Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft
File:                     veQRRX4ny5i0rjD846ivXGcpUJs.mft (raw, json)
Hash identifier:          C55OFNiCVr/MycxLyyJrdZYLpAC+G8phaV8RQZNHJ5A=
Subject key identifier:   6F:81:A0:28:90:B8:ED:3C:8D:8F:A7:76:04:FE:8A:49:F7:A2:88:94
Authority key identifier: BD:E4:11:45:7E:27:CB:98:B4:AE:30:FC:E3:A8:AF:5C:67:29:50:9B
Certificate issuer:       /CN=A912425E/serialNumber=BDE411457E27CB98B4AE30FCE3A8AF5C6729509B
Certificate serial:       0459
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft
Manifest number:          0455
Signing time:             Sat 26 Apr 2025 23:50:10 +0000
Manifest this update:     Sat 26 Apr 2025 23:50:10 +0000
Manifest next update:     Sat 03 May 2025 23:50:10 +0000
Files and hashes:         1: veQRRX4ny5i0rjD846ivXGcpUJs.crl (hash: sJj8ux9nxv92V5C62iUIqVFiKCLVmUzB4Mb6JjAUf40=)
                          2: 106A9C18500B11EC9430721DC4F9AE02.roa (hash: roBiUviMC5AgiQf3XHVJjv6BNW8BJ8gqBvPnuJuZKp4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.crl
                          rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 23:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1113 (0x459)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912425E, serialNumber=BDE411457E27CB98B4AE30FCE3A8AF5C6729509B
        Validity
            Not Before: Apr 26 23:50:10 2025 GMT
            Not After : May  3 23:50:10 2025 GMT
        Subject: CN=680d7132-343f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:76:c1:07:4c:d4:39:78:8c:9e:c3:2c:14:52:
                    a6:e7:2a:de:14:ce:f2:1b:80:d0:6b:0f:55:fe:a6:
                    fd:d2:7c:7f:fb:dc:d3:60:4b:d4:df:85:ea:af:34:
                    26:fc:a9:5a:6a:30:c2:bb:25:72:62:ae:b5:57:df:
                    ee:c2:e8:00:21:f7:23:34:e1:ad:c0:ef:b1:f3:a9:
                    22:34:2f:08:b9:b8:69:37:c2:1b:63:0a:ee:c4:26:
                    27:3d:a3:11:71:fb:d5:69:80:0a:e3:3c:bf:a6:a7:
                    bc:e7:bb:23:83:fc:57:3a:fa:62:1f:78:9e:f3:34:
                    1f:c8:cf:f8:e4:8a:2f:e1:3a:cc:0f:de:1e:2e:ce:
                    d7:a1:d0:53:6c:8f:c6:67:af:9e:c8:7d:e9:58:4d:
                    14:12:4e:81:1a:98:11:1d:65:53:ad:02:84:9a:6d:
                    8c:c2:0c:41:e9:aa:bc:48:31:c9:9d:e1:51:8a:3b:
                    20:56:d0:b5:63:46:e6:24:e1:fe:a8:53:92:ce:dd:
                    c5:8f:6c:84:01:b9:8c:fb:3b:54:43:a1:e7:cc:8c:
                    58:7b:91:6b:cf:da:a8:35:1a:d8:64:8b:7a:d1:8c:
                    c6:98:23:b9:c4:c1:c6:08:95:b0:15:c9:ee:b9:54:
                    93:46:d7:55:a3:db:ce:97:f4:b6:bf:b8:ba:bc:12:
                    dd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:81:A0:28:90:B8:ED:3C:8D:8F:A7:76:04:FE:8A:49:F7:A2:88:94
            X509v3 Authority Key Identifier:
