Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/FTce6iqi6n2s0NdWvSmFkgHlTSU.mft
File:                     FTce6iqi6n2s0NdWvSmFkgHlTSU.mft (raw, json)
Hash identifier:          7Q+XlLNIpvk3Uo5xyOu4qBiH2GgRsNpXheLKzws4dpg=
Subject key identifier:   69:5D:19:81:CC:BF:1D:7C:67:82:B3:E8:0D:61:E8:B8:D1:6D:6D:22
Authority key identifier: 15:37:1E:EA:2A:A2:EA:7D:AC:D0:D7:56:BD:29:85:92:01:E5:4D:25
Certificate issuer:       /CN=A911018B/serialNumber=15371EEA2AA2EA7DACD0D756BD29859201E54D25
Certificate serial:       071D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTce6iqi6n2s0NdWvSmFkgHlTSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/FTce6iqi6n2s0NdWvSmFkgHlTSU.mft
Manifest number:          0718
Signing time:             Sun 04 May 2025 21:32:28 +0000
Manifest this update:     Sun 04 May 2025 21:32:27 +0000
Manifest next update:     Sun 11 May 2025 21:32:27 +0000
Files and hashes:         1: FTce6iqi6n2s0NdWvSmFkgHlTSU.crl (hash: FThTlWpltgRlr4vR4RQ8ovwo3Q6jMHom+iyzsI3/bfM=)
                          2: 87BCB892503311EB85660C6AC4F9AE02.roa (hash: P5dG17Uydwd8oz4u6zjOdUgyacq9Ugyj09D5EEaQMaQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/FTce6iqi6n2s0NdWvSmFkgHlTSU.crl
                          rsync://rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/FTce6iqi6n2s0NdWvSmFkgHlTSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTce6iqi6n2s0NdWvSmFkgHlTSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 May 2025 21:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1821 (0x71d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911018B, serialNumber=15371EEA2AA2EA7DACD0D756BD29859201E54D25
        Validity
            Not Before: May  4 21:32:27 2025 GMT
            Not After : May 11 21:32:27 2025 GMT
        Subject: CN=6817dceb-aa3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2f:63:04:e0:da:f1:b8:2b:7b:60:37:53:35:
                    59:ae:17:3b:f4:52:31:f4:74:c0:df:c9:ea:b6:6c:
                    c2:b2:43:61:a2:28:58:24:11:56:fc:d4:49:d5:ab:
                    11:b0:04:5b:62:6f:ac:e4:0b:8d:cf:4e:51:06:b7:
                    3a:44:79:6c:e1:8c:f4:bf:07:ff:c8:ed:19:a7:5b:
                    a5:e9:99:ee:0f:2f:b7:b0:17:06:3d:53:f3:39:6f:
                    9a:64:97:1a:ca:35:38:e0:81:13:2e:80:de:6e:15:
                    66:a0:a0:36:c4:e9:03:41:02:b6:c5:17:c0:d7:d9:
                    a1:28:88:fd:08:70:15:82:aa:f7:b7:38:51:d3:4e:
                    b3:f0:0d:58:25:53:a0:89:d7:74:cb:5c:10:da:ba:
                    48:7e:11:89:78:33:5f:2f:a0:30:b7:71:64:2f:86:
                    66:1c:97:20:9b:1b:bb:8a:a7:dd:b6:c9:76:18:18:
                    06:5e:e6:0d:cd:75:18:d4:0f:f5:2c:b8:6d:33:5c:
                    b2:e8:9b:1f:4e:46:66:53:04:41:3f:ef:f7:f9:72:
                    a8:4b:2e:98:f2:50:33:15:cc:20:7a:44:7f:4b:62:
                    94:25:6e:a0:43:85:e5:6a:3f:32:59:47:a6:61:91:
                    18:d7:69:aa:d7:ea:37:86:ca:89:01:56:da:77:aa:
