Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft
File:                     VyN5TNgiazMfp2TbnkH16ZS9FJU.mft (raw, json)
Hash identifier:          D3mQ32tDTokEOMVa6MgIw4R8+nF5eWH13NDvFmS0F6U=
Subject key identifier:   90:22:83:47:02:97:E9:80:2A:67:92:7F:19:13:84:B8:A2:2F:10:E1
Authority key identifier: 57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95
Certificate issuer:       /CN=A919CAB5/serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495
Certificate serial:       0604
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft
Manifest number:          05F9
Signing time:             Sat 26 Apr 2025 22:35:27 +0000
Manifest this update:     Sat 26 Apr 2025 22:35:27 +0000
Manifest next update:     Sat 03 May 2025 22:35:27 +0000
Files and hashes:         1: VyN5TNgiazMfp2TbnkH16ZS9FJU.crl (hash: QXyAKnRtUyWB/e6denendtvq80/GnTH/jM0yghGu++k=)
                          2: BA9447BCA7D111EB8F85BA22C4F9AE02.roa (hash: GC/6oaD4AQ/2H6+sX9Xz5uvEcf7TzkAqzavO0iAfjKE=)
                          3: 5533E6AEBD3711EB8D76EF31C4F9AE02.roa (hash: WALscRknOOfWfuWELmo7B7jUjxlqno4poZ1zMYtG2IA=)
                          4: CE84D1823BFF11EE80C18D54C4F9AE02.roa (hash: riMjOPqSGjKyCo++U5ix378hYNiW38uauHvvf7Cl25I=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl
                          rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:35:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1540 (0x604)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CAB5, serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495
        Validity
            Not Before: Apr 26 22:35:27 2025 GMT
            Not After : May  3 22:35:27 2025 GMT
        Subject: CN=680d5faf-3811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9a:29:b0:58:c1:68:7e:84:a8:51:40:76:f8:
                    66:91:f6:08:d7:74:03:5d:dc:7e:c4:3c:af:ad:ec:
                    38:e3:14:68:04:d8:67:72:01:76:16:4b:74:c8:ce:
                    89:86:dc:dd:cb:55:52:8e:1c:3f:a0:9b:00:70:d1:
                    29:5f:71:2d:78:75:9b:90:e3:06:83:02:e7:f8:14:
                    9d:c8:f6:83:6c:44:c4:67:20:32:8b:7f:f8:8a:52:
                    b9:e4:14:2f:c5:55:96:82:e2:ad:c5:8d:c6:15:a0:
                    fc:c9:bc:20:ad:fa:bd:66:2f:0a:1a:40:10:c0:d2:
                    2a:bb:8b:c7:7b:49:24:2a:a2:eb:98:a7:93:8d:40:
                    e3:b0:81:e4:83:f7:0a:5f:31:7d:79:a0:c4:4a:51:
                    11:8a:eb:f4:75:89:ed:32:1f:c9:1a:d7:d7:03:2c:
                    c9:00:76:d0:e1:12:15:ed:5e:2a:10:f6:f4:18:78:
                    9f:32:e5:cd:4d:19:ba:25:d1:f8:4b:ed:24:63:b0:
                    ba:bd:01:e8:49:1d:1a:0d:29:68:bc:d1:8d:e3:80:
                    0e:41:12:ba:fe:88:f2:0b:f6:d2:48:df:0e:1e:be:
                    95:a5:37:ed:7f:63:5e:e7:ec:76:18:94:9c:55:a8:
                    2b:26:0a:54:f0:5c:aa:cb:0b:1c:6e:49:3c:26:1a:
                    35:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:22:83:47:02:97:E9:80:2A:67:92:7F:19:13:84:B8:A2:2F:10:E1
            X509v3 Authority Key Identifier:
                keyid:57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:44:60:04:23:51:3c:58:8a:68:ed:44:66:4f:15:7c:0a:31:
         05:6c:4f:3d:39:d5:a1:9e:e6:73:cb:d0:78:b2:fe:0b:d5:5b:
         f3:4c:e1:05:08:61:f5:e6:2d:b5:13:81:a2:d8:b5:59:01:0f:
         d2:6a:64:a6:ae:81:f1:ca:b6:88:81:9e:69:a1:f6:76:46:92:
         cd:61:6d:57:f9:6a:5b:d3:bd:6f:e3:47:62:35:a2:26:4b:50:
         52:ee:8d:1d:e9:ee:bf:37:de:be:21:1b:a4:1b:fd:19:54:ef:
         43:97:32:ac:94:15:8c:c7:ee:27:e3:82:1c:ef:1d:54:76:7a:
         23:dc:6d:a5:26:b1:83:2d:4f:1a:36:37:e7:46:df:cb:d7:d1:
         45:ed:2a:01:a1:84:7b:00:7f:7c:45:9a:cd:19:fa:b4:e7:5c:
         d7:20:95:0f:24:e5:5f:eb:cd:fe:60:83:35:d8:1a:1b:7e:68:
         85:58:b7:93:8c:dc:2b:11:96:81:68:f8:b4:e0:a8:cc:e7:b0:
         d2:6d:9e:06:0b:74:1a:12:e2:03:f6:93:dd:dc:89:02:91:01:
         78:55:d0:fd:a3:a2:6f:7f:59:33:3b:1d:cb:10:d4:2b:5f:af:
         82:4c:89:99:d1:c4:7c:4f:f4:70:85:7c:82:9f:d3:a2:8d:c6:
         b4:47:c1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:01 2025 by rpki-client on console.sobornost.net