Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
File:                     vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft (raw, json)
Hash identifier:          qk9SkBJrr+qYTpdM8MgmjdYRKRcF2M9/SVGQEPtA9HU=
Subject key identifier:   B3:6F:20:4E:E4:24:09:0A:24:F6:A5:CA:2A:7B:63:2A:BE:18:87:51
Authority key identifier: BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52
Certificate issuer:       /CN=A919F06A/serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
Certificate serial:       0732
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
Manifest number:          071A
Signing time:             Sat 26 Apr 2025 21:31:52 +0000
Manifest this update:     Sat 26 Apr 2025 21:31:52 +0000
Manifest next update:     Sat 03 May 2025 21:31:52 +0000
Files and hashes:         1: vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl (hash: mKn+MvBmIvRