Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
File:                     VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft (raw, json)
Hash identifier:          /DHTWdpbs1wySHQROqY9oHZpN/+sqQZF6SnBCsQOOu4=
Subject key identifier:   BA:59:3F:E6:93:BF:30:F2:1C:81:A5:CD:3E:0E:4D:C3:A7:93:0A:B5
Authority key identifier: 54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
Certificate issuer:       /CN=A914C33A/serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8
Certificate serial:       167C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
Manifest number:          1669
Signing time:             Thu 24 Apr 2025 15:34:55 +0000
Manifest this update:     Thu 24 Apr 2025 15:34:54 +0000
Manifest next update:     Thu 01 May 2025 15:34:54 +0000
Files and hashes:         1: VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl (hash: VWJFRQYJpOmlqQz88Rf5m0eKT8JOg1cVEwkUXZEWY+M=)
                          2: F9B55ECA922111EAB5138581C4F9AE02.roa (hash: t1Oq9/W3+A2l0ATKJkmUH6k2nz0jQQTxzppJnzarsfQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl
                          rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 15:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5756 (0x167c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C33A, serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8
        Validity
            Not Before: Apr 24 15:34:54 2025 GMT
            Not After : May  1 15:34:54 2025 GMT
        Subject: CN=680a5a1f-970d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8e:e4:9b:10:03:d1:60:26:9f:e3:fd:21:67:
                    94:e1:ec:1d:89:37:11:fe:bf:9c:05:ba:6b:84:7f:
                    9a:43:d3:36:db:09:6c:36:37:5a:32:b7:13:f4:22:
                    a1:9f:80:17:62:d0:cd:3d:4c:03:fb:d1:98:84:d3:
                    9f:94:99:6a:eb:8e:97:66:06:b2:c6:c3:57:fd:a2:
                    05:af:1b:d3:5f:9d:87:31:b9:38:f7:73:1b:c3:d8:
                    45:bb:bc:c2:d2:b7:a6:30:11:7d:80:4c:0e:57:0c:
                    93:28:8d:8c:27:05:c3:f6:b7:3b:59:07:48:39:1a:
                    fa:5d:4a:35:88:17:12:6e:90:bc:20:b9:45:c3:cd:
                    e1:51:f1:4f:e3:74:fc:7d:8e:5f:2e:70:f0:78:73:
                    f0:38:4d:f6:50:f7:ab:d9:e4:fc:c6:e9:89:92:e3:
                    a8:53:2b:9b:5e:f3:d0:7d:7f:8a:95:75:c8:ba:8f:
                    62:e3:1c:33:24:11:08:a3:21:2e:e9:5a:88:27:50:
                    b2:0f:21:ce:f9:7c:81:be:ec:fc:85:35:3c:35:d8:
                    ed:7c:25:1b:6a:67:bd:60:b0:80:48:af:88:b1:86:
                    4c:21:7a:87:33:df:d5:dd:9d:82:9f:83:37:f9:45:
                    66:63:8a:4f:30:03:20:c6:82:88:b1:f7:61:e7:fa:
                    f1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:59:3F:E6:93:BF:30:F2:1C:81:A5:CD:3E:0E:4D:C3:A7:93:0A:B5
            X509v3 Authority Key Identifier:
                keyid:54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:aa:6c:66:36:b0:13:c4:47:4c:9c:24:8d:98:4f:e6:da:59:
         c8:ff:33:37:1b:d1:89:22:69:e4:c8:6c:5a:04:d0:46:c7:a4:
         ef:24:be:4d:8e:d6:af:14:2e:b9:1c:8e:95:38:b6:0f:1d:4d:
         a9:88:9a:ff:44:e3:e4:fd:52:39:96:a7:ec:9c:34:b5:c9:c6:
         52:72:c6:39:81:5a:2f:0b:c2:9c:5f:3d:9b:aa:f2:2d:2d:52:
         ae:20:0b:9e:62:3a:dc:96:d8:2d:6b:04:13:db:3e:27:fb:e9:
         16:65:78:4f:81:34:b5:21:de:00:1f:f7:7a:11:5c:a4:3d:f3:
         ac:a3:80:13:4c:10:a5:0e:a6:35:3c:95:ca:c3:83:55:74:32:
         cb:cf:2d:de:06:8d:52:3c:ab:b9:04:53:20:72:cd:0b:9c:22:
         2d:e0:f5:f1:36:64:79:95:49:31:05:e3:30:05:b3:a4:92:32:
         80:f6:79:e5:0a:ee:0e:e6:3b:1a:ea:a1:0a:26:b5:c0:8e:0b:
         2e:73:f8:45:84:0e:32:f7:5d:44:ec:c0:54:00:58:af:09:df:
         45:a1:28:4c:db:c9:0a:04:ff:60:75:3b:da:75:5c:7c:64:c3:
         35:c3:dc:a0:71:73:69:8f:31:f8:56:4b:e3:03:95:1f:99:25:
         38:27:4a:48
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEMzM0ExMTAvBgNVBAUTKDU0NDExRDkwNzBFMjBDOUZGQ0ZGQzQxNEZEMDkzMjBC
RjM5QUI2RTgwHhcNMjUwNDI0MTUzNDU0WhcNMjUwNTAxMTUzNDU0WjAYMRYwFAYD
VQQDEw02ODBhNWExZi05NzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA347kmxAD0WAmn+P9IWeU4ewdiTcR/r+cBbprhH+aQ9M22wlsNjdaMrcT9CKh
n4AXYtDNPUwD+9GYhNOflJlq646XZgayxsNX/aIFrxvTX52HMbk493Mbw9hFu7zC
0remMBF9gEwOVwyTKI2MJwXD9rc7WQdIORr6XUo1iBcSbpC8ILlFw83hUfFP43T8
fY5fLnDweHPwOE32UPer2eT8xumJkuOoUyubXvPQfX+KlXXIuo9i4xwzJBEIoyEu
6VqIJ1CyDyHO+XyBvuz8hTU8NdjtfCUbame9YLCASK+IsYZMIXqHM9/V3Z2Cn4M3
+UVmY4pPMAMgxoKIsfdh5/rxfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpZP+aT
vzDyHIGlzT4OTcOnkwq1MB8GA1UdIwQYMBaAFFRBHZBw4gyf/P/EFP0JMgvzmrbo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS9GRUM3N0M5QTA3
MzYxMUU4QUI3RENCNEFDNEY5QUUwMi9WRUVka0hEaURKXzhfOFFVX1FreUNfT2F0
dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1ZFRWRrSERpREpfOF84UVVfUWt5Q19PYXR1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzMzQS9GRUM3N0M5QTA3MzYxMUU4QUI3RENCNEFDNEY5QUUwMi9WRUVka0hEaURK
XzhfOFFVX1FreUNfT2F0dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA6qmxmNrATxEdMnCSNmE/m2lnI/zM3G9GJImnkyGxaBNBGx6TvJL5N
jtavFC65HI6VOLYPHU2piJr/ROPk/VI5lqfsnDS1ycZScsY5gVovC8KcXz2bqvIt
LVKuIAueYjrcltgtawQT2z4n++kWZXhPgTS1Id4AH/d6EVykPfOso4ATTBClDqY1
PJXKw4NVdDLLzy3eBo1SPKu5BFMgcs0LnCIt4PXxNmR5lUkxBeMwBbOkkjKA9nnl
Cu4O5jsa6qEKJrXAjgsuc/hFhA4y911E7MBUAFivCd9FoShM28kKBP9gdTvadVx8
ZMM1w9ygcXNpjzH4VkvjA5UfmSU4J0pI
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:08:06 2025 by rpki-client on console.sobornost.net