                keyid:BD:E4:11:45:7E:27:CB:98:B4:AE:30:FC:E3:A8:AF:5C:67:29:50:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veQRRX4ny5i0rjD846ivXGcpUJs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912425E/634069F04C4511EC889AB084C4F9AE02/veQRRX4ny5i0rjD846ivXGcpUJs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:bd:9a:ac:35:52:3a:a7:98:1c:a5:40:30:14:b3:f9:6e:e1:
         fd:13:09:7c:31:b3:5e:54:db:a4:1e:b1:5a:3c:e7:66:51:57:
         0f:65:7f:f2:27:6e:b9:fa:ee:bf:10:c7:d8:ff:76:f8:90:0a:
         24:8e:15:d4:3c:85:fb:98:9f:38:3c:5b:c5:dc:f7:6e:61:e5:
         1e:d4:9b:ab:60:9d:50:fe:46:7a:c4:b4:aa:10:bc:d1:b5:c8:
         f2:c6:26:0b:95:d9:95:42:a5:c3:6a:0b:79:1f:fd:29:60:23:
         5c:03:f3:dd:ee:97:bf:24:e3:fb:21:84:f9:e6:cb:53:66:42:
         4b:a1:45:9e:fc:98:8e:44:32:15:bd:21:67:3e:cc:dd:3c:cd:
         aa:96:dd:99:16:95:3e:5a:7b:a5:68:08:24:db:46:d1:88:e3:
         eb:23:e7:27:b0:43:29:2e:78:7d:5f:55:e2:16:f1:89:5f:b6:
         b8:b9:b2:95:6e:d6:85:a8:38:d0:df:fc:4f:04:07:b1:a2:a3:
         26:4d:22:15:08:0d:83:3b:23:13:81:d6:88:66:29:c0:95:5a:
         b7:55:af:2a:39:2c:67:7a:6f:1f:78:81:20:0c:c3:c3:fa:7f:
         ef:19:94:9a:6a:df:ee:b3:c1:5f:33:92:d3:19:5a:a4:2a:0e:
         d3:67:c7:41
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQyNUUxMTAvBgNVBAUTKEJERTQxMTQ1N0UyN0NCOThCNEFFMzBGQ0UzQThBRjVD
NjcyOTUwOUIwHhcNMjUwNDI2MjM1MDEwWhcNMjUwNTAzMjM1MDEwWjAYMRYwFAYD
VQQDEw02ODBkNzEzMi0zNDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7HbBB0zUOXiMnsMsFFKm5yreFM7yG4DQaw9V/qb90nx/+9zTYEvU34XqrzQm
/KlaajDCuyVyYq61V9/uwugAIfcjNOGtwO+x86kiNC8IubhpN8IbYwruxCYnPaMR
cfvVaYAK4zy/pqe857sjg/xXOvpiH3ie8zQfyM/45Iov4TrMD94eLs7XodBTbI/G
Z6+eyH3pWE0UEk6BGpgRHWVTrQKEmm2MwgxB6aq8SDHJneFRijsgVtC1Y0bmJOH+
qFOSzt3Fj2yEAbmM+ztUQ6HnzIxYe5Frz9qoNRrYZIt60YzGmCO5xMHGCJWwFcnu
uVSTRtdVo9vOl/S2v7i6vBLdvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+BoCiQ
uO08jY+ndgT+ikn3ooiUMB8GA1UdIwQYMBaAFL3kEUV+J8uYtK4w/OOor1xnKVCb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDI1RS82MzQwNjlGMDRD
NDUxMUVDODg5QUIwODRDNEY5QUUwMi92ZVFSUlg0bnk1aTByakQ4NDZpdlhHY3BV
SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZlUVJSWDRueTVpMHJqRDg0Nml2WEdjcFVKcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDI1RS82MzQwNjlGMDRDNDUxMUVDODg5QUIwODRDNEY5QUUwMi92ZVFSUlg0bnk1
aTByakQ4NDZpdlhHY3BVSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAEvZqsNVI6p5gcpUAwFLP5buH9Ewl8MbNeVNukHrFaPOdmUVcPZX/y
J265+u6/EMfY/3b4kAokjhXUPIX7mJ84PFvF3PduYeUe1JurYJ1Q/kZ6xLSqELzR
tcjyxiYLldmVQqXDagt5H/0pYCNcA/Pd7pe/JOP7IYT55stTZkJLoUWe/JiORDIV
vSFnPszdPM2qlt2ZFpU+WnulaAgk20bRiOPrI+cnsEMpLnh9X1XiFvGJX7a4ubKV
btaFqDjQ3/xPBAexoqMmTSIVCA2DOyMTgdaIZinAlVq3Va8qOSxnem8feIEgDMPD
+n/vGZSaat/us8FfM5LTGVqkKg7TZ8dB
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:18 2025 by rpki-client on console.sobornost.net