Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft
File:                     FDeI0jX9adsvJbd3Il96t2naNQs.mft (raw, json)
Hash identifier:          pf3Wa4UgmTWMdK4gBeomymZqv7YqUjjSMGvb7pdYbYU=
Subject key identifier:   05:BC:DB:20:22:69:79:C9:42:8D:20:66:C5:3F:8D:F7:93:C5:25:59
Authority key identifier: 14:37:88:D2:35:FD:69:DB:2F:25:B7:77:22:5F:7A:B7:69:DA:35:0B
Certificate issuer:       /CN=A91C5323/serialNumber=143788D235FD69DB2F25B777225F7AB769DA350B
Certificate serial:       056A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft
Manifest number:          0562
Signing time:             Mon 12 May 2025 23:11:09 +0000
Manifest this update:     Mon 12 May 2025 23:11:09 +0000
Manifest next update:     Mon 19 May 2025 23:11:09 +0000
Files and hashes:         1: FDeI0jX9adsvJbd3Il96t2naNQs.crl (hash: kWX22DS587+CfWUDH1AJnwenaNyQAPXAQkWHrZ4xrU8=)
                          2: 2A52AB54138811F0BA2C056DC4F9AE02.roa (hash: 0AvanG6lwhnjCogGu+WtHXRuTCMKYEBdG6vznbvbdAY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.crl
                          rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 23:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1386 (0x56a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5323, serialNumber=143788D235FD69DB2F25B777225F7AB769DA350B
        Validity
            Not Before: May 12 23:11:09 2025 GMT
            Not After : May 19 23:11:09 2025 GMT
        Subject: CN=6822800d-25fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fb:d6:98:81:2e:52:4b:14:b4:09:20:f9:d9:
                    b8:fe:f3:5b:55:6a:37:e0:37:6f:b4:b1:c1:89:e1:
                    e9:a9:fe:6d:a6:a2:81:85:dd:07:2b:6a:13:7d:eb:
                    d6:d5:9f:09:ac:ca:d1:0f:a2:4d:c4:0b:07:57:6f:
                    8a:36:26:1a:6a:69:fc:53:90:62:05:a1:4f:61:f4:
                    0e:3b:3f:d2:c5:a3:4a:43:27:01:bf:bd:e0:2a:5b:
                    a4:9b:1c:ba:0e:e9:e6:31:0e:38:b0:7c:74:1c:93:
                    cd:86:0a:33:b7:f6:96:79:be:c3:ff:e9:9e:76:32:
                    b8:eb:43:d6:8b:81:6b:ad:5c:cb:49:68:4a:3b:9c:
                    37:b8:67:e0:f0:20:9a:e2:0e:99:f8:42:00:f0:2b:
                    0e:bb:95:25:3f:4a:3f:11:3b:6d:e5:96:ae:48:96:
                    93:dd:91:a2:9b:80:51:a2:ca:19:3f:ac:6b:4f:ad:
                    ee:54:3d:80:d4:98:9e:98:d1:6f:77:c9:0f:6b:0f:
                    9f:7f:97:25:d8:d1:18:03:e9:cb:24:dc:46:a4:37:
                    89:d0:79:e4:46:58:5a:5a:09:03:9b:98:f6:47:32:
                    d2:64:c8:18:68:b4:f6:eb:64:f3:97:fa:d6:5f:95:
                    32:74:f7:b5:45:a0:37:83:80:bb:43:36:b7:71:fd:
                    3c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BC:DB:20:22:69:79:C9:42:8D:20:66:C5:3F:8D:F7:93:C5:25:59
