Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
File:                     vJfyb7J4ln3TyjnFndCMaiwjBvk.mft (raw, json)
Hash identifier:          Y6dQNgOTSjzsIBxBA9TPW7QbKIumCqE9yHATTtasg7E=
Subject key identifier:   98:37:EA:AE:8B:AC:22:5B:8D:65:7C:E0:53:3A:0C:E5:FF:0B:6A:54
Authority key identifier: BC:97:F2:6F:B2:78:96:7D:D3:CA:39:C5:9D:D0:8C:6A:2C:23:06:F9
Certificate issuer:       /CN=A9171845/serialNumber=BC97F26FB278967DD3CA39C59DD08C6A2C2306F9
Certificate serial:       04D0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
Manifest number:          04C8
Signing time:             Sat 26 Apr 2025 23:29:45 +0000
Manifest this update:     Sat 26 Apr 2025 23:29:44 +0000
Manifest next update:     Sat 03 May 2025 23:29:44 +0000
Files and hashes:         1: vJfyb7J4ln3TyjnFndCMaiwjBvk.crl (hash: A/qfhl+ZJdaHJ0TTzFfATnKnpRDHqKk0qlHilRn6A3U=)
                          2: 8B91EDB420CD11EC97292B78C4F9AE02.roa (hash: eIj7A9yHm5UyaDqD5wlEFgtzeqxaYRyGJ855/hLNbFs=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.crl
                          rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 23:29:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1232 (0x4d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171845, serialNumber=BC97F26FB278967DD3CA39C59DD08C6A2C2306F9
        Validity
            Not Before: Apr 26 23:29:44 2025 GMT
            Not After : May  3 23:29:44 2025 GMT
        Subject: CN=680d6c69-8065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ee:2b:0a:b3:30:50:04:9f:85:bb:86:6c:ec:
                    c1:37:16:a2:e8:47:b9:99:a0:53:3c:54:08:32:6d:
                    d0:38:cf:71:2a:fc:61:e7:ad:88:73:d4:29:20:e8:
                    1b:31:e4:c5:2f:b4:0f:85:44:53:7a:26:39:2a:9c:
                    59:e4:c1:50:d3:a2:64:75:0a:6c:24:f9:fc:23:01:
                    e8:8b:b8:c1:a8:e7:3d:64:59:77:6b:34:9a:c5:e0:
                    35:5b:ed:9d:a1:b7:b0:96:c7:4f:0f:df:c5:24:e5:
                    d9:9e:53:03:6f:63:34:c2:13:77:af:86:e8:e4:c3:
                    55:d8:46:1a:06:2a:5c:4a:03:8a:d2:d5:b2:0e:3f:
                    c3:14:50:e8:9d:a8:b4:47:41:3b:59:e5:f8:69:fc:
                    b4:de:6e:e6:25:7b:51:0d:46:07:89:87:9e:37:5d:
                    1c:31:2f:ae:3a:24:83:ec:95:7f:d4:98:a5:00:9f:
                    4f:c3:63:24:47:fb:51:7e:18:f3:39:45:cb:4c:a2:
                    22:91:51:fe:78:b0:bb:74:65:14:5e:c1:b8:93:6a:
                    3e:83:40:32:f2:58:a3:19:d7:a9:e0:83:1b:d0:86:
                    13:49:8c:46:47:f6:44:71:80:f2:fc:23:d5:10:27:
                    13:88:8c:ca:d0:5f:3d:e4:3d:9a:d7:08:24:ad:7c:
                    88:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:37:EA:AE:8B:AC:22:5B:8D:65:7C:E0:53:3A:0C:E5:FF:0B:6A:54
