Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
File:                     FgxyzFd72N5TouywCYwi81pRqp4.mft (raw, json)
Hash identifier:          MQvGOL+flRNYX6uyaXVAFWlLMvm54qiIqX0DilTUIvE=
Subject key identifier:   E7:37:C8:43:DF:22:6A:76:A7:E4:F7:DF:85:84:56:FB:27:23:E7:B5
Authority key identifier: 16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E
Certificate issuer:       /CN=A91C8066/serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E
Certificate serial:       01CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
Manifest number:          01C6
Signing time:             Sun 15 Jun 2025 02:15:23 +0000
Manifest this update:     Sun 15 Jun 2025 02:15:22 +0000
Manifest next update:     Sun 22 Jun 2025 02:15:22 +0000
Files and hashes:         1: FgxyzFd72N5TouywCYwi81pRqp4.crl (hash: ES3eUlJncN1A9ZkZBqsiV38/jcpmgOFnjAbueGXZf74=)
                          2: 452D9EF494F811ED85ADE381C4F9AE02.roa (hash: n8+NWSH/0jbCR4W6RjUOoVJVoSERmDVQnQldNxK/jIo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl
                          rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8066, serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E
        Validity
            Not Before: Jun 15 02:15:22 2025 GMT
            Not After : Jun 22 02:15:22 2025 GMT
        Subject: CN=684e2cbb-ddb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:25:fc:13:4b:35:9a:13:60:f2:94:e1:06:46:
                    bf:42:3e:81:2a:ab:62:f6:24:c6:9d:72:45:a4:df:
                    fb:09:33:27:ed:06:c2:ef:2a:70:29:6a:21:6b:81:
                    9d:85:c0:6e:64:9c:57:6f:ca:41:cf:bd:69:79:bc:
                    40:28:1e:32:13:9d:18:b5:b8:54:d7:45:d6:9d:70:
                    dd:50:b8:16:25:65:66:58:39:dc:c9:3f:31:e6:32:
                    3f:65:c1:b7:d2:06:8a:11:53:bd:28:87:2e:b3:5e:
                    f0:69:20:fc:7a:76:aa:a5:49:8f:14:d0:5a:2f:66:
                    b6:e9:9b:8b:c1:27:c9:b6:f4:19:58:d8:46:1b:6b:
                    97:bd:00:4b:1b:27:5a:4e:e3:53:dc:14:b1:73:37:
                    a5:6f:18:c3:57:4c:3d:51:f2:ef:8e:c1:2b:59:06:
                    95:f9:95:f5:18:af:ae:b5:c6:37:33:27:ad:24:de:
                    a4:b5:e5:a6:b4:5d:0f:ce:15:49:95:cd:ab:ca:40:
                    86:5f:96:46:10:bc:62:5c:cb:ae:ea:5c:10:48:d1:
                    1b:f2:75:e2:c0:87:7a:20:69:13:37:a3:1a:54:74:
                    66:a8:15:3b:93:d7:31:94:c4:73:b6:39:c4:41:38:
                    19:1f:58:2d:2d:67:4f:32:e5:0c:ac:64:82:eb:bd:
                    9a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:37:C8:43:DF:22:6A:76:A7:E4:F7:DF:85:84:56:FB:27:23:E7:B5
            X509v3 Authority Key Identifier:
                keyid:16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:b2:f5:a0:d5:56:0e:46:f6:2c:eb:23:34:8a:40:83:54:25:
         72:f6:dc:93:11:fe:0d:9b:6b:c6:2e:fc:8a:08:17:48:4c:65:
         ef:bd:11:d7:a9:e4:01:a8:a8:6c:41:86:e9:7b:77:76:aa:69:
         f2:fd:41:66:4b:f3:ec:6e:81:f3:ed:44:8b:c8:7d:61:23:6e:
         d5:35:3b:3a:13:27:db:db:dd:e2:44:6b:2d:fd:16:ff:65:a1:
         f4:e4:a0:ab:4a:2f:c5:38:16:44:6e:6d:38:f3:49:ea:a6:71:
         81:f4:c5:87:18:de:05:48:57:b8:c9:bb:89:8f:d8:4e:68:1a:
         5f:92:2f:4f:fb:df:0a:66:f7:7f:50:f5:31:74:46:f1:e1:3e:
         ba:18:e3:1e:c2:55:9f:78:c1:97:d2:b3:0f:e0:dd:b8:27:31:
         7b:3e:69:6b:83:3f:02:c3:ed:78:36:60:0c:a8:8d:ea:c4:2a:
         53:61:9c:67:f7:ab:a7:48:f6:ff:b3:33:b1:53:01:23:f7:5e:
         33:c0:37:4e:5d:21:ae:6d:2e:47:7f:14:29:b6:73:9c:e2:b7:
         ba:33:56:13:98:66:d8:c1:57:c0:84:9c:4f:e7:ef:48:47:88:
         be:86:fe:45:f7:09:d0:78:b4:4f:84:51:c9:8d:b2:c7:a7:88:
         2e:49:5c:68
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzgwNjYxMTAvBgNVBAUTKDE2MEM3MkNDNTc3QkQ4REU1M0EyRUNCMDA5OEMyMkYz
NUE1MUFBOUUwHhcNMjUwNjE1MDIxNTIyWhcNMjUwNjIyMDIxNTIyWjAYMRYwFAYD
VQQDEw02ODRlMmNiYi1kZGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqiX8E0s1mhNg8pThBka/Qj6BKqti9iTGnXJFpN/7CTMn7QbC7ypwKWoha4Gd
hcBuZJxXb8pBz71pebxAKB4yE50YtbhU10XWnXDdULgWJWVmWDncyT8x5jI/ZcG3
0gaKEVO9KIcus17waSD8enaqpUmPFNBaL2a26ZuLwSfJtvQZWNhGG2uXvQBLGyda
TuNT3BSxczelbxjDV0w9UfLvjsErWQaV+ZX1GK+utcY3MyetJN6kteWmtF0PzhVJ
lc2rykCGX5ZGELxiXMuu6lwQSNEb8nXiwId6IGkTN6MaVHRmqBU7k9cxlMRztjnE
QTgZH1gtLWdPMuUMrGSC672ajQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOc3yEPf
Imp2p+T334WEVvsnI+e1MB8GA1UdIwQYMBaAFBYMcsxXe9jeU6LssAmMIvNaUaqe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODA2Ni8xOEE1MTI0ODk0
RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJONVRvdXl3Q1l3aTgxcFJx
cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZneHl6RmQ3Mk41VG91eXdDWXdpODFwUnFwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
ODA2Ni8xOEE1MTI0ODk0RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJO
NVRvdXl3Q1l3aTgxcFJxcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDDsvWg1VYORvYs6yM0ikCDVCVy9tyTEf4Nm2vGLvyKCBdITGXvvRHX
qeQBqKhsQYbpe3d2qmny/UFmS/PsboHz7USLyH1hI27VNTs6Eyfb293iRGst/Rb/
ZaH05KCrSi/FOBZEbm0480nqpnGB9MWHGN4FSFe4ybuJj9hOaBpfki9P+98KZvd/
UPUxdEbx4T66GOMewlWfeMGX0rMP4N24JzF7Pmlrgz8Cw+14NmAMqI3qxCpTYZxn
96unSPb/szOxUwEj914zwDdOXSGubS5HfxQptnOc4re6M1YTmGbYwVfAhJxP5+9I
R4i+hv5F9wnQeLRPhFHJjbLHp4guSVxo
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:34:04 2025 by rpki-client