Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.mft
File:                     FOUWOGcQb85FUq7s-x8gJmHm310.mft (raw, json)
Hash identifier:          60/fzXtXgZPWf/IgJj7OU1NrU3JW3tMeNvqKB5Xz8lo=
Subject key identifier:   CA:8E:87:17:2E:D0:3A:E4:A2:93:2E:9F:65:9C:05:27:31:92:E3:55
Authority key identifier: 14:E5:16:38:67:10:6F:CE:45:52:AE:EC:FB:1F:20:26:61:E6:DF:5D
Certificate issuer:       /CN=A916F9F6/serialNumber=14E5163867106FCE4552AEECFB1F202661E6DF5D
Certificate serial:       0680
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOUWOGcQb85FUq7s-x8gJmHm310.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.mft
Manifest number:          0673
Signing time:             Sun 04 May 2025 22:00:39 +0000
Manifest this update:     Sun 04 May 2025 22:00:39 +0000
Manifest next update:     Sun 11 May 2025 22:00:39 +0000
Files and hashes:         1: FOUWOGcQb85FUq7s-x8gJmHm310.crl (hash: LYZYDdGaSu2huUcRrqGPtWO3i7+SJA7yIMx3JNUh2Tc=)
                          2: 81D7961ADD9211EDA5A21671C4F9AE02.roa (hash: gNRYTYMwj494RNxbNtDWuzvBMRPNNtKBT2cX5Pzvaas=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.crl
                          rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOUWOGcQb85FUq7s-x8gJmHm310.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 May 2025 22:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1664 (0x680)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916F9F6, serialNumber=14E5163867106FCE4552AEECFB1F202661E6DF5D
        Validity
            Not Before: May  4 22:00:39 2025 GMT
            Not After : May 11 22:00:39 2025 GMT
        Subject: CN=6817e387-9b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:78:7f:02:cf:29:47:8e:2f:cf:e8:ad:b8:4f:
                    54:60:7a:0c:a0:28:94:ec:8e:d6:d8:26:42:77:6f:
                    ef:9c:eb:9e:b8:92:42:c4:26:60:bb:f1:a5:29:e8:
                    2d:38:ae:fb:4e:4a:e3:fe:0e:43:8a:b9:a6:97:96:
                    e8:07:06:9d:93:24:32:0b:71:85:0f:4f:8b:3d:f0:
                    5a:cd:9c:f0:38:06:5a:41:56:96:9d:36:73:1d:bd:
                    9a:46:78:ec:de:23:ec:19:6c:f2:56:23:24:c3:30:
                    6b:69:ac:41:0b:33:ff:f6:28:37:67:f4:41:e7:1f:
                    bb:32:8b:a7:99:27:77:13:d8:60:68:9c:2e:64:fa:
                    be:13:d4:00:84:27:3c:e2:b8:92:cc:7b:74:03:0b:
                    50:0c:b6:6f:36:aa:89:5a:c5:ab:38:d9:8c:18:69:
                    79:f3:a7:ea:ed:f3:e0:d0:c5:a2:f2:32:1c:e4:b5:
                    cf:7c:6e:0b:f6:5e:1f:3f:d1:e8:b9:93:ee:f4:b4:
                    14:90:fe:54:27:6f:c9:2b:2f:e9:95:ec:6f:fc:e1:
                    9a:94:c9:83:ec:52:4e:73:b6:58:b8:f2:09:61:d5:
                    23:45:a9:bb:df:fa:e5:5f:d3:93:c0:a9:11:c7:e7:
                    f2:22:c1:d1:c6:cd:4b:54:ae:87:9d:94:02:bb:62:
