Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
File:                     Vg3ED_OlCfnv21Jg7huzhi222N8.mft (raw, json)
Hash identifier:          nhgiJnf4UGv9ysQRfSAxGaUoGA46DW1hWKB9tg3OOfc=
Subject key identifier:   FC:C9:9E:6A:5C:71:1E:6F:FA:1F:2C:9A:24:72:9D:09:1F:59:F0:3D
Authority key identifier: 56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF
Certificate issuer:       /CN=A912E926/serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF
Certificate serial:       016A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
Manifest number:          0168
Signing time:             Sun 27 Apr 2025 02:51:24 +0000
Manifest this update:     Sun 27 Apr 2025 02:51:24 +0000
Manifest next update:     Sun 04 May 2025 02:51:24 +0000
Files and hashes:         1: Vg3ED_OlCfnv21Jg7huzhi222N8.crl (hash: TPOgp0frIO2w8rZHkVcAKqBXePjdFNHVztuiPXQ3fKE=)
                          2: 46BF7E7CFA0611ED802A1C29C4F9AE02.roa (hash: 6nT4G6m4+Q+TudjCN47uVHfhSNYlhZS8cRYj6dtcWvw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl
                          rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E926, serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF
        Validity
            Not Before: Apr 27 02:51:24 2025 GMT
            Not After : May  4 02:51:24 2025 GMT
        Subject: CN=680d9bac-fdd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e6:a9:cc:ce:8b:7e:ef:81:c7:ff:b3:a9:00:
                    cf:28:87:4d:bc:02:74:54:72:04:99:aa:d3:b5:bf:
                    7f:01:b6:03:91:44:88:b8:2e:fe:e1:a6:50:6c:b0:
                    21:06:17:82:49:0d:7b:09:df:a5:51:63:6f:cf:fd:
                    d5:47:23:30:c6:67:60:5f:4f:82:33:f5:6b:da:c2:
                    b3:13:66:e8:87:9d:11:df:3e:76:ec:ce:52:0b:29:
                    cf:b8:fb:d9:2b:96:18:4d:6f:71:86:87:53:57:eb:
                    70:3c:21:f7:f8:0a:61:e3:3f:9a:1d:0a:0d:59:e1:
                    20:30:0f:a6:3f:18:73:af:b1:27:cb:11:1b:b6:05:
                    3a:10:f0:a3:54:35:84:a7:f3:06:7e:28:92:61:ca:
                    37:67:7f:bf:cc:bc:e7:e4:8b:5d:c7:4b:30:a5:09:
                    c7:83:1b:a8:c3:4e:68:66:20:15:59:ce:92:f3:7b:
                    cb:7d:91:9a:15:98:63:68:35:83:39:b9:07:0c:1d:
                    8b:da:80:f1:ff:5a:ed:af:cc:bf:c0:01:89:86:aa:
                    2d:48:46:59:3c:1e:e3:c9:61:bf:f2:ee:a9:ae:65:
                    9d:b7:a5:4d:a3:c6:27:14:77:6f:e6:e4:a4:bc:93:
                    d9:db:b5:23:5d:e1:37:02:8c:33:ac:eb:4c:47:4d:
                    07:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C9:9E:6A:5C:71:1E:6F:FA:1F:2C:9A:24:72:9D:09:1F:59:F0:3D
            X509v3 Authority Key Identifier:
                keyid:56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e8:ca:d2:7e:d7:29:f6:af:96:4a:7b:e7:b5:28:38:7c:49:
         e7:56:d3:54:6f:b2:c9:96:20:8f:06:b0:6d:3f:de:5b:d1:99:
         20:bb:31:36:25:8b:ad:49:06:d3:40:58:0a:18:08:93:96:e4:
         00:34:e5:0f:d8:5f:f0:97:d1:41:e4:7c:59:47:57:bf:89:26:
         88:83:dd:03:60:e3:bb:d7:ce:92:d6:a9:a9:c2:7c:d6:4f:6b:
         6e:24:4d:d1:ab:79:91:67:8f:07:1c:37:2c:c1:55:88:62:0e:
         c6:e8:02:28:88:70:d1:62:e4:cf:4e:fe:85:e1:eb:12:39:fe:
         cd:61:77:17:67:df:65:e7:ce:0c:32:32:ed:62:0f:90:08:be:
         ef:3d:c3:f4:20:f1:22:82:7f:f7:8f:55:e6:be:8c:e7:25:ce:
         7d:86:e8:22:19:1c:e6:a3:c3:9e:95:93:fc:33:b0:c9:a5:eb:
         14:55:cb:a9:c1:37:76:e6:02:52:cf:94:d4:5a:42:02:0e:fe:
         ef:e1:67:d2:b1:12:3f:55:ff:fc:9b:39:e8:74:4a:62:f3:22:
         ca:97:76:58:d7:95:a4:a4:48:35:42:e9:18:b7:f3:8e:89:12:
         6a:28:5b:83:76:97:82:8d:31:2c:0d:14:f7:e2:2e:82:75:a4:
         65:bb:8f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:25 2025 by rpki-client on console.sobornost.net