Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft
File:                     Vyfu6NouLMefq6Da0ZyISCvRWdw.mft (raw, json)
Hash identifier:          hLKdlRTF2a4t8QTrn7pcugV+RwY299JtsC7Qp3vynLU=
Subject key identifier:   FE:AE:D0:64:45:95:63:B0:C6:10:3A:AC:3D:6E:03:02:68:96:A3:6D
Authority key identifier: 57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC
Certificate issuer:       /CN=A9125C3D/serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC
Certificate serial:       0379
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft
Manifest number:          0374
Signing time:             Sun 27 Apr 2025 00:35:07 +0000
Manifest this update:     Sun 27 Apr 2025 00:35:06 +0000
Manifest next update:     Sun 04 May 2025 00:35:06 +0000
Files and hashes:         1: Vyfu6NouLMefq6Da0ZyISCvRWdw.crl (hash: RXqk9UtZwzzeSG+cMFGMq7wQ8Uk/3MkobAYMm+qNjxw=)
                          2: D66E75F0A5CF11EC94CFB734C4F9AE02.roa (hash: l/s5xmTdNpZpeVMlmGz5C4jtr1q5+jW3USj6jM51K9Y=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.crl
                          rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:35:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889 (0x379)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125C3D, serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC
        Validity
            Not Before: Apr 27 00:35:06 2025 GMT
            Not After : May  4 00:35:06 2025 GMT
        Subject: CN=680d7bbb-31e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:67:e2:0e:be:a0:13:80:d1:75:79:fd:03:e1:
                    aa:0f:d0:06:a0:cb:a5:49:6f:09:b9:17:1e:65:79:
                    1c:47:81:00:2c:de:b6:bd:06:cc:fd:e1:7f:62:4a:
                    18:1c:66:1f:9e:6a:51:96:d0:8d:70:90:d2:f7:6a:
                    d0:43:bb:eb:5b:66:a8:5e:e3:d1:2c:72:ed:d8:6c:
                    f7:15:38:70:bb:0a:50:6a:63:94:83:7b:13:9f:de:
                    5e:2e:5c:38:d2:c3:6d:75:0d:92:56:1c:8d:bf:b1:
                    14:1f:f8:a0:a1:cc:a2:6b:6e:42:fb:df:be:a4:d8:
                    6f:3a:e5:92:46:61:dc:eb:80:f7:67:d4:51:be:b4:
                    a0:84:19:7b:31:b6:e9:e7:87:0c:c9:1c:54:4d:4c:
                    0c:ef:e3:12:f3:7c:10:12:0a:d6:a3:31:cd:d6:86:
                    96:25:99:99:3b:b9:c1:e4:17:59:a3:cb:bb:53:97:
                    43:28:50:6c:b1:ab:4b:66:35:2a:d0:f3:7e:cb:7d:
                    35:76:3f:6e:4a:4d:7c:7a:41:31:4a:33:8c:ce:c3:
                    6f:66:87:89:d9:e9:fa:a6:21:a5:3b:3a:6f:ed:42:
                    8f:3e:e4:1c:b4:05:1c:14:69:57:b4:0a:50:19:b3:
                    d5:97:cd:58:3a:5e:b0:bd:4c:e4:00:bf:09:d5:7e:
                    85:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:AE:D0:64:45:95:63:B0:C6:10:3A:AC:3D:6E:03:02:68:96:A3:6D
            X509v3 Authority Key Identifier:
                keyid:57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:32:1c:26:dc:2a:29:6c:c1:ee:26:19:f5:83:fb:99:38:2c:
         33:0d:79:0f:c7:03:4a:f6:24:ad:08:bc:a5:a7:6f:29:1d:75:
         c8:0f:3c:7d:91:c6:eb:42:d5:2c:d7:e2:81:16:4e:ef:93:e3:
         71:e2:ee:43:b3:06:38:ac:b3:e4:94:3c:ef:de:ce:90:d9:72:
         1d:18:c1:3b:ea:15:e2:5b:52:82:0b:bd:b1:bd:15:a5:08:37:
         02:0d:de:51:38:3a:cf:84:8d:c6:89:ec:38:40:a4:93:9b:7a:
         0d:0b:91:f2:41:60:ef:4a:d7:67:2a:69:21:59:49:1c:c6:5c:
         82:e8:24:05:8a:36:c8:4d:ec:96:1d:82:c1:f9:11:da:83:a3:
         eb:d5:26:02:47:af:ae:90:43:a7:92:d3:a2:85:97:8a:0a:d2:
         be:e9:f9:7c:25:7d:34:9a:68:9d:83:7b:61:78:a5:c1:9c:b4:
         28:d5:22:9c:58:63:9e:9d:b4:22:26:cf:6d:9f:96:a0:b4:7c:
         fb:c7:15:7f:9e:e5:c1:ca:dd:cc:8f:e2:ec:6f:ed:ac:77:33:
         1c:a1:71:4f:46:62:be:22:3e:d7:22:49:9d:40:4e:09:ff:2c:
         e7:38:b0:fc:be:9f:ac:3b:82:56:47:f9:c7:82:dc:f6:3c:d2:
         23:b8:7b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:19 2025 by rpki-client on console.sobornost.net