Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft
File:                     VQiKMVvLUJi-72Zaqcvf0yogWCA.mft (raw, json)
Hash identifier:          X7wyk/XaH2PI1q78Vcnkrw8FFKvGLq4Y8qgfG6crDrE=
Subject key identifier:   89:F9:D4:BA:F6:BA:AF:48:BC:FA:4F:7E:3E:B4:9D:87:85:07:CB:B9
Authority key identifier: 55:08:8A:31:5B:CB:50:98:BE:EF:66:5A:A9:CB:DF:D3:2A:20:58:20
Certificate issuer:       /CN=A9119F89/serialNumber=55088A315BCB5098BEEF665AA9CBDFD32A205820
Certificate serial:       0683
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft
Manifest number:          0674
Signing time:             Sat 26 Apr 2025 22:03:31 +0000
Manifest this update:     Sat 26 Apr 2025 22:03:31 +0000
Manifest next update:     Sat 03 May 2025 22:03:31 +0000
Files and hashes:         1: VQiKMVvLUJi-72Zaqcvf0yogWCA.crl (hash: ngVJbDFIfNZqoz5K8SqzyP2oImrSFcVz9mWPuCTmO6c=)
                          2: 766689D21EB111F0ADA9B872C4F9AE02.roa (hash: jo+62bvnD8mjSHhUGwNwlfo2qu5IakOWUAY3Ax2OYvQ=)
                          3: E2C265C67BE311EB9D056E55C4F9AE02.roa (hash: LKmFIY/VL9TC2X1Z1fj1EzR3us51npHXwJLid536ToM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.crl
                          rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1667 (0x683)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119F89, serialNumber=55088A315BCB5098BEEF665AA9CBDFD32A205820
        Validity
            Not Before: Apr 26 22:03:31 2025 GMT
            Not After : May  3 22:03:31 2025 GMT
        Subject: CN=680d5833-c685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:84:5a:ce:92:47:90:6d:b0:56:88:f5:bc:0e:
                    b2:30:b9:ba:0c:04:92:4e:40:2b:93:ac:87:ff:57:
                    89:7a:a1:7a:03:fa:46:3f:ab:d2:64:8a:b5:a4:0a:
                    4b:00:b3:be:5f:be:f4:91:1c:d9:51:59:de:e0:d8:
                    c4:e2:66:b8:c5:7a:b4:ab:d6:b5:77:ee:54:e0:1e:
                    70:7c:db:6c:4d:37:24:8f:cb:a0:01:b3:0b:29:6e:
                    6b:eb:c2:06:d7:fb:29:02:a7:0a:bf:e2:c9:80:e9:
                    62:2e:79:32:b8:29:49:88:e5:0b:e8:3d:93:93:ef:
                    60:d8:ac:81:48:ea:fe:49:db:9e:f9:22:7d:29:c9:
                    4e:4f:f4:39:68:12:3e:34:0b:cd:80:b7:fc:ae:e4:
                    3e:0e:b5:44:f6:d6:99:cd:6b:1b:e3:06:1a:15:60:
                    c9:94:49:39:eb:b4:c3:e4:0a:7e:16:9c:54:09:06:
                    80:d4:70:7a:8e:92:76:a9:dd:75:2a:87:5b:d3:97:
                    f0:20:48:17:19:9f:ef:bb:4f:8d:0e:ea:0c:d9:9a:
                    be:ab:c3:cb:d1:49:e5:db:6c:ef:8d:79:08:05:9f:
                    49:f0:ca:cf:c3:ce:47:51:90:9d:93:15:0c:f4:85:
                    d0:77:52:54:6b:33:c3:1b:3a:1d:58:71:45:9d:40:
                    f9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F9:D4:BA:F6:BA:AF:48:BC:FA:4F:7E:3E:B4:9D:87:85:07:CB:B9
