Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.mft
File:                     fuv673m_iD6_Bwd6m_QQ6jHv98o.mft (raw, json)
Hash identifier:          WGiIAnpG5je5Z6MkAflPz+G9MxzpLC2eO+L9A0l0i90=
Subject key identifier:   1E:DB:67:31:8E:E1:03:95:87:56:E3:31:83:6E:EA:F9:32:1D:75:94
Authority key identifier: 7E:EB:FA:EF:79:BF:88:3E:BF:07:07:7A:9B:F4:10:EA:31:EF:F7:CA
Certificate issuer:       /CN=A91BA0DE/serialNumber=7EEBFAEF79BF883EBF07077A9BF410EA31EFF7CA
Certificate serial:       0143
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuv673m_iD6_Bwd6m_QQ6jHv98o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.mft
Manifest number:          013F
Signing time:             Sun 11 May 2025 03:15:26 +0000
Manifest this update:     Sun 11 May 2025 03:15:26 +0000
Manifest next update:     Sun 18 May 2025 03:15:26 +0000
Files and hashes:         1: fuv673m_iD6_Bwd6m_QQ6jHv98o.crl (hash: IhA014/EOMwiTHX4WC3PskOACF0UoOWKwxM3fnNkrQU=)
                          2: 049C5BF84ACB11EE9CB50538C4F9AE02.roa (hash: CvXEG66DL+FfRTippw4jA32jFcvBiI/nHgMxSZ95sC8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.crl
                          rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuv673m_iD6_Bwd6m_QQ6jHv98o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA0DE, serialNumber=7EEBFAEF79BF883EBF07077A9BF410EA31EFF7CA
        Validity
            Not Before: May 11 03:15:26 2025 GMT
            Not After : May 18 03:15:26 2025 GMT
        Subject: CN=6820164e-af21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4f:2e:8f:7d:99:ca:72:c6:a3:b7:90:51:66:
                    12:d2:80:04:e1:2e:92:e9:0c:6e:85:15:d9:12:ae:
                    a6:13:55:ea:05:f5:46:db:f9:1f:ab:a7:1b:59:fc:
                    0a:99:ef:aa:b6:ce:25:c3:14:a7:0a:3b:d5:18:08:
                    ea:80:66:a6:79:b0:df:b8:f4:9d:14:5a:95:03:97:
                    67:79:4f:21:5f:13:82:63:55:58:2e:ed:e7:36:2f:
                    72:ff:a2:05:b0:e4:e5:13:e6:b4:15:9f:cb:c3:21:
                    6e:21:01:32:ee:40:90:9e:1a:af:2e:3f:0a:4d:0a:
                    c1:d3:f7:79:aa:e1:48:80:4b:f4:e3:18:c2:6b:e3:
                    ab:05:23:7c:c1:8d:34:b5:96:58:db:80:37:8c:5d:
                    17:a4:71:7b:4d:5c:58:8b:c7:45:cd:d2:e7:df:f3:
                    92:f8:bc:e1:84:d9:75:dd:a3:44:13:6e:56:de:69:
                    68:58:81:40:17:c5:12:a0:7d:a8:c1:89:f3:8d:20:
                    23:a5:1a:57:19:a7:aa:6e:e5:ae:da:0b:16:76:05:
                    ea:23:8b:6f:d5:02:f0:8f:82:3b:3f:bc:72:12:33:
                    19:f6:7c:bd:7b:e5:d8:72:6f:6d:de:01:b1:3d:da:
                    0c:4d:36:04:bb:03:92:f8:41:40:52:92:35:27:a4:
                    fe:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:DB:67:31:8E:E1:03:95:87:56:E3:31:83:6E:EA:F9:32:1D:75:94
            X509v3 Authority Key Identifier:
                keyid:7E:EB:FA:EF:79:BF:88:3E:BF:07:07:7A:9B:F4:10:EA:31:EF:F7:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuv673m_iD6_Bwd6m_QQ6jHv98o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:8e:a1:da:bc:e3:8a:16:8a:b7:a6:8e:fe:88:c7:a8:ae:80:
         29:d6:f8:56:71:ab:a3:37:c5:1d:f2:56:48:53:49:41:02:f7:
         1e:99:1f:e8:84:d4:93:18:95:44:64:80:d0:32:67:f0:2c:6a:
         49:c5:72:c5:0a:6f:43:2d:6d:8b:ea:9a:2c:8c:05:56:37:5a:
         0a:95:c3:a7:38:a5:fc:c4:48:21:1e:d4:b1:00:92:0b:9d:02:
         c7:b6:4d:e5:bf:59:1d:b4:a2:e2:ed:e6:60:9b:11:2f:b0:8d:
         64:fd:aa:fd:e5:ba:93:ee:0c:aa:7c:83:cd:d2:c8:bc:28:bb:
         f4:5b:d8:7b:6b:4d:40:b8:ff:db:23:97:fb:a4:5f:d0:15:92:
         ac:33:64:e4:38:c6:84:d2:5b:53:04:b8:ba:ab:ff:a4:84:16:
         1c:7e:2a:48:d0:b4:98:34:14:73:e9:89:e5:2c:1c:6b:4a:85:
         ad:92:71:21:11:0f:f9:87:d3:a2:30:e2:ab:d4:f0:50:56:d5:
         a3:9c:28:2a:d1:d1:bf:e4:57:8e:f3:3d:65:0b:3f:98:b9:2a:
         e0:ea:f1:16:da:60:06:f3:0c:80:b6:da:7d:d5:3c:8b:b7:c4:
         a7:51:49:1c:be:da:43:f0:ee:8e:e2:8b:ab:5c:f4:b5:f3:86:
         2d:c5:05:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:51:34 2025 by rpki-client