Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft
File:                     VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft (raw, json)
Hash identifier:          hkmc4sL72CCnfHiC60FUIXIF0Qi4gvSGLQfI3qt7fD4=
Subject key identifier:   08:99:99:4E:17:1A:B8:8E:8D:90:A8:B7:CF:8E:F1:84:F2:62:29:4C
Authority key identifier: 55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0
Certificate issuer:       /CN=A912404E/serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0
Certificate serial:       F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft
Manifest number:          F0
Signing time:             Sat 03 May 2025 04:42:00 +0000
Manifest this update:     Sat 03 May 2025 04:41:59 +0000
Manifest next update:     Sat 10 May 2025 04:41:59 +0000
Files and hashes:         1: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl (hash: wksR113peYrwTv7O7Z3nkV+GJ0lL62sddSyYNJ773Nw=)
                          2: FF1C0B44C0D411EEB8303680C4F9AE02.roa (hash: UVR5eOC5r72TP3k3BVK80L1LVMa+jcaIoA99zt0isl8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl
                          rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 May 2025 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912404E, serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0
        Validity
            Not Before: May  3 04:41:59 2025 GMT
            Not After : May 10 04:41:59 2025 GMT
        Subject: CN=68159e98-97c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:89:97:f1:a7:0c:95:5a:b4:54:ea:4a:36:62:
                    ec:5d:82:11:16:a0:7d:85:4d:82:a2:23:73:29:df:
                    55:8d:22:cb:7c:a0:3b:96:45:46:28:05:7a:36:aa:
                    18:52:45:bc:0a:2d:6b:da:42:61:43:12:54:67:54:
                    71:3e:f5:ed:a5:3f:df:8a:ef:da:70:c4:d9:34:ac:
                    32:7e:9f:0e:b8:73:a3:c7:2c:ca:8f:ac:ff:99:c3:
                    a0:19:d5:f9:e2:44:8b:08:83:50:99:6f:99:2b:86:
                    3c:17:a4:ec:f9:09:9e:b3:11:be:c0:ba:ac:e2:07:
                    4c:30:b6:50:c2:0e:72:31:a3:8c:93:1d:26:69:70:
                    ea:16:f1:e9:32:bd:2d:7b:9a:4a:89:b0:dd:70:e3:
                    c9:e5:e8:1f:b0:af:ee:7a:71:a8:33:1c:29:7a:fd:
                    f4:47:88:03:79:86:03:3d:2f:88:12:86:39:b4:41:
                    c9:a6:3d:75:a2:c1:cb:9a:41:c4:ac:39:9a:6c:d5:
                    cb:e9:11:55:14:6c:91:a7:d3:e5:b6:b1:53:0f:44:
                    6a:5a:63:4f:53:70:7f:5b:70:23:29:01:58:a0:2b:
                    d7:51:31:8f:d1:0d:8f:77:07:bf:d1:68:68:de:38:
                    f3:8f:a8:b5:9f:31:2c:cd:b5:c4:f7:be:c5:52:09:
                    0c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:99:99:4E:17:1A:B8:8E:8D:90:A8:B7:CF:8E:F1:84:F2:62:29:4C
            X509v3 Authority Key Identifier:
                keyid:55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:08:98:e2:34:63:70:0d:36:73:42:a2:aa:33:d0:f2:00:9b:
         7f:2d:12:41:37:ea:4a:6d:dd:40:f0:94:2a:13:74:2b:6f:32:
         55:89:4f:f5:f1:1d:51:95:8a:d8:97:18:20:b9:12:c2:c5:37:
         1d:fb:a5:65:2e:e2:56:22:5a:d8:01:b3:e3:43:ca:e9:c0:34:
         4b:4f:8e:5b:01:eb:05:9d:b5:5c:a3:63:94:97:27:bd:18:12:
         f6:0c:19:1f:f3:bc:5e:12:63:a3:3d:89:6f:7c:85:da:d5:01:
         b0:61:94:aa:c2:01:f6:fd:0b:f0:87:ca:76:fe:eb:96:c3:cd:
         46:10:65:82:5b:e9:e8:ea:0f:fb:be:4d:cf:2c:8a:be:b5:6d:
         9e:af:b1:c8:d6:49:7c:7b:a9:d8:b9:7b:91:49:15:c7:46:99:
         1c:e4:56:3c:12:18:9d:f3:f2:00:51:62:a9:a9:46:3f:d3:fa:
         29:ed:9b:9a:44:f6:85:d6:76:bf:d8:4e:44:dd:b9:9d:6c:01:
         c0:31:b2:99:4b:0c:24:e3:08:ba:65:87:fa:d5:c2:69:a2:d2:
         f2:93:7c:e7:f2:50:58:43:c4:a6:c2:36:a5:e2:c4:cf:0f:04:
         38:75:02:1f:fe:c6:53:0f:d1:b9:5b:d8:e2:72:b1:29:40:f0:
         2c:a9:98:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 06:09:29 2025 by rpki-client on console.sobornost.net