            X509v3 Authority Key Identifier:
                keyid:BC:97:F2:6F:B2:78:96:7D:D3:CA:39:C5:9D:D0:8C:6A:2C:23:06:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:5d:51:9d:cd:85:b8:3f:93:9b:5b:57:0b:3e:9d:48:01:be:
         f7:ce:9d:ef:4c:85:f9:e7:74:9b:74:a3:de:b2:c8:1a:c2:a8:
         b6:25:4c:29:d1:ee:68:2a:e4:f8:62:58:5d:3f:63:09:39:66:
         a7:95:64:6a:fe:0c:2a:34:e1:44:d8:69:38:b4:e8:1a:5f:f7:
         76:94:85:09:3a:13:59:76:2f:c7:aa:79:c2:f3:ce:6e:19:9d:
         25:1f:ac:18:24:c6:c8:8f:e8:8d:74:1f:bc:c1:39:a5:04:a0:
         89:b4:59:e6:36:a2:12:57:dc:67:01:96:57:a7:09:92:bb:85:
         7a:6d:f5:65:9b:9a:d1:4e:c8:b3:b5:32:c4:36:51:7e:0e:80:
         f1:aa:0f:79:7b:1e:50:76:c8:56:3b:4e:47:4c:f2:29:d1:98:
         80:16:4c:d8:50:2e:8f:6a:26:79:1a:46:52:2e:85:20:04:fb:
         90:8a:33:af:a2:22:70:1d:bb:cc:1d:e3:fe:8a:52:da:53:6c:
         cb:3e:0a:42:8d:a7:ce:a2:fa:2c:de:63:99:2c:d8:1f:90:89:
         4c:b5:e4:d8:ee:d2:18:b3:b6:95:48:cb:28:0b:6a:4f:16:80:
         74:8e:99:58:63:06:d2:4d:17:27:be:ab:72:1a:16:1a:55:67:
         00:2f:21:a0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE4NDUxMTAvBgNVBAUTKEJDOTdGMjZGQjI3ODk2N0REM0NBMzlDNTlERDA4QzZB
MkMyMzA2RjkwHhcNMjUwNDI2MjMyOTQ0WhcNMjUwNTAzMjMyOTQ0WjAYMRYwFAYD
VQQDEw02ODBkNmM2OS04MDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3e4rCrMwUASfhbuGbOzBNxai6Ee5maBTPFQIMm3QOM9xKvxh562Ic9QpIOgb
MeTFL7QPhURTeiY5KpxZ5MFQ06JkdQpsJPn8IwHoi7jBqOc9ZFl3azSaxeA1W+2d
obewlsdPD9/FJOXZnlMDb2M0whN3r4bo5MNV2EYaBipcSgOK0tWyDj/DFFDonai0
R0E7WeX4afy03m7mJXtRDUYHiYeeN10cMS+uOiSD7JV/1JilAJ9Pw2MkR/tRfhjz
OUXLTKIikVH+eLC7dGUUXsG4k2o+g0Ay8lijGdep4IMb0IYTSYxGR/ZEcYDy/CPV
ECcTiIzK0F895D2a1wgkrXyIbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJg36q6L
rCJbjWV84FM6DOX/C2pUMB8GA1UdIwQYMBaAFLyX8m+yeJZ908o5xZ3QjGosIwb5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTg0NS83QjYyQzgwODIw
Q0ExMUVDQjY2QzE0NTJDNEY5QUUwMi92SmZ5YjdKNGxuM1R5am5GbmRDTWFpd2pC
dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZKZnliN0o0bG4zVHlqbkZuZENNYWl3akJ2ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTg0NS83QjYyQzgwODIwQ0ExMUVDQjY2QzE0NTJDNEY5QUUwMi92SmZ5YjdKNGxu
M1R5am5GbmRDTWFpd2pCdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQACXVGdzYW4P5ObW1cLPp1IAb73zp3vTIX553SbdKPessgawqi2JUwp
0e5oKuT4YlhdP2MJOWanlWRq/gwqNOFE2Gk4tOgaX/d2lIUJOhNZdi/HqnnC885u
GZ0lH6wYJMbIj+iNdB+8wTmlBKCJtFnmNqISV9xnAZZXpwmSu4V6bfVlm5rRTsiz
tTLENlF+DoDxqg95ex5QdshWO05HTPIp0ZiAFkzYUC6PaiZ5GkZSLoUgBPuQijOv
oiJwHbvMHeP+ilLaU2zLPgpCjafOovos3mOZLNgfkIlMteTY7tIYs7aVSMsoC2pP
FoB0jplYYwbSTRcnvqtyGhYaVWcALyGg
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:03 2025 by rpki-client on console.sobornost.net