Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft
File:                     1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft (raw, json)
Hash identifier:          qhF82B7b/dV5CvPIKDBpt75xYZ0Xmum/jyNXrz7jR20=
Subject key identifier:   62:F3:87:4F:E6:9B:3E:69:C8:7C:23:B2:B8:C3:5A:72:02:57:EF:63
Authority key identifier: D5:50:47:06:13:93:6D:7D:47:B7:19:7A:B5:25:6F:A0:6E:0B:DC:11
Certificate issuer:       /CN=A911F5C7/serialNumber=D550470613936D7D47B7197AB5256FA06E0BDC11
Certificate serial:       64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VBHBhOTbX1Htxl6tSVvoG4L3BE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft
Manifest number:          63
Signing time:             Sun 27 Apr 2025 05:52:19 +0000
Manifest this update:     Sun 27 Apr 2025 05:52:19 +0000
Manifest next update:     Sun 04 May 2025 05:52:19 +0000
Files and hashes:         1: 1VBHBhOTbX1Htxl6tSVvoG4L3BE.crl (hash: Jw5o2HVQjO9Ue5VJ3OCQ46xCEfvq4bx6kCQrScuC/PU=)
                          2: E6721B6E908211EFAC47F726C4F9AE02.roa (hash: wJxQyf0eIMTbf6R3S1EMRdfJGjX/18WoSajNIY4aU5s=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.crl
                          rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VBHBhOTbX1Htxl6tSVvoG4L3BE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F5C7, serialNumber=D550470613936D7D47B7197AB5256FA06E0BDC11
        Validity
            Not Before: Apr 27 05:52:19 2025 GMT
            Not After : May  4 05:52:19 2025 GMT
        Subject: CN=680dc613-77d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6b:b4:88:db:76:bf:72:ce:68:d1:23:bc:8f:
                    f1:23:c2:de:a5:51:50:89:9f:04:fb:0f:5a:82:33:
                    56:e7:b4:a4:90:4e:6b:53:f0:99:f9:de:19:3c:2f:
                    21:da:d7:02:7a:34:12:a3:8a:1b:72:40:ab:55:d3:
                    b7:f4:80:7d:7e:56:86:e8:f7:1e:3f:1c:cc:f1:a5:
                    b6:8a:77:a8:70:6f:bd:fb:67:c9:f0:f2:a1:1c:c5:
                    66:ea:fd:e3:48:4b:8d:3b:68:9e:4e:4f:d0:8b:0b:
                    62:1b:50:d8:23:14:ca:59:73:fe:f7:28:68:63:f8:
                    7f:61:1f:86:2a:76:48:4a:b2:3a:25:3e:a4:f7:4e:
                    02:0c:9f:42:c5:44:d1:fa:2b:8b:25:71:43:47:23:
                    a8:51:51:46:d3:68:f1:f4:49:97:9b:10:1c:04:95:
                    a8:1f:20:4b:be:fc:89:c8:73:7d:cd:bb:5c:65:b2:
                    cb:c0:fa:47:4e:46:1f:9b:11:6d:3e:d0:25:41:e4:
                    89:1f:15:1b:f9:f4:c6:fd:52:a9:a1:c7:fe:05:7f:
                    38:3c:5f:cd:38:c4:36:28:b7:3a:f0:0d:9e:f8:c4:
                    ce:fa:a0:5e:ae:31:01:29:0d:c7:1b:26:b3:2d:d7:
                    1e:5b:2a:09:17:2d:27:5b:ea:7e:e2:95:0f:a7:fa:
                    8a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F3:87:4F:E6:9B:3E:69:C8:7C:23:B2:B8:C3:5A:72:02:57:EF:63
            X509v3 Authority Key Identifier:
                keyid:D5:50:47:06:13:93:6D:7D:47:B7:19:7A:B5:25:6F:A0:6E:0B:DC:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VBHBhOTbX1Htxl6tSVvoG4L3BE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:3b:f8:0c:db:8c:cc:e3:cf:9e:70:08:c9:cc:4a:d4:6d:c2:
         18:35:6d:07:78:73:5b:1a:ec:16:82:50:c8:b0:77:24:b3:11:
         fd:64:2d:1f:ed:16:b6:72:01:0d:52:f3:e3:23:8a:93:53:d6:
         12:d6:ca:32:0c:10:1c:04:49:49:d7:ee:0e:bd:79:73:21:80:
         5c:8b:4a:70:c7:fe:cb:ed:92:bf:7e:68:a6:79:b6:76:fd:bc:
         95:45:05:92:22:1c:b5:29:17:ee:04:43:b9:24:aa:92:41:99:
         c5:02:68:10:14:ca:28:98:1f:68:4d:d9:fd:a8:33:44:6b:67:
         8e:da:09:9c:a1:f9:a8:44:8e:15:27:68:97:cf:12:0a:6e:b9:
         7b:2f:7b:d3:a1:8e:6f:0b:b9:c0:bc:38:3f:af:5a:6e:c3:c5:
         29:b3:c0:ba:4f:33:78:46:85:e2:d4:99:4f:f0:4e:4f:f1:50:
         1f:65:9d:ae:3c:22:65:a6:43:b2:37:ed:05:35:97:c2:08:71:
         c5:b8:8f:0d:a1:b1:ff:aa:25:4a:b5:a9:60:be:58:40:ed:ca:
         50:dd:34:d2:2c:10:17:d7:9a:8e:6c:c0:9a:6b:a7:4e:fb:e8:
         4e:53:db:f0:1b:7b:95:3e:d9:93:a0:cb:db:b7:d3:1c:6a:7f:
         3a:12:c9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:41 2025 by rpki-client on console.sobornost.net