                    4e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8E:87:17:2E:D0:3A:E4:A2:93:2E:9F:65:9C:05:27:31:92:E3:55
            X509v3 Authority Key Identifier:
                keyid:14:E5:16:38:67:10:6F:CE:45:52:AE:EC:FB:1F:20:26:61:E6:DF:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOUWOGcQb85FUq7s-x8gJmHm310.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:76:2c:63:1d:a8:2f:11:74:eb:61:0d:54:f7:0f:f9:c6:ed:
         ed:92:92:d3:ec:5a:a2:91:14:80:ea:ea:53:e8:2b:8f:96:4e:
         9b:85:11:b7:82:13:c8:95:61:b0:a3:3b:30:d4:dd:f8:42:0a:
         03:e2:9d:a1:80:e3:78:5e:2e:ba:58:e7:46:ab:e5:1a:2b:89:
         c1:38:e6:82:61:89:69:57:7e:c7:cb:0f:96:e3:b8:07:a9:f1:
         7d:f9:63:32:7d:4d:d4:a5:b7:ed:17:19:05:1c:2e:b1:3d:d7:
         7f:27:5e:d8:eb:11:d1:35:e1:0f:97:60:14:23:21:7e:4c:18:
         e3:5d:04:42:8b:cb:e6:9d:1f:d7:af:36:b0:63:8a:03:14:0f:
         ab:69:91:fc:01:3e:d8:19:d4:93:5f:ca:d9:53:ab:75:6e:91:
         6d:1c:b5:a6:0f:e0:17:41:41:3a:a8:1e:4f:fb:8a:62:96:ed:
         96:6a:d4:3a:bd:88:53:8b:64:16:a1:6c:bf:ca:3c:39:03:3c:
         ee:60:2e:85:bc:b5:ab:1a:cc:4c:41:bb:48:c7:4a:4c:81:ed:
         8f:bc:fb:53:39:79:a0:90:fa:92:9d:7e:32:c0:09:41:db:b4:
         e6:42:b9:36:a3:0b:88:1e:de:ac:b7:6e:76:c7:49:3b:a6:ad:
         08:0a:e4:1d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkY5RjYxMTAvBgNVBAUTKDE0RTUxNjM4NjcxMDZGQ0U0NTUyQUVFQ0ZCMUYyMDI2
NjFFNkRGNUQwHhcNMjUwNTA0MjIwMDM5WhcNMjUwNTExMjIwMDM5WjAYMRYwFAYD
VQQDEw02ODE3ZTM4Ny05Yjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuHh/As8pR44vz+ituE9UYHoMoCiU7I7W2CZCd2/vnOueuJJCxCZgu/GlKegt
OK77Tkrj/g5Dirmml5boBwadkyQyC3GFD0+LPfBazZzwOAZaQVaWnTZzHb2aRnjs
3iPsGWzyViMkwzBraaxBCzP/9ig3Z/RB5x+7MounmSd3E9hgaJwuZPq+E9QAhCc8
4riSzHt0AwtQDLZvNqqJWsWrONmMGGl586fq7fPg0MWi8jIc5LXPfG4L9l4fP9Ho
uZPu9LQUkP5UJ2/JKy/plexv/OGalMmD7FJOc7ZYuPIJYdUjRam73/rlX9OTwKkR
x+fyIsHRxs1LVK6HnZQCu2JOMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqOhxcu
0DrkopMun2WcBScxkuNVMB8GA1UdIwQYMBaAFBTlFjhnEG/ORVKu7PsfICZh5t9d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjlGNi9GNjU1RjdGNjdB
NjcxMUVCQkNGNzZDNkZDNEY5QUUwMi9GT1VXT0djUWI4NUZVcTdzLXg4Z0ptSG0z
MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZPVVdPR2NRYjg1RlVxN3MteDhnSm1IbTMxMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RjlGNi9GNjU1RjdGNjdBNjcxMUVCQkNGNzZDNkZDNEY5QUUwMi9GT1VXT0djUWI4
NUZVcTdzLXg4Z0ptSG0zMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCcdixjHagvEXTrYQ1U9w/5xu3tkpLT7FqikRSA6upT6CuPlk6bhRG3
ghPIlWGwozsw1N34QgoD4p2hgON4Xi66WOdGq+UaK4nBOOaCYYlpV37Hyw+W47gH
qfF9+WMyfU3UpbftFxkFHC6xPdd/J17Y6xHRNeEPl2AUIyF+TBjjXQRCi8vmnR/X
rzawY4oDFA+raZH8AT7YGdSTX8rZU6t1bpFtHLWmD+AXQUE6qB5P+4pilu2WatQ6
vYhTi2QWoWy/yjw5AzzuYC6FvLWrGsxMQbtIx0pMge2PvPtTOXmgkPqSnX4ywAlB
27TmQrk2owuIHt6st252x0k7pq0ICuQd
-----END CERTIFICATE-----
Generated at Mon May 5 02:57:26 2025 by rpki-client