Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
File:                     FZbEu-cy2oXLg-incIc-o0E3AaU.mft (raw, json)
Hash identifier:          lCrJ1g1ljcOhSiKG/1pSgidEosugOKfZc/0IMb/NETI=
Subject key identifier:   FC:F4:F1:F8:FB:29:1F:03:51:45:36:E0:BF:57:E5:8E:88:E1:84:C1
Authority key identifier: 15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5
Certificate issuer:       /CN=A91771E3/serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
Certificate serial:       1352
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
Manifest number:          1329
Signing time:             Wed 14 May 2025 17:07:17 +0000
Manifest this update:     Wed 14 May 2025 17:07:17 +0000
Manifest next update:     Wed 21 May 2025 17:07:17 +0000
Files and hashes:         1: FZbEu-cy2oXLg-incIc-o0E3AaU.crl (hash: JkeNVkgpF4tptBPBTlEpZEN2JhqjccmQWpHeFsyJT7c=)
                          2: 56094384320611EA84C94231C4F9AE02.roa (hash: mZoT1sj2WR9PydzJ0T/LJHzRsHoob8BeC9+MkrsPnys=)
                          3: 443241A0321B11EA83044473C4F9AE02.roa (hash: n0sRanfJ+3KhBJUHh6jH9cwbJaaTZCbfJ+87aODuzgM=)
                          4: 1FD07ED231FB11EAA335E10FC4F9AE02.roa (hash: y17aQP9C+LDn4Yph2n6mf2nnVwvpkbeV6pXqgmt1qVQ=)
                          5: 4B18BBA8A9F811EEB85DBD24C4F9AE02.roa (hash: sd3UhNYbHggo+XcciVWTFZxv/tGVhGFf2hY/GpsuhSs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl
                          rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 17:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4946 (0x1352)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91771E3, serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
        Validity
            Not Before: May 14 17:07:17 2025 GMT
            Not After : May 21 17:07:17 2025 GMT
        Subject: CN=6824cdc5-296f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3a:14:7f:d1:b2:dc:ad:f7:7c:42:da:67:af:
                    cb:8f:89:16:68:42:fc:ac:f3:ac:7e:52:82:cf:48:
                    b8:20:61:64:6b:c4:40:8e:fc:ac:05:38:68:84:41:
                    41:ad:d9:f2:46:c5:73:f5:fe:76:ee:e0:4e:18:bc:
                    0f:74:b9:13:53:12:3e:a6:8c:56:a1:8b:f6:ee:47:
                    b3:b2:59:12:93:e0:75:48:67:18:7f:77:8c:b3:de:
                    21:b3:ba:39:3d:b9:82:0d:4e:54:55:55:53:75:52:
                    02:f0:6d:b0:46:5b:35:93:6e:3a:d6:37:a4:ba:f9:
                    12:17:9d:78:75:79:aa:f5:4b:c0:bd:7f:2f:2c:9d:
                    4d:f8:26:b4:7a:c8:ad:64:ff:bb:42:e0:33:34:77:
                    92:f6:8e:3d:09:7d:f7:e5:78:7f:64:a9:88:66:77:
                    50:d5:c9:43:b8:8d:79:5a:0b:cf:f2:35:45:03:a1:
                    8a:ff:d2:c3:ca:07:bc:7d:f2:f3:58:dc:9d:de:73:
                    57:3c:85:3a:e3:95:6e:20:12:ab:8c:a6:06:0b:fa:
                    e6:40:f7:1b:13:e0:2a:22:76:70:ce:88:b3:e6:aa:
                    a2:06:ba:86:29:6d:66:94:22:54:26:56:d9:1d:5a:
                    23:3f:a4:82:59:dd:54:47:3f:ba:92:b9:24:d1:bb:
                    24:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F4:F1:F8:FB:29:1F:03:51:45:36:E0:BF:57:E5:8E:88:E1:84:C1
            X509v3 Authority Key Identifier:
                keyid:15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:a2:b0:56:67:8e:37:7a:b3:30:4b:3d:9a:18:10:0d:2b:55:
         7f:59:06:81:1a:a9:31:dc:12:c9:7b:e5:35:e5:68:38:52:49:
         ea:00:2b:0b:24:ba:f5:96:da:7f:d2:e8:d3:57:68:49:09:6a:
         f4:a7:cc:28:32:d2:23:99:f0:43:d1:85:57:53:1f:f8:20:cd:
         54:53:74:d4:3d:99:73:41:ad:38:ba:7b:e1:78:a7:d3:72:fb:
         8c:df:88:2c:97:4f:a1:14:58:50:a8:67:94:32:b1:ab:c0:64:
         e6:b1:c2:3e:3c:6a:51:ad:7a:06:fd:fc:25:f5:36:8b:11:d3:
         a0:bd:40:b1:c3:7b:a8:0f:d2:b3:79:0f:28:75:dd:4e:b7:a3:
         e7:8a:46:80:cc:d3:11:ae:9e:01:51:56:bb:94:fd:c7:ee:91:
         8d:e5:00:1e:0f:4e:64:51:71:ab:64:de:79:7b:65:38:1c:9b:
         57:8f:85:90:ea:94:8e:7d:54:70:a0:b8:9f:24:5b:67:8e:e9:
         9e:c8:f3:03:fd:79:4a:a7:12:11:0e:75:4d:1d:bf:63:02:4c:
         d7:9d:d8:38:d8:71:d9:87:89:f1:01:a6:01:96:d2:40:92:c6:
         0d:be:52:52:4b:c5:7e:eb:6c:a1:1a:d3:c3:b2:5e:c0:b7:a3:
         8d:93:c4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 03:13:58 2025 by rpki-client