Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
File:                     Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft (raw, json)
Hash identifier:          xA3ertgLpkrv6SyhYDnDUGiU7556j79/Chj39T6P6og=
Subject key identifier:   F4:CA:B3:E8:03:7E:0C:47:7F:7E:40:A8:A5:6E:69:8A:F3:CC:EF:4B
Authority key identifier: 56:0B:BD:60:06:CE:CD:73:00:D1:52:4C:8A:27:43:9A:BB:F1:59:7E
Certificate issuer:       /CN=A9171172/serialNumber=560BBD6006CECD7300D1524C8A27439ABBF1597E
Certificate serial:       0759
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
Manifest number:          0759
Signing time:             Sat 26 Apr 2025 21:16:26 +0000
Manifest this update:     Sat 26 Apr 2025 21:16:25 +0000
Manifest next update:     Sat 03 May 2025 21:16:25 +0000
Files and hashes:         1: Vgu9YAbOzXMA0VJMiidDmrvxWX4.crl (hash: MnxGJtH6OT3YnKUwzWuHmj0EyzPwYnzmfGn7K2SRHys=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.crl
                          rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1881 (0x759)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171172, serialNumber=560BBD6006CECD7300D1524C8A27439ABBF1597E
        Validity
            Not Before: Apr 26 21:16:25 2025 GMT
            Not After : May  3 21:16:25 2025 GMT
        Subject: CN=680d4d2a-0160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4f:3c:65:82:eb:e8:af:20:a7:aa:b7:61:93:
                    e2:0d:ff:aa:ec:a2:70:57:7d:af:d1:da:df:53:b3:
                    b6:d0:b4:e9:b6:c0:37:76:14:47:96:42:1a:d0:6f:
                    22:3f:c9:0f:59:69:3c:1f:f8:ad:73:ce:3e:d7:5a:
                    e4:22:a4:2c:b3:87:74:20:b4:9e:fc:92:bb:db:75:
                    bf:8e:df:80:1c:a0:40:1c:03:f0:0b:75:2d:ac:c8:
                    3c:f7:cd:2b:b9:70:01:c6:39:24:15:cf:44:e8:a1:
                    a4:76:89:d2:fa:35:fa:94:53:a7:52:70:d9:d2:f7:
                    d1:92:8e:fb:bf:e7:74:32:a2:b7:7e:80:63:86:5d:
                    c1:e9:05:6e:ee:19:a0:7c:15:9c:9a:c4:67:a1:01:
                    ed:ae:79:c7:a1:cf:1a:fe:0b:f2:ed:79:73:55:14:
                    10:f9:e9:74:a5:5b:1a:ef:5e:0b:db:79:4d:4d:a4:
                    b8:e6:6b:9a:37:e4:ed:e4:4c:98:d5:c2:52:11:51:
                    39:c6:6a:cd:63:02:ce:ac:ab:76:d2:9d:1b:ba:57:
                    d0:f2:94:c7:6c:c5:aa:8f:02:81:2f:e3:bb:1a:c4:
                    d0:fb:6b:2d:41:3f:41:b0:17:93:ea:f2:8f:47:66:
                    4d:df:a8:62:01:a7:6b:7d:bb:62:d3:f9:45:1b:97:
                    a8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CA:B3:E8:03:7E:0C:47:7F:7E:40:A8:A5:6E:69:8A:F3:CC:EF:4B
            X509v3 Authority Key Identifier:
                keyid:56:0B:BD:60:06:CE:CD:73:00:D1:52:4C:8A:27:43:9A:BB:F1:59:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:f0:fb:91:7e:66:74:80:0b:ff:d8:37:d8:61:f9:53:ca:30:
         85:8b:5e:c4:85:47:20:8a:d4:e0:2b:e1:4d:ee:8b:5b:77:0d:
         a2:27:a3:0b:63:3c:79:9f:12:6c:4e:1e:1b:8d:3b:6f:1d:f7:
         5d:15:e7:2c:e1:3f:5a:1f:62:63:fa:3f:6d:cb:db:a3:8c:ba:
         1a:0a:4a:15:4a:e7:02:ec:ad:f5:34:34:fa:04:3d:77:8a:19:
         9e:92:0d:1f:31:7a:e0:69:fb:58:6c:08:b4:ef:a4:55:db:a8:
         38:eb:8b:82:73:35:de:10:db:f1:d5:b1:fa:9a:80:a3:be:9c:
         43:a5:76:c0:a0:f5:5d:9c:39:06:21:ac:15:a3:78:7b:37:78:
         de:73:89:36:b6:ba:d1:ec:1d:d9:60:12:02:a4:23:22:c7:9f:
         b9:93:a8:f3:b4:b4:ae:f9:6d:03:5c:c1:e2:15:8f:77:b4:2a:
         82:0c:0f:15:4b:3b:41:3f:c0:3b:63:d9:79:47:f2:90:4d:a2:
         29:f8:2c:c1:00:b6:9c:04:28:38:8a:dc:46:ab:41:de:cd:e6:
         3a:b5:c3:e1:d9:69:c1:7f:fb:41:b4:f6:fc:9a:6e:b2:e2:59:
         82:df:70:ad:38:43:8c:c4:5f:d4:0f:b5:55:2f:35:7f:07:58:
         0f:7e:ba:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:00 2025 by rpki-client on console.sobornost.net