            X509v3 Authority Key Identifier:
                keyid:14:37:88:D2:35:FD:69:DB:2F:25:B7:77:22:5F:7A:B7:69:DA:35:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:b3:34:55:3c:2e:9a:20:ad:5a:00:db:8e:7a:b2:54:f9:79:
         02:2a:52:3c:7d:37:d4:2e:02:5c:5c:d5:14:7c:04:6d:9b:a0:
         a4:01:b7:b9:d7:e6:c8:f4:df:c6:97:29:d2:a2:1a:ab:87:a3:
         8b:98:ec:19:f3:38:46:a4:42:7d:fd:89:87:94:2b:82:6d:33:
         d0:ff:f9:09:fe:24:fc:41:57:06:96:fd:25:6e:3a:a9:5b:0f:
         f7:23:2d:ed:a4:f2:8f:ab:15:bf:52:25:5f:2c:62:dc:fb:f8:
         42:cb:dd:5b:0e:4f:e3:5f:a3:14:48:a5:66:b5:3e:ee:bf:8e:
         76:e7:21:80:9c:57:67:c1:02:7a:7d:d0:9a:0d:55:0e:c2:40:
         ae:68:2e:a4:2c:00:81:d7:d6:2e:12:c2:84:ac:95:a8:98:eb:
         d1:0a:59:cd:b2:99:e8:89:86:32:11:72:6c:ff:2d:63:db:30:
         49:1f:1a:e8:46:aa:c9:7e:98:96:f3:d6:d7:c1:0d:b3:62:3d:
         2d:6d:84:11:12:21:21:ac:f3:05:d3:45:7d:1a:d8:96:72:4b:
         41:4e:9f:9d:9e:08:e2:57:4d:3c:a6:a9:31:99:bc:ca:b7:b1:
         e5:0c:f6:6e:b5:b7:72:e2:dc:f9:c0:c3:36:e8:13:03:b0:5e:
         68:83:5f:3d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzUzMjMxMTAvBgNVBAUTKDE0Mzc4OEQyMzVGRDY5REIyRjI1Qjc3NzIyNUY3QUI3
NjlEQTM1MEIwHhcNMjUwNTEyMjMxMTA5WhcNMjUwNTE5MjMxMTA5WjAYMRYwFAYD
VQQDEw02ODIyODAwZC0yNWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApfvWmIEuUksUtAkg+dm4/vNbVWo34DdvtLHBieHpqf5tpqKBhd0HK2oTfevW
1Z8JrMrRD6JNxAsHV2+KNiYaamn8U5BiBaFPYfQOOz/SxaNKQycBv73gKlukmxy6
DunmMQ44sHx0HJPNhgozt/aWeb7D/+medjK460PWi4FrrVzLSWhKO5w3uGfg8CCa
4g6Z+EIA8CsOu5UlP0o/ETtt5ZauSJaT3ZGim4BRosoZP6xrT63uVD2A1JiemNFv
d8kPaw+ff5cl2NEYA+nLJNxGpDeJ0HnkRlhaWgkDm5j2RzLSZMgYaLT262Tzl/rW
X5UydPe1RaA3g4C7Qza3cf08iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAW82yAi
aXnJQo0gZsU/jfeTxSVZMB8GA1UdIwQYMBaAFBQ3iNI1/WnbLyW3dyJferdp2jUL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTMyMy9ERjY2REUyNEU1
NjExMUVCODRCRkU4MjBDNEY5QUUwMi9GRGVJMGpYOWFkc3ZKYmQzSWw5NnQybmFO
UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZEZUkwalg5YWRzdkpiZDNJbDk2dDJuYU5Rcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NTMyMy9ERjY2REUyNEU1NjExMUVCODRCRkU4MjBDNEY5QUUwMi9GRGVJMGpYOWFk
c3ZKYmQzSWw5NnQybmFOUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAOszRVPC6aIK1aANuOerJU+XkCKlI8fTfULgJcXNUUfARtm6CkAbe5
1+bI9N/GlynSohqrh6OLmOwZ8zhGpEJ9/YmHlCuCbTPQ//kJ/iT8QVcGlv0lbjqp
Ww/3Iy3tpPKPqxW/UiVfLGLc+/hCy91bDk/jX6MUSKVmtT7uv4525yGAnFdnwQJ6
fdCaDVUOwkCuaC6kLACB19YuEsKErJWomOvRClnNspnoiYYyEXJs/y1j2zBJHxro
RqrJfpiW89bXwQ2zYj0tbYQREiEhrPMF00V9GtiWcktBTp+dngjiV008pqkxmbzK
t7HlDPZutbdy4tz5wMM26BMDsF5og189
-----END CERTIFICATE-----
Generated at Wed May 14 04:59:40 2025 by rpki-client