Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
File:                     fiRDENekVusSe5JsQvJteems24g.mft (raw, json)
Hash identifier:          3k2eAb1QAHB6jzXqea0W+UdSwP1fbfoE+KxLcwgHKUQ=
Subject key identifier:   27:C8:50:B5:02:86:33:55:6D:55:E8:2F:59:CD:C1:57:B2:4D:00:2E
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Certificate issuer:       /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial:       0898
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
Manifest number:          083E
Signing time:             Thu 24 Apr 2025 20:50:09 +0000
Manifest this update:     Thu 24 Apr 2025 20:50:09 +0000
Manifest next update:     Thu 01 May 2025 20:50:09 +0000
Files and hashes:         1: fiRDENekVusSe5JsQvJteems24g.crl (hash: MTEbo1f/B2N/c2Ly6nKzmmdgR3n2yPF//I4U2p+rGIE=)
                          2: BE33817A69AE11EEBBC89D75C4F9AE02.roa (hash: SNPBwQUb1RKoaTQTNrfH32vnIjaOv9HeTlrUpVnkMgc=)
                          3: 885A3B4C198C11EEA06C1429C4F9AE02.roa (hash: KtUrm2foeaUuoNmWh4nKKxxCo2xUAoGCx8YrdIKIWS8=)
                          4: B59B34B2A59511EFB1B8AF36C4F9AE02.roa (hash: eiCuC1YeFyOuHPZHqPQ601dUszGySRFgdPdOWzMPWtY=)
                          5: 6D0768C2770711EFBA70CE36C4F9AE02.roa (hash: tEuFHPIEilNpnG2svl8ZjY076owwpchb5SOYj1BIOvg=)
                          6: A64C29AA3D9811EE88B2694CC4F9AE02.roa (hash: P543uAxi61jv6pAr/0Afy+uliwnXO1AO2KiTZ1BtODA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
                          rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 20:50:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2200 (0x898)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
        Validity
            Not Before: Apr 24 20:50:09 2025 GMT
            Not After : May  1 20:50:09 2025 GMT
        Subject: CN=680aa401-ee47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:33:a3:28:ef:28:03:20:db:60:75:55:af:7a:
                    11:ab:b8:36:46:28:b0:2b:ea:96:c9:63:85:02:43:
                    b7:13:00:85:ea:9c:1b:2f:42:59:a2:90:ee:2a:fe:
                    79:40:26:8a:3e:af:30:08:27:5e:60:8e:d2:5c:69:
                    e0:d5:27:e0:d2:71:a8:0c:86:55:2d:74:c7:6e:a9:
                    a8:3f:23:9a:5b:e5:53:34:6e:8b:2d:b1:a5:a1:a2:
                    50:02:b0:92:66:e6:b0:8b:00:12:bc:c9:3f:aa:01:
                    bc:ad:5b:db:8e:bf:b4:44:ac:81:ea:6d:43:94:39:
                    11:aa:2f:e2:46:5c:c2:0b:2e:59:c8:dd:a6:5f:93:
                    0f:f3:35:ec:cd:76:fc:0a:bf:39:aa:06:10:3d:a9:
                    67:1f:7c:54:f9:bb:96:0a:da:2f:dc:df:de:c0:19:
                    42:e1:fe:d7:b6:aa:22:86:f2:ec:d3:5b:b8:c7:08:
                    29:c0:43:b3:fd:56:8a:ba:29:97:d1:f0:3e:56:c1:
                    c7:5a:6d:31:56:50:37:43:de:a1:69:c2:f4:29:6c:
                    a1:1b:79:76:e2:04:84:fa:68:7a:23:74:c7:77:3c:
                    cb:7f:97:d0:d9:83:a4:74:dd:89:20:89:b9:8d:84:
                    0e:b9:41:24:95:ed:7a:d7:ee:6c:31:07:07:2d:83:
                    46:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C8:50:B5:02:86:33:55:6D:55:E8:2F:59:CD:C1:57:B2:4D:00:2E
            X509v3 Authority Key Identifier:
                keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:63:79:2a:97:b0:97:75:37:36:a7:7d:65:64:92:14:f9:d3:
         9a:e6:8c:3c:86:78:b9:48:3a:86:cb:fb:a4:51:98:5a:32:7f:
         d1:65:dc:4b:dc:36:0c:9b:f4:6e:78:60:4a:72:6a:bb:97:ec:
         45:25:2c:f1:70:c0:08:37:6a:66:c6:51:c4:4b:a7:43:18:fc:
         ae:c3:d6:5f:40:d4:ae:0e:4b:18:e9:23:9e:a0:ab:fe:b9:2a:
         af:8e:b9:44:83:ae:c5:7a:9f:45:fb:d6:a1:4b:b9:69:ae:3f:
         48:88:37:e8:75:bb:38:a6:e6:1a:b9:79:40:26:29:4b:3b:72:
         67:79:06:5b:c5:0f:19:8b:21:94:64:d7:59:83:19:b8:ce:3b:
         9e:22:06:20:67:b1:44:2a:c2:3f:37:7a:19:2f:31:77:38:04:
         b3:ed:98:ec:2e:d3:c8:ba:49:ce:2f:24:f1:64:fd:4b:37:81:
         9b:98:a5:3b:8b:fd:c0:16:8e:02:45:b1:17:02:ac:f2:b1:4e:
         82:33:d6:2c:30:57:25:f1:8e:ee:3a:af:aa:f6:45:d7:bf:de:
         2f:88:13:5c:ac:27:01:a1:fc:dc:d8:79:7b:23:b2:b1:bf:48:
         09:8b:8c:8e:de:c5:df:3a:e7:18:f7:d1:75:0d:c1:93:9f:bb:
         5a:7c:c6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:57:12 2025 by rpki-client