F2:D4:5C
Authority key identifier: 15:E0:2C:B4:E7:DC:BB:0A:CC:E2:28:11:9C:FF:80:34:38:62:97:BF
Certificate issuer:       /CN=A91BC15C/serialNumber=15E02CB4E7DCBB0ACCE228119CFF8034386297BF
Certificate serial:       348E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
Manifest number:          348C
Signing time:             Sat 14 Jun 2025 15:05:39 +0000
Manifest this update:     Sat 14 Jun 2025 15:05:39 +0000
Manifest next update:     Sat 21 Jun 2025 15:05:39 +0000
Files and hashes:         1: FeAstOfcuwrM4igRnP-ANDhil78.crl (hash: kPXxZdiOIlGUGvdL+wLx0FLO8AUSWh3mqypGAkZ3ZOQ=)
                          2: A88B0898EC9911EE9627923CC4F9AE02.roa (hash: QO9VCVg4JBZYD4qSn+hc8302M9oNt2/POhltCbyhtbQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.crl
                          rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 15:05:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13454 (0x348e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC15C, serialNumber=15E02CB4E7DCBB0ACCE228119CFF8034386297BF
        Validity
            Not Before: Jun 14 15:05:39 2025 GMT
            Not After : Jun 21 15:05:39 2025 GMT
        Subject: CN=684d8fc3-bed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:20:23:da:cb:f2:08:fe:17:bb:fd:a7:b0:4b:
                    3e:35:01:46:ad:d4:53:fc:31:f2:8d:ce:73:21:cd:
                    f1:0f:9f:e0:03:ff:36:82:4d:55:96:98:98:4b:c0:
                    6d:9d:7f:18:c4:5c:1f:96:6a:4e:e1:a9:8d:a7:b7:
                    09:f7:b1:53:67:3d:b1:9d:68:b5:ed:cb:64:a5:c3:
                    57:9f:b3:17:db:7f:1f:3c:13:a4:cb:4e:df:fb:e8:
                    28:07:24:7c:ce:49:08:75:ee:b4:e3:bb:f8:4f:ae:
                    66:f3:d7:fa:bf:1b:38:7e:67:fa:c8:69:8e:ce:44:
                    fe:2d:ad:8d:13:d6:a1:a7:cd:45:a2:04:fd:1e:72:
                    70:dc:49:f4:52:bd:96:50:e3:2e:c7:f5:bf:9b:f1:
                    0b:22:60:47:73:41:65:44:79:48:55:15:65:bf:59:
                    31:95:8e:33:f1:31:d2:24:eb:60:9d:23:98:0b:94:
                    04:60:ef:38:ea:9c:41:e1:59:a1:60:30:95:3c:d6:
                    fa:40:29:a3:ec:38:18:4b:78:a6:fd:ef:f5:16:82:
                    50:71:6f:f1:23:4c:89:c7:31:81:06:73:ec:94:97:
                    33:b3:51:f1:35:5d:97:78:65:6a:b9:f2:38:48:b8:
                    10:e5:e3:18:d1:cc:fb:4f:68:d0:f6:83:e7:74:2c:
                    24:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:71:15:30:8A:FF:A0:92:A8:E1:6E:C9:8F:1F:B3:E9:C9:F2:D4:5C
            X509v3 Authority Key Identifier:
                keyid:15:E0:2C:B4:E7:DC:BB:0A:CC:E2:28:11:9C:FF:80:34:38:62:97:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:3d:3f:bc:f8:dc:d2:73:7b:8c:66:75:2c:66:86:25:1f:3f:
         08:ed:b7:c4:7d:c5:d0:99:f9:a6:d5:7c:22:f5:6a:9f:d4:dd:
         63:9c:a1:b4:09:63:c9:c8:ca:85:19:6a:d4:3e:78:f9:c7:f7:
         f6:82:63:7a:d5:7b:19:76:d6:58:66:c5:cd:d3:8c:ea:64:d5:
         ad:ec:af:56:52:15:5e:04:4d:43:b6:3d:f2:ca:2f:50:d8:91:
         8a:68:f2:80:63:90:5f:bc:e9:f2:b4:96:03:2b:89:05:b3:39:
         96:f6:07:68:45:dc:09:1d:9e:45:5d:78:7f:6e:c7:28:22:73:
         1a:0d:d1:ff:6b:e8:4a:e8:44:ce:70:21:d3:97:7b:20:6b:98:
         68:94:10:7c:32:92:74:7d:68:77:be:ef:a1:4a:3c:4f:fd:46:
         19:26:cb:08:7a:76:c6:8b:f3:93:6c:1b:33:b3:44:f7:89:5f:
         b6:80:8a:79:f4:60:b7:68:65:ab:80:7d:f9:9e:bf:31:ea:8a:
         d5:a9:86:9a:01:b4:a9:33:4d:09:0e:5e:9b:2d:f1:46:23:10:
         1a:0c:4f:42:4c:f6:92:60:f8:98:1a:a2:f8:c0:fc:71:1a:1c:
         0c:de:03:54:2d:88:97:f3:66:39:1f:af:24:e1:42:18:67:7e:
         2f:ad:b9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:01:39 2025 by rpki-client