Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft
File:                     VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft (raw, json)
Hash identifier:          g1qiouF/dh1lk11GbRjR2O6Bf9ZTvYB+4iGWTgakJzc=
Subject key identifier:   D4:EE:A5:66:5B:1D:2C:79:83:D4:E4:A6:2B:8C:7C:B8:C1:F9:EB:57
Authority key identifier: 54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D
Certificate issuer:       /CN=A912F62D/serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D
Certificate serial:       29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft
Manifest number:          28
Signing time:             Sun 27 Apr 2025 06:35:42 +0000
Manifest this update:     Sun 27 Apr 2025 06:35:42 +0000
Manifest next update:     Sun 04 May 2025 06:35:42 +0000
Files and hashes:         1: VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl (hash: gWTwwC5SwNmUp5eN2KrcnDPVr+y0tUpC48SXFH17PMI=)
                          2: 6DAFB1EAEA7E11EF93A91726C4F9AE02.roa (hash: odRzv1rTZxMhuETYW/aFCGmGEfOypP1WnK3dBBfEcvk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl
                          rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F62D, serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D
        Validity
            Not Before: Apr 27 06:35:42 2025 GMT
            Not After : May  4 06:35:42 2025 GMT
        Subject: CN=680dd03e-e0e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:0c:70:26:06:56:df:fa:78:56:5c:dd:8c:1a:
                    ac:20:a4:09:76:79:9d:3f:9d:d1:03:71:95:e5:65:
                    2d:ef:0a:61:ac:8d:47:75:ff:b6:71:a3:cf:9d:80:
                    ee:d2:18:64:5d:2f:91:69:8d:7f:9c:a6:01:77:ad:
                    87:d2:61:02:09:49:8c:95:5d:33:3c:99:8d:2e:f5:
                    97:2f:65:0b:10:40:34:9f:5c:e5:90:97:cf:0d:b7:
                    84:fc:bc:f0:df:2f:e1:0f:dc:e7:a3:92:18:a0:24:
                    17:cb:b9:78:8c:37:e1:7c:ec:42:96:95:e0:46:59:
                    d4:60:bd:be:67:ff:a0:ea:14:f4:ea:d7:89:fb:bb:
                    c8:32:85:c3:b7:f7:38:6c:78:e8:b4:ea:8d:3c:26:
                    41:c8:22:a8:a8:03:4f:91:98:dd:82:3b:20:e9:be:
                    d4:37:4c:44:7f:79:be:09:6c:eb:76:d0:0e:f9:48:
                    51:83:76:c2:65:71:39:83:66:2f:3c:0f:ef:d4:b6:
                    9b:bf:3d:20:3d:e3:7a:8d:51:f9:a1:fb:25:a7:f8:
                    a2:50:8b:3a:f1:06:4b:dd:7b:a1:29:31:df:37:65:
                    42:56:d6:6b:af:e8:43:a3:a8:c9:7b:c3:2a:68:ca:
                    49:98:67:70:96:e0:d6:39:c5:b1:48:a3:64:17:50:
                    cb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:EE:A5:66:5B:1D:2C:79:83:D4:E4:A6:2B:8C:7C:B8:C1:F9:EB:57
            X509v3 Authority Key Identifier:
                keyid:54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:13:9d:d6:6a:a9:67:8c:f3:e8:45:ec:0f:aa:a4:3f:89:75:
         99:52:6e:34:6e:36:a9:a2:39:25:cc:35:08:60:c8:4f:33:1d:
         2c:78:6c:b2:f0:9d:68:7b:19:65:c8:59:ff:d2:6b:2d:25:49:
         95:c5:4f:57:61:d9:3b:52:64:a0:31:52:78:79:6c:67:a7:72:
         fa:66:92:7f:e7:a1:65:df:5f:e7:b0:e9:6b:78:3f:44:5c:c3:
         94:0f:eb:ad:50:a6:9c:50:a0:16:0f:ed:b7:92:4a:bb:23:2d:
         04:c2:44:28:3f:0a:ef:f7:85:a9:77:0b:20:cf:72:46:58:b0:
         d8:14:d9:32:39:8c:26:fc:0c:f5:21:f3:62:95:89:c4:3e:ca:
         6e:b9:8b:13:0d:ed:b4:5a:20:98:8f:7d:30:2c:eb:51:a6:43:
         55:2f:85:48:f8:65:8f:b2:80:c7:e8:f0:7f:1e:40:ab:51:73:
         59:7b:0e:5e:f0:c7:5a:ab:a8:b1:0d:cd:26:78:8d:b5:60:00:
         98:bc:1b:04:3c:7a:70:51:1e:57:ff:96:bc:68:ae:e1:64:02:
         ed:8d:aa:ee:71:cf:3b:52:b1:e6:74:97:64:b3:62:e7:d4:5d:
         c9:cf:73:25:90:c8:9b:b6:35:91:d5:c8:1c:60:3d:42:23:e5:
         3d:29:4c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:42 2025 by rpki-client on console.sobornost.net