Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft
File:                     Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft (raw, json)
Hash identifier:          COWvbPkakR+jNzcSqz1zhlIxgOd3wNdxeT7KoXd8LZs=
Subject key identifier:   86:53:43:E1:C6:1B:F9:6C:53:86:43:AC:BF:79:33:A7:EF:C9:3D:1E
Authority key identifier: 56:8F:76:5C:CA:B4:2C:52:30:79:8E:68:FB:C3:7C:8A:A4:9F:5F:44
Certificate issuer:       /CN=A913F478/serialNumber=568F765CCAB42C5230798E68FBC37C8AA49F5F44
Certificate serial:       01D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo92XMq0LFIweY5o-8N8iqSfX0Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft
Manifest number:          01CB
Signing time:             Sun 27 Apr 2025 01:59:24 +0000
Manifest this update:     Sun 27 Apr 2025 01:59:24 +0000
Manifest next update:     Sun 04 May 2025 01:59:24 +0000
Files and hashes:         1: Vo92XMq0LFIweY5o-8N8iqSfX0Q.crl (hash: 1+4Nu8qDwZKP0oy/JBvLC79sq2nM3s0puSfBNbw3qZg=)
                          2: A89C497E6D1911ED9C34360FC4F9AE02.roa (hash: UQCZG7itJMxo24ik+1Acdmbu5iaW6o2y95pik3WrmR4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.crl
                          rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo92XMq0LFIweY5o-8N8iqSfX0Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 01:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465 (0x1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F478, serialNumber=568F765CCAB42C5230798E68FBC37C8AA49F5F44
        Validity
            Not Before: Apr 27 01:59:24 2025 GMT
            Not After : May  4 01:59:24 2025 GMT
        Subject: CN=680d8f7c-e2b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:20:de:aa:4d:78:43:6c:05:c4:f7:14:ba:a0:
                    57:da:73:19:71:e8:65:0e:15:f4:59:e4:e3:12:b3:
                    9a:01:84:8b:85:99:50:58:d9:47:3a:2b:37:3d:1a:
                    e5:83:a7:70:aa:7f:16:a6:a6:df:f0:53:c7:34:30:
                    33:21:7f:0b:f2:fe:f9:b9:db:c5:5e:28:df:fe:49:
                    e2:cb:0d:b1:88:26:20:70:17:cd:4f:53:8c:e5:a3:
                    58:5d:61:78:c6:1f:53:3f:09:27:4f:27:75:7a:a7:
                    2f:d3:e2:50:83:12:47:c5:03:7b:5c:7e:31:5b:e5:
                    b3:a5:eb:24:ad:4b:72:ba:8a:f1:50:88:d5:7d:49:
                    ce:24:8f:fc:6d:76:6f:48:2e:84:73:18:b2:3a:34:
                    41:ea:92:6c:23:e2:e6:d2:12:b9:39:7f:9e:e2:b6:
                    c7:f1:c0:88:1c:57:d0:d2:de:43:a8:8d:16:94:95:
                    9d:40:0f:6c:42:6a:19:d5:12:3a:83:d3:08:d1:fd:
                    9e:eb:12:99:d8:53:00:d6:50:cb:a1:87:ea:9f:68:
                    07:58:b4:dc:0c:3e:e0:95:eb:92:b8:4c:47:f5:26:
                    e8:44:29:42:7c:e1:e5:b0:83:4a:c7:9b:6b:14:3a:
                    73:9e:6c:88:85:b0:a1:cc:2b:4a:4d:1c:65:f9:6a:
                    e5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:53:43:E1:C6:1B:F9:6C:53:86:43:AC:BF:79:33:A7:EF:C9:3D:1E
            X509v3 Authority Key Identifier:
                keyid:56:8F:76:5C:CA:B4:2C:52:30:79:8E:68:FB:C3:7C:8A:A4:9F:5F:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo92XMq0LFIweY5o-8N8iqSfX0Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:84:e1:ff:af:1d:c0:f0:8f:f2:be:09:88:02:14:e9:da:f5:
         84:95:95:25:d4:f5:5b:bc:d1:c6:a3:1a:db:71:31:c2:5d:b6:
         ac:e1:4b:2d:ca:53:19:a6:07:47:3a:e3:ec:5a:d9:39:30:94:
         e7:af:f1:7d:2d:8c:ec:10:27:c3:d1:5a:f8:63:fa:d9:80:ff:
         fa:b8:41:dc:c9:d3:31:97:23:05:0c:83:70:96:3f:92:c6:30:
         95:c6:7e:5c:29:96:2c:bc:67:a3:35:f5:ce:4a:eb:19:d3:42:
         9f:6a:4f:e6:5e:79:14:32:1d:7c:a3:03:00:04:b9:56:30:ee:
         ea:cb:ec:4d:32:69:1f:10:c5:5a:3b:6c:98:23:50:67:7a:6b:
         fc:4f:c5:98:0c:ae:31:82:8e:9a:8b:bd:5c:d2:37:f4:1d:f1:
         82:14:c6:89:37:85:6d:0f:08:5c:df:a0:c5:80:b2:09:b2:46:
         56:e0:20:27:45:31:ab:62:52:ce:fd:82:4d:3e:89:ee:32:2d:
         d0:eb:1f:84:2d:48:a8:81:da:0d:41:3b:da:c1:ea:67:4d:82:
         48:eb:99:24:11:32:b8:60:f7:86:f1:95:46:e1:18:b7:35:e3:
         79:4e:ef:9c:02:d2:84:72:12:8e:81:2a:69:31:8a:f2:65:4a:
         30:21:c1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:35 2025 by rpki-client on console.sobornost.net