            X509v3 Authority Key Identifier:
                keyid:55:08:8A:31:5B:CB:50:98:BE:EF:66:5A:A9:CB:DF:D3:2A:20:58:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:fd:ac:91:09:57:b1:3e:27:9f:e9:05:82:bf:10:f4:44:10:
         71:ca:58:6f:b4:5d:a7:a5:84:c0:67:a4:a5:b2:37:dd:61:1e:
         6e:ab:67:49:e4:98:3f:7f:66:3e:eb:83:b4:4e:1b:90:f5:ee:
         de:ed:9c:b4:f3:b0:f9:c8:62:de:b5:4d:bc:6b:25:8d:c1:7f:
         9a:85:1f:ec:d9:c5:1a:6b:d2:85:36:5f:8b:8d:27:98:fa:87:
         1e:13:ae:cc:5a:50:d8:44:a2:d5:e0:9d:66:30:0f:d9:71:b2:
         98:f9:01:22:db:86:97:45:26:d7:41:19:13:dc:2d:c8:80:d7:
         a3:85:f9:68:b4:e9:40:4b:ef:7e:0c:71:3b:09:37:0d:a6:a9:
         d8:25:6e:01:7b:23:f9:d1:34:db:e4:9d:90:34:2b:79:27:38:
         96:45:ea:a7:4e:64:7e:a7:f9:14:79:16:40:4d:c6:3c:25:5f:
         28:d1:08:e1:17:b9:04:7a:14:16:1a:e0:09:11:11:c7:d1:7a:
         90:b7:73:4c:d2:27:f6:67:77:ad:ec:11:7d:f2:f4:de:de:43:
         7c:2d:c0:4d:b6:0b:e3:1c:5a:46:32:57:13:3c:70:44:d1:84:
         9c:18:5a:2d:d9:4d:02:3f:c8:ad:fd:39:85:06:77:22:32:db:
         2f:5f:dc:48
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTlGODkxMTAvBgNVBAUTKDU1MDg4QTMxNUJDQjUwOThCRUVGNjY1QUE5Q0JERkQz
MkEyMDU4MjAwHhcNMjUwNDI2MjIwMzMxWhcNMjUwNTAzMjIwMzMxWjAYMRYwFAYD
VQQDEw02ODBkNTgzMy1jNjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA04RazpJHkG2wVoj1vA6yMLm6DASSTkArk6yH/1eJeqF6A/pGP6vSZIq1pApL
ALO+X770kRzZUVne4NjE4ma4xXq0q9a1d+5U4B5wfNtsTTckj8ugAbMLKW5r68IG
1/spAqcKv+LJgOliLnkyuClJiOUL6D2Tk+9g2KyBSOr+Sdue+SJ9KclOT/Q5aBI+
NAvNgLf8ruQ+DrVE9taZzWsb4wYaFWDJlEk567TD5Ap+FpxUCQaA1HB6jpJ2qd11
Kodb05fwIEgXGZ/vu0+NDuoM2Zq+q8PL0Unl22zvjXkIBZ9J8MrPw85HUZCdkxUM
9IXQd1JUazPDGzodWHFFnUD5zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIn51Lr2
uq9IvPpPfj60nYeFB8u5MB8GA1UdIwQYMBaAFFUIijFby1CYvu9mWqnL39MqIFgg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUY4OS9EMzVBQTVBQTdC
RTExMUVCOEZGNUY3NTJDNEY5QUUwMi9WUWlLTVZ2TFVKaS03MlphcWN2ZjB5b2dX
Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZRaUtNVnZMVUppLTcyWmFxY3ZmMHlvZ1dDQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OUY4OS9EMzVBQTVBQTdCRTExMUVCOEZGNUY3NTJDNEY5QUUwMi9WUWlLTVZ2TFVK
aS03MlphcWN2ZjB5b2dXQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA6/ayRCVexPief6QWCvxD0RBBxylhvtF2npYTAZ6SlsjfdYR5uq2dJ
5Jg/f2Y+64O0ThuQ9e7e7Zy087D5yGLetU28ayWNwX+ahR/s2cUaa9KFNl+LjSeY
+oceE67MWlDYRKLV4J1mMA/ZcbKY+QEi24aXRSbXQRkT3C3IgNejhflotOlAS+9+
DHE7CTcNpqnYJW4BeyP50TTb5J2QNCt5JziWReqnTmR+p/kUeRZATcY8JV8o0Qjh
F7kEehQWGuAJERHH0XqQt3NM0if2Z3et7BF98vTe3kN8LcBNtgvjHFpGMlcTPHBE
0YScGFot2U0CP8it/TmFBnciMtsvX9xI
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:16 2025 by rpki-client on console.sobornost.net