Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft
File:                     FBXygRwDfzZMxYcYC_JAeVsEOmk.mft (raw, json)
Hash identifier:          wfBCSQa++UDoZJQCUtuCJMS+7B3/yEj0PGFvjbh8b+Y=
Subject key identifier:   99:A7:4D:57:A2:CA:7A:BF:33:7A:FD:58:6D:BC:25:1B:5D:C3:AF:3B
Authority key identifier: 14:15:F2:81:1C:03:7F:36:4C:C5:87:18:0B:F2:40:79:5B:04:3A:69
Certificate issuer:       /CN=A91E275B/serialNumber=1415F2811C037F364CC587180BF240795B043A69
Certificate serial:       3291
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBXygRwDfzZMxYcYC_JAeVsEOmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft
Manifest number:          9A3A
Signing time:             Sat 14 Jun 2025 15:15:34 +0000
Manifest this update:     Sat 14 Jun 2025 15:15:33 +0000
Manifest next update:     Sat 21 Jun 2025 15:15:33 +0000
Files and hashes:         1: FBXygRwDfzZMxYcYC_JAeVsEOmk.crl (hash: AjfzoGWsk0JTVlXj4UrgISgxhYA6t+Hz0LgZXziFmRc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.crl
                          rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBXygRwDfzZMxYcYC_JAeVsEOmk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 15:15:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12945 (0x3291)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E275B, serialNumber=1415F2811C037F364CC587180BF240795B043A69
        Validity
            Not Before: Jun 14 15:15:33 2025 GMT
            Not After : Jun 21 15:15:33 2025 GMT
        Subject: CN=684d9215-b890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:00:28:31:f3:58:0c:83:c6:b5:ca:92:10:7e:
                    bc:12:c0:b0:41:68:fd:57:b5:04:61:36:42:74:55:
                    09:ba:92:88:d0:5c:65:c6:fc:dc:d5:10:78:6b:86:
                    31:43:8b:6d:87:4a:d5:9b:17:0e:c8:c5:cd:a8:07:
                    9f:65:c3:29:9c:22:e8:1f:db:21:b1:8d:a0:e9:86:
                    49:3b:5d:02:28:70:c3:0e:1e:53:4b:de:49:dd:2c:
                    8c:eb:7b:7d:06:62:0b:e0:8a:b9:c3:64:21:e5:b1:
                    15:80:c9:06:07:bc:a3:9f:67:81:5d:6c:23:3f:f4:
                    93:85:2b:e1:96:bf:2f:63:56:99:36:09:49:05:8c:
                    25:01:b3:6b:b9:2f:d1:de:9e:d1:2a:44:6c:62:f8:
                    0c:30:a4:12:38:4a:1c:92:68:fb:17:a5:b4:ac:e6:
                    06:81:56:9b:e3:2d:43:8d:e0:26:80:07:0a:cb:53:
                    0b:4a:ab:c5:79:f7:78:bc:cb:ce:23:63:5c:79:89:
                    3c:a1:66:ce:16:5e:f8:b1:cf:1e:a9:eb:2f:7b:b9:
                    f7:99:e2:73:a9:79:1f:7a:99:e7:10:bf:68:9a:c0:
                    44:4d:b3:dc:37:a8:19:dc:69:21:a0:08:b4:6c:b4:
                    27:a7:fe:30:d8:08:99:91:ea:ac:64:2d:6e:49:8d:
                    c2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A7:4D:57:A2:CA:7A:BF:33:7A:FD:58:6D:BC:25:1B:5D:C3:AF:3B
            X509v3 Authority Key Identifier:
                keyid:14:15:F2:81:1C:03:7F:36:4C:C5:87:18:0B:F2:40:79:5B:04:3A:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBXygRwDfzZMxYcYC_JAeVsEOmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:9c:ed:5c:69:df:3c:72:a6:d6:d0:de:60:f2:fb:77:b3:65:
         ac:fe:3f:a3:96:5f:57:a5:0b:89:34:63:16:1c:c1:01:c0:91:
         4a:78:02:37:02:54:14:c8:9c:b7:75:2b:a5:94:42:57:fc:4f:
         f5:10:9d:c0:06:f8:30:55:b5:51:99:7e:8f:4f:19:71:3d:01:
         10:7f:73:b7:92:0e:84:3b:45:fd:59:38:50:c7:c1:2f:66:37:
         82:76:4c:02:94:4a:03:47:04:5b:0c:87:cb:ed:3b:e2:d6:91:
         65:10:05:d5:b0:fc:f1:41:24:ea:bf:dd:bf:82:85:fd:87:06:
         f2:51:68:c0:1b:4f:8e:3a:a5:11:66:06:ab:2a:ec:7f:c5:aa:
         e9:9b:a0:d3:9f:15:3e:15:99:56:43:4f:8b:c0:8d:77:6a:95:
         dd:2d:ec:fe:8a:e9:f6:6f:6e:06:2b:b2:43:e8:2e:98:14:eb:
         a8:53:d3:c3:9b:62:87:18:79:d3:b9:2f:b1:77:bc:3c:a3:dc:
         56:ed:c6:07:f3:8b:cd:55:8b:39:c1:a1:fc:9e:f1:c2:dc:6d:
         24:55:4b:9e:6a:38:cb:ed:a1:6a:ee:ec:ce:b0:f8:cc:d8:d3:
         2e:90:ff:b4:6a:10:ba:b3:b5:22:eb:8e:d6:3c:6b:17:a5:47:
         7a:bd:36:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:46:51 2025 by rpki-client