Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
File:                     FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft (raw, json)
Hash identifier:          rdrvOu2s7pi0VvZrYfLlCUR0DV+3DVLeyebc7JmMgi8=
Subject key identifier:   81:2C:E7:DD:BA:93:94:09:1F:7F:A4:C4:09:DD:18:94:F8:1F:DE:27
Authority key identifier: 14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27
Certificate issuer:       /CN=A91193C1/serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
Certificate serial:       051F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
Manifest number:          0513
Signing time:             Mon 12 May 2025 23:25:39 +0000
Manifest this update:     Mon 12 May 2025 23:25:38 +0000
Manifest next update:     Mon 19 May 2025 23:25:38 +0000
Files and hashes:         1: FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl (hash: IJKEgMC6NjTXwQa9QPrv0uFY9XNL9rmnhk7VGfMkfkU=)
                          2: AC58009E782A11EFA7DD8F7CC4F9AE02.roa (hash: QVvq8n67O4BwvE2m1nf05uYuzsM/8nQ/hW6OWK20q7A=)
                          3: C8900982059611ECB2896C55C4F9AE02.roa (hash: hg4ELKymdwHyn2QAAvtW6T2bJJMNtTNjpAlYq36iGfA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl
                          rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 23:25:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1311 (0x51f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91193C1, serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
        Validity
            Not Before: May 12 23:25:38 2025 GMT
            Not After : May 19 23:25:38 2025 GMT
        Subject: CN=68228373-d65f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c0:50:76:52:40:3d:c6:4f:ad:73:3b:f3:15:
                    63:ae:b4:db:6b:15:bd:2d:a0:77:b3:04:96:1b:1b:
                    14:40:03:41:2b:7e:55:0c:29:f1:9e:a4:28:38:09:
                    72:86:ce:bb:01:35:1a:1d:e6:3a:3b:c6:d1:85:2d:
                    e8:46:f1:fc:41:a9:58:34:9c:1d:4e:e2:01:f1:d6:
                    4b:bf:6a:21:d5:55:98:43:2e:8d:1f:01:0f:5f:98:
                    f5:6a:de:35:80:6f:08:9b:df:0e:08:4d:c0:60:b3:
                    66:6e:83:f8:c7:6c:8f:18:9d:8a:b0:e1:ff:d3:25:
                    e9:b0:0a:79:ba:e2:53:00:50:9b:27:85:c1:1f:40:
                    54:37:70:17:07:02:90:cd:12:aa:aa:8b:86:11:6a:
                    6e:3d:83:64:59:c6:9f:e8:5b:ea:1a:1c:b8:46:0f:
                    a3:4b:3f:3d:27:b5:3e:3e:c8:89:90:18:3d:b0:64:
                    06:4e:08:b2:87:b2:ce:75:6d:aa:33:9d:40:71:a0:
                    99:79:41:22:22:94:15:0b:13:83:da:eb:a3:0f:36:
                    45:7b:d1:55:bd:00:64:35:45:3b:8a:80:c2:df:60:
                    43:c8:bc:eb:d1:ac:04:73:f4:4c:1f:e8:91:a7:51:
                    37:92:8b:ae:a8:04:8d:5e:38:13:bc:ba:3a:23:a4:
                    9a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2C:E7:DD:BA:93:94:09:1F:7F:A4:C4:09:DD:18:94:F8:1F:DE:27
            X509v3 Authority Key Identifier:
                keyid:14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:5e:8c:8f:82:81:f4:53:97:e3:1a:a5:89:94:41:2d:db:9f:
         85:2e:1d:f2:e2:31:62:35:6b:02:24:4c:30:2e:0f:de:ca:8d:
         dc:02:61:b4:04:a9:36:04:ac:2c:d1:d2:45:20:01:a2:d1:e8:
         fc:93:0c:15:b6:d6:ed:3d:56:1d:31:46:ba:37:5a:41:4a:99:
         26:b8:e3:c1:06:cc:d7:44:f3:00:04:4a:cd:d0:c3:ab:2a:e3:
         c1:e0:87:d9:c6:63:c6:c0:c3:ad:fb:1d:fb:5f:c6:d6:e9:53:
         18:03:01:95:61:72:97:02:87:c0:8f:c8:13:65:f6:fe:eb:46:
         4a:a6:f5:7e:99:6a:9e:9a:36:b5:4d:b1:db:73:f9:51:b5:1e:
         4a:51:67:c2:df:72:0b:a2:f5:92:b9:6f:ac:88:0d:0b:d2:0b:
         6c:02:0c:62:56:e4:26:c6:40:a3:80:6d:7e:82:8d:c3:72:bd:
         22:85:cd:94:be:ff:9a:f8:2e:4b:c1:01:8f:b1:b9:7f:2b:94:
         1b:60:d8:25:62:f4:64:31:6c:0d:f0:2c:d6:11:24:46:e0:8c:
         66:df:16:27:79:88:bf:73:46:f6:32:8b:6e:f9:b2:da:9f:a7:
         e2:09:5f:95:73:e1:59:09:30:46:2d:8c:63:43:4e:9e:6c:49:
         b9:2c:02:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 14:17:38 2025 by rpki-client