Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.mft
File:                     VloR-W0tjoTDhh_i4Psx3QvkBrI.mft (raw, json)
Hash identifier:          OsNFOGHGSz8MwHvXU7iayt3jbl4sY1PcM4uOOMSTTIk=
Subject key identifier:   FB:B5:88:12:F7:D3:32:F8:05:FF:5C:1E:D8:AA:BB:C1:0C:72:3E:CA
Authority key identifier: 56:5A:11:F9:6D:2D:8E:84:C3:86:1F:E2:E0:FB:31:DD:0B:E4:06:B2
Certificate issuer:       /CN=A912481E/serialNumber=565A11F96D2D8E84C3861FE2E0FB31DD0BE406B2
Certificate serial:       0990
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VloR-W0tjoTDhh_i4Psx3QvkBrI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.mft
Manifest number:          098A
Signing time:             Mon 28 Apr 2025 20:31:03 +0000
Manifest this update:     Mon 28 Apr 2025 20:31:02 +0000
Manifest next update:     Mon 05 May 2025 20:31:02 +0000
Files and hashes:         1: VloR-W0tjoTDhh_i4Psx3QvkBrI.crl (hash: OzQTuxEbUtYAS/Q9zzXdjeFmL+H3gc57sJO2UuWA6yg=)
                          2: EE89292C896211EA9036675BC4F9AE02.roa (hash: lA5e2mSPqe8KgSZZwnBXpDPyEahqBBJS32O+7JF2tPE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.crl
                          rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VloR-W0tjoTDhh_i4Psx3QvkBrI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2448 (0x990)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912481E, serialNumber=565A11F96D2D8E84C3861FE2E0FB31DD0BE406B2
        Validity
            Not Before: Apr 28 20:31:02 2025 GMT
            Not After : May  5 20:31:02 2025 GMT
        Subject: CN=680fe586-d04b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d0:e9:db:3c:2c:7a:70:7c:60:d2:9c:05:5b:
                    81:93:31:73:28:b3:b4:c0:ca:8c:d0:3f:3c:10:7c:
                    4c:aa:14:74:6b:cf:7c:78:8d:65:ee:8c:5e:77:9e:
                    c0:f8:f1:bf:78:81:1e:f4:46:48:23:d7:c9:c6:2c:
                    db:4e:17:76:83:6f:25:38:a8:e7:10:d2:88:02:6c:
                    0a:4f:ea:d6:5e:ee:79:a7:b5:db:26:16:22:9e:af:
                    8a:e5:ed:43:71:fe:a5:b3:7a:1c:23:2f:29:b8:3a:
                    c5:6f:6b:72:2f:b9:0b:3d:6a:2c:63:8b:9d:73:41:
                    6a:a5:59:5a:be:1d:db:3e:f3:95:ad:aa:a1:29:53:
                    0b:60:5e:0a:4c:0d:c9:30:7e:3a:32:8f:b2:0c:42:
                    db:2e:5e:3c:30:4e:cc:83:3f:86:91:a1:ca:b3:00:
                    4a:9e:7b:ab:e8:b4:9a:9c:ec:79:2d:d3:ab:ef:85:
                    b0:2c:8e:7e:b1:99:e2:f9:49:74:2b:f5:11:7c:06:
                    41:9b:d0:17:7f:51:e2:99:aa:04:6c:83:08:23:7b:
                    76:c7:b7:7b:69:64:59:53:35:2d:e9:5e:f9:3c:9f:
                    85:78:c3:66:cb:a0:6e:31:9b:41:1b:20:c3:f3:ca:
                    54:6e:c7:c6:59:98:47:6a:ff:72:1e:51:2c:82:e0:
                    a8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B5:88:12:F7:D3:32:F8:05:FF:5C:1E:D8:AA:BB:C1:0C:72:3E:CA
            X509v3 Authority Key Identifier:
                keyid:56:5A:11:F9:6D:2D:8E:84:C3:86:1F:E2:E0:FB:31:DD:0B:E4:06:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VloR-W0tjoTDhh_i4Psx3QvkBrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:d4:d1:a7:e8:2e:69:b5:44:3f:75:47:f8:a0:c5:60:d4:e4:
         29:46:53:d9:5e:56:ad:57:7f:02:74:1d:ed:df:8f:5b:45:a5:
         f4:f2:69:64:3f:d8:e3:cc:1c:1c:5d:66:90:a0:46:98:97:dc:
         a1:7b:c8:da:c4:9e:bb:72:75:a0:04:13:7c:d8:5f:4e:70:ca:
         26:44:2a:80:4e:4d:3e:5e:19:a4:df:a2:ac:f3:99:80:12:29:
         af:76:a0:87:11:cf:81:4d:75:fa:fb:1a:4e:e2:f0:fa:82:13:
         51:53:1b:9c:5a:12:51:7f:9d:95:47:08:2c:b6:c1:e6:f0:e7:
         63:51:2f:09:bb:86:61:76:c3:2a:6b:b9:0a:a4:5f:8a:99:b9:
         0e:4f:e2:54:d1:f8:ba:cd:3f:2a:4f:10:a8:b6:46:7c:d9:ab:
         14:da:1b:43:28:23:7e:25:9a:1a:65:b3:55:5b:da:2f:99:d0:
         07:18:b0:6d:8d:e4:7b:17:e7:8d:8d:4d:7c:66:15:2f:3d:13:
         7b:5b:91:c4:23:26:14:e3:86:13:06:ed:c9:56:0c:c8:ec:97:
         fd:2a:59:cc:12:75:1c:fd:6e:04:f3:81:63:4d:40:55:27:84:
         75:74:5a:1a:56:7f:da:52:b8:9c:c5:53:f4:c2:e1:83:e8:c3:
         42:5b:a4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:04:56 2025 by rpki-client on console.sobornost.net