Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
File:                     FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft (raw, json)
Hash identifier:          TfuOxfgU0xl9RdGLMvRAVgoYB5Vq7l+6CmSMJp6/6UY=
Subject key identifier:   94:40:18:00:B1:46:96:D2:6D:EB:E4:79:9C:7D:A9:A0:52:31:E3:22
Authority key identifier: 16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09
Certificate issuer:       /CN=A9158F08/serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09
Certificate serial:       0C31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
Manifest number:          1546
Signing time:             Mon 12 May 2025 18:23:52 +0000
Manifest this update:     Mon 12 May 2025 18:23:51 +0000
Manifest next update:     Mon 19 May 2025 18:23:51 +0000
Files and hashes:         1: FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl (hash: XdFDDeoq4E/Kw9sijykH4Yq4SzEo+X38QX92kFVYELk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl
                          rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 18:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3121 (0xc31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158F08, serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09
        Validity
            Not Before: May 12 18:23:51 2025 GMT
            Not After : May 19 18:23:51 2025 GMT
        Subject: CN=68223cb8-0a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:7f:22:c3:9d:f8:34:44:6a:d6:f8:f4:7d:bc:
                    75:13:f6:4b:0f:d2:e3:31:b5:92:94:4e:3a:46:61:
                    c2:66:c7:7c:28:79:b7:71:04:e6:c3:e1:a7:3d:c8:
                    77:dd:c7:48:ce:c0:02:e5:88:33:7f:9f:1d:46:ee:
                    cd:1d:a8:f4:bd:3b:f1:2f:99:88:b8:ce:c2:03:1c:
                    32:5f:b0:bc:9c:6b:3c:1d:b7:f0:57:0e:7d:89:a8:
                    71:0a:9d:57:1a:a3:7b:de:ca:08:cb:75:6b:8a:e5:
                    0b:3f:6f:04:9a:2e:dd:7c:a1:52:da:10:7a:2f:04:
                    b6:2d:1f:01:b1:1b:73:10:21:7d:99:16:57:85:c9:
                    fd:6e:1e:fd:0f:76:f1:5f:f6:85:e2:8b:85:4a:d0:
                    dd:a5:5e:96:79:4e:96:e3:c6:7c:4a:e6:b8:e3:3c:
                    27:80:b0:f5:ee:e0:73:56:a6:ed:31:ae:43:9a:e6:
                    11:1a:8b:8d:6f:da:d1:64:d6:11:4b:b5:a2:7c:57:
                    9e:0e:aa:57:e7:09:c2:b7:75:33:0f:bb:26:a8:9b:
                    a4:de:1b:ba:2d:c3:7d:7e:9f:cf:32:38:3e:49:de:
                    20:16:e5:ee:6d:72:7f:66:69:c1:2e:79:d2:d3:f8:
                    73:c7:70:1f:ba:7d:5c:79:a1:4f:cb:e3:66:38:02:
                    6a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:40:18:00:B1:46:96:D2:6D:EB:E4:79:9C:7D:A9:A0:52:31:E3:22
            X509v3 Authority Key Identifier:
                keyid:16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ba:62:43:59:ad:b8:51:6c:80:25:c6:c8:e9:38:d8:0c:d7:
         e1:f4:55:ad:f2:f7:e5:fc:12:02:f6:86:06:24:d9:7d:cc:6e:
         3c:93:ea:2a:e2:b9:25:8f:0c:b5:60:20:28:c4:d1:da:f2:74:
         99:d6:45:8b:87:c3:2d:39:c8:8a:b0:81:bc:10:1a:0d:bf:6e:
         4c:93:89:32:45:47:21:21:d7:96:66:64:38:12:49:a7:9f:1b:
         5b:bc:76:39:e0:d9:14:ae:97:6d:d5:2d:00:8b:5f:e0:1e:2a:
         b5:2a:4c:c5:cb:0b:02:05:c6:4d:4b:a9:27:e1:89:92:a6:0e:
         da:48:8b:4e:8f:6a:0d:78:63:b5:94:35:bf:75:18:f1:0b:bd:
         92:62:4c:ca:93:3f:94:6d:ff:26:64:6e:63:6f:17:f4:5d:b3:
         82:4b:07:cf:99:b4:92:1c:a1:ac:64:1d:d7:32:9f:af:df:a3:
         fb:fd:cf:46:cd:63:8b:64:ef:83:9e:99:7d:5f:6f:8e:dc:b3:
         f6:e7:a4:e4:c7:68:be:0f:02:bb:64:40:7d:cd:7b:15:6d:d7:
         6c:3b:f5:5a:b8:51:36:ee:8d:8f:ec:a3:24:21:54:37:33:91:
         20:0a:21:d8:00:bd:4c:cd:69:a9:3d:99:26:15:cb:10:45:7c:
         d3:c6:f9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:56:53 2025 by rpki-client