                    d8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5D:19:81:CC:BF:1D:7C:67:82:B3:E8:0D:61:E8:B8:D1:6D:6D:22
            X509v3 Authority Key Identifier:
                keyid:15:37:1E:EA:2A:A2:EA:7D:AC:D0:D7:56:BD:29:85:92:01:E5:4D:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/FTce6iqi6n2s0NdWvSmFkgHlTSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTce6iqi6n2s0NdWvSmFkgHlTSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911018B/3A061A5A354211EBA53FFB48C4F9AE02/FTce6iqi6n2s0NdWvSmFkgHlTSU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:0a:c3:28:23:88:41:fe:94:2b:eb:08:2f:21:50:68:17:0f:
         c2:9d:f9:c0:47:c8:43:c8:ad:d2:fa:5f:b6:b5:98:2e:b6:a7:
         af:9a:6e:b6:fc:5c:db:3b:af:53:39:fc:48:c5:51:03:b0:c6:
         ec:b8:7e:97:c7:f0:b1:3a:45:d7:79:c4:b2:e9:49:d8:35:39:
         c3:9f:18:19:5c:bb:91:f0:62:f4:7c:51:71:e6:ed:db:a6:67:
         81:1b:c8:c5:dd:96:58:35:6b:03:f2:ed:57:3a:a4:72:a9:97:
         33:dd:eb:ca:96:79:de:93:55:e5:ef:ba:dc:fb:4e:f7:27:ae:
         da:7b:ac:52:13:74:3e:21:87:00:0f:96:c9:96:31:44:02:5f:
         68:c4:82:7e:8f:0c:a2:36:52:cf:c9:62:99:a8:c3:03:45:83:
         f6:4f:3c:c8:7f:b2:10:23:88:3d:01:7a:ee:54:cd:d4:d6:04:
         c7:10:b5:8e:8e:16:f0:e3:95:f9:3c:f0:5a:17:0c:24:76:d4:
         d1:6e:ce:7f:49:b4:ca:31:01:71:f7:b8:07:00:16:35:d6:4a:
         a8:39:5a:3b:b6:cb:c8:1c:73:4a:d0:1a:88:ac:57:34:e1:5e:
         67:00:a0:df:03:82:f5:fa:d9:b1:a6:7a:ad:d2:e1:f6:4d:fd:
         27:3e:b0:bb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTAxOEIxMTAvBgNVBAUTKDE1MzcxRUVBMkFBMkVBN0RBQ0QwRDc1NkJEMjk4NTky
MDFFNTREMjUwHhcNMjUwNTA0MjEzMjI3WhcNMjUwNTExMjEzMjI3WjAYMRYwFAYD
VQQDEw02ODE3ZGNlYi1hYTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApC9jBODa8bgre2A3UzVZrhc79FIx9HTA38nqtmzCskNhoihYJBFW/NRJ1asR
sARbYm+s5AuNz05RBrc6RHls4Yz0vwf/yO0Zp1ul6ZnuDy+3sBcGPVPzOW+aZJca
yjU44IETLoDebhVmoKA2xOkDQQK2xRfA19mhKIj9CHAVgqr3tzhR006z8A1YJVOg
idd0y1wQ2rpIfhGJeDNfL6Awt3FkL4ZmHJcgmxu7iqfdtsl2GBgGXuYNzXUY1A/1
LLhtM1yy6JsfTkZmUwRBP+/3+XKoSy6Y8lAzFcwgekR/S2KUJW6gQ4Xlaj8yWUem
YZEY12mq1+o3hsqJAVbad6rYAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGldGYHM
vx18Z4Kz6A1h6LjRbW0iMB8GA1UdIwQYMBaAFBU3Huoqoup9rNDXVr0phZIB5U0l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDE4Qi8zQTA2MUE1QTM1
NDIxMUVCQTUzRkZCNDhDNEY5QUUwMi9GVGNlNmlxaTZuMnMwTmRXdlNtRmtnSGxU
U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZUY2U2aXFpNm4yczBOZFd2U21Ga2dIbFRTVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDE4Qi8zQTA2MUE1QTM1NDIxMUVCQTUzRkZCNDhDNEY5QUUwMi9GVGNlNmlxaTZu
MnMwTmRXdlNtRmtnSGxUU1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCVCsMoI4hB/pQr6wgvIVBoFw/CnfnAR8hDyK3S+l+2tZgutqevmm62
/FzbO69TOfxIxVEDsMbsuH6Xx/CxOkXXecSy6UnYNTnDnxgZXLuR8GL0fFFx5u3b
pmeBG8jF3ZZYNWsD8u1XOqRyqZcz3evKlnnek1Xl77rc+073J67ae6xSE3Q+IYcA
D5bJljFEAl9oxIJ+jwyiNlLPyWKZqMMDRYP2TzzIf7IQI4g9AXruVM3U1gTHELWO
jhbw45X5PPBaFwwkdtTRbs5/SbTKMQFx97gHABY11kqoOVo7tsvIHHNK0BqIrFc0
4V5nAKDfA4L1+tmxpnqt0uH2Tf0nPrC7
-----END CERTIFICATE-----
Generated at Mon May 5 03:04:18 2025 by rpki-client