Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
File:                     VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft (raw, json)
Hash identifier:          6MQhGX6j4GPtyZtfebikHKXalIoUfQxIDc0/+ufL2Vc=
Subject key identifier:   FE:A9:40:84:6D:DD:C1:9E:EC:87:E3:9E:4A:C5:09:70:D3:CE:90:E4
Authority key identifier: 56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE
Certificate issuer:       /CN=A9155001/serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE
Certificate serial:       8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
Manifest number:          85
Signing time:             Sun 27 Apr 2025 05:28:44 +0000
Manifest this update:     Sun 27 Apr 2025 05:28:44 +0000
Manifest next update:     Sun 04 May 2025 05:28:44 +0000
Files and hashes:         1: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl (hash: quv1mP33DBWHVdQFanyxm9N0ZUMk4lM8ZKEid0DYAw8=)
                          2: B527A9C8604111EF97252962C4F9AE02.roa (hash: c2522H0euUuP0sg8Mvl3kcMxQDDI8YZRAF5eJnZgtNo=)
                          3: 9FB99556604111EFB4652062C4F9AE02.roa (hash: gAXZmB2qUQ7sV8azWi6YJhPEFVxj4U+stV/Xuikiv/k=)
                          4: 18E15164604011EF82C9CE5FC4F9AE02.roa (hash: kerAf5g9k1HzAUucdXB7gorLYyfAcdKUtOEyl+siFgI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl
                          rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155001, serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE
        Validity
            Not Before: Apr 27 05:28:44 2025 GMT
            Not After : May  4 05:28:44 2025 GMT
        Subject: CN=680dc08c-3d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:53:f5:43:bc:79:6a:c2:be:1d:33:e2:b0:fd:
                    f3:8f:9f:a7:7a:da:97:ec:7c:22:da:5d:1f:30:57:
                    42:ee:3e:d8:e3:60:53:f1:5e:9f:3b:ff:e0:27:b4:
                    5d:14:16:ec:fb:d9:68:8f:6a:84:66:9a:9c:5c:87:
                    3d:99:fb:38:69:0c:12:16:bf:19:5b:d3:f4:eb:b7:
                    1e:3d:3e:48:13:0e:2d:cc:6b:c1:5f:6f:76:f1:3c:
                    a2:ef:7d:29:0f:25:ea:3a:36:ca:6b:d7:f2:31:30:
                    d8:6b:d5:3c:21:3e:cf:70:46:16:8b:41:94:5a:f0:
                    22:45:a0:6e:ae:20:c3:a8:bc:62:89:41:d1:bf:df:
                    75:e7:1a:05:4d:91:8d:63:c5:cf:a2:82:6d:f5:47:
                    97:0e:3a:e0:94:37:e0:01:97:f7:60:25:bd:e4:dc:
                    c6:e0:ca:53:70:37:73:e1:27:b4:f5:af:42:77:ba:
                    5d:3b:8c:e5:5e:ea:88:4c:37:fb:e2:56:33:3f:32:
                    f6:3c:a1:be:ca:a2:f3:cb:ab:a6:29:b6:6d:c0:52:
                    5b:93:d0:05:3c:6d:42:00:3b:ed:59:b4:8c:5f:42:
                    4a:2c:15:72:e3:10:fa:48:24:23:7e:18:ca:ff:38:
                    3a:41:a4:17:3a:64:32:fb:c5:aa:92:07:6d:08:2d:
                    9b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A9:40:84:6D:DD:C1:9E:EC:87:E3:9E:4A:C5:09:70:D3:CE:90:E4
            X509v3 Authority Key Identifier:
                keyid:56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f6:34:29:a9:5b:55:7c:ad:d4:a6:34:e2:22:b9:da:6e:6d:
         d2:64:38:38:47:c0:ec:37:2f:45:b9:ee:93:49:15:2f:5b:8c:
         0f:e4:f3:0a:9e:4e:34:b1:8d:56:52:8f:af:46:93:9f:1d:0b:
         ca:5f:dd:fa:ee:0c:83:d0:0b:52:32:36:b8:8c:2b:b5:af:35:
         27:54:3a:1c:7b:a2:7d:12:f1:b6:f7:fb:7b:eb:44:b4:28:f8:
         0a:2c:a9:a3:bd:15:f1:a5:fe:28:f3:03:16:ad:66:74:b4:d6:
         1d:ed:c5:3e:e5:19:f7:8f:f8:b0:53:d6:48:02:ae:0e:e2:4c:
         5c:b6:aa:c8:e7:7a:9a:27:3b:78:9c:c9:1e:f3:95:ab:6c:12:
         9d:8f:86:1f:90:4f:31:96:50:1e:82:6d:85:73:b0:c4:4c:ea:
         8e:5f:86:a9:27:1b:83:2e:29:8e:ca:3f:c7:5a:71:fb:23:3c:
         9c:b2:18:2a:bb:d0:d4:56:fe:d6:4f:fb:0a:d0:67:20:99:8c:
         a0:e9:bd:bb:b4:d0:1e:5b:02:c6:e4:5e:34:3c:a8:1b:c5:00:
         69:c9:75:8c:f8:11:a7:ff:08:44:46:68:11:57:4d:28:38:1d:
         a6:0d:aa:1a:05:bb:88:a2:d7:f8:0a:a2:14:ad:a1:9b:66:73:
         85:e3:51:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:47 2025 by rpki-client on console.sobornost.net