Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
File:                     Z_VMOcER599-cHbFxxWyizXoWfk.mft (raw, json)
Hash identifier:          1qU6wEuillQYkTm+0G+Woa5kBeoL0MWzb0xQUWpky4I=
Subject key identifier:   4A:7F:EE:B9:4B:79:2A:73:15:44:95:9A:D7:23:D1:FC:ED:52:45:75
Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
Certificate issuer:       /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Certificate serial:       138D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
Manifest number:          1363
Signing time:             Mon 28 Apr 2025 17:14:22 +0000
Manifest this update:     Mon 28 Apr 2025 17:14:22 +0000
Manifest next update:     Mon 05 May 2025 17:14:22 +0000
Files and hashes:         1: Z_VMOcER599-cHbFxxWyizXoWfk.crl (hash: kw26WQadsHznfD9G/k83AnhaTOZ8eJQY4vuISNHJ9vk=)
                          2: E56024B49A7D11EF99ECF636C4F9AE02.roa (hash: uEmwwGXbLGwcgl1RlF9qOwgmZadJbirI6oSO1IuzJso=)
                          3: E48C805A9A7D11EF99ECF636C4F9AE02.roa (hash: O/obPP4Yy8LvINF30ra1g4yXQa4L78ykRo9/qSPYtDU=)
                          4: C19EC984774811EFB2DF8983C4F9AE02.roa (hash: c/pAynOTfJnEgUvwSHA5IHqTz1bA0PIkbnuNkyI5d1A=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
                          rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 17:14:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5005 (0x138d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
        Validity
            Not Before: Apr 28 17:14:22 2025 GMT
            Not After : May  5 17:14:22 2025 GMT
        Subject: CN=680fb76e-4bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:31:ed:3e:ab:bd:64:64:64:24:8b:bc:e7:63:
                    16:b9:33:54:84:f6:1f:76:a3:1d:48:3d:8d:ac:a8:
                    ff:45:d6:e0:18:d3:1d:46:43:7f:6d:a5:9b:90:55:
                    84:17:9f:f9:2b:87:76:8d:aa:86:8c:6c:56:cd:94:
                    07:17:f5:d3:5b:c7:07:cd:06:f8:ed:9c:ee:d3:24:
                    c2:0c:ed:f3:04:00:0a:1a:06:87:dd:28:0b:b8:d2:
                    a4:cb:0e:4f:9a:8b:aa:73:33:a8:52:b5:77:2a:74:
                    26:b7:de:4d:da:c8:33:28:57:9f:e8:9e:57:6f:9b:
                    5e:98:b8:77:c3:39:88:58:87:31:11:90:87:82:0c:
                    12:a4:0d:e9:24:14:96:00:f1:2d:d0:5b:ca:be:5a:
                    bc:38:33:27:29:e4:88:07:02:a7:c8:c6:4a:54:7e:
                    9c:d1:15:7c:f9:13:d9:19:77:59:60:3c:66:8d:65:
                    4c:ed:0f:c6:6c:ec:c3:21:bc:d1:87:39:1f:4b:ba:
                    02:ee:dd:74:48:25:0f:bc:b5:bb:6c:e5:99:71:cc:
                    18:ba:68:69:26:e7:dc:d5:8f:29:56:d3:b3:67:e3:
                    80:3b:a5:97:16:80:b6:92:af:9d:17:06:61:b0:9d:
                    95:4e:d8:f8:00:ab:18:6d:c1:f8:e6:4f:35:b8:bd:
                    d8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7F:EE:B9:4B:79:2A:73:15:44:95:9A:D7:23:D1:FC:ED:52:45:75
            X509v3 Authority Key Identifier:
                keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f9:0f:00:e6:58:fc:cb:63:f9:26:f8:22:56:82:e3:ae:2b:
         35:14:8d:d1:00:29:8b:55:f5:ba:95:03:9b:b7:18:10:a6:73:
         d0:8a:e5:bd:1d:ff:22:df:9d:f4:e8:3f:b5:d6:a8:70:46:10:
         6b:9a:9a:aa:23:81:e1:0b:9f:8b:5e:79:73:e4:ec:fc:58:af:
         74:36:48:fa:64:72:de:ca:1b:d4:c9:7e:56:d2:39:52:85:47:
         da:37:e3:c1:f3:56:aa:4b:3b:0b:c3:06:ff:72:20:ab:f7:c9:
         98:43:f1:e0:90:78:59:cf:48:0d:87:74:8d:f1:44:25:54:27:
         9a:ff:82:9b:6c:b2:fa:82:8e:2a:aa:c9:e1:ef:72:6c:bf:c0:
         91:85:10:a8:cf:7c:8b:75:bc:97:f4:bd:92:df:33:4a:10:7f:
         29:5b:bc:9d:51:93:1c:e9:55:6f:a7:7e:47:cc:ce:08:d5:d3:
         a9:9b:05:00:f0:84:f1:91:14:25:76:49:a3:a5:fb:76:de:4a:
         94:81:4a:f0:8d:5c:ae:0f:93:09:7e:ef:1c:78:9c:05:68:41:
         da:22:bc:c2:55:dd:f1:83:ff:26:6c:7c:f6:d3:a1:e9:d6:b3:
         92:0d:a0:60:17:13:d5:e7:e1:cc:0f:61:37:4a:00:6c:d5:73:
         7b:2c:08:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:10:24 2025 by rpki-client on console.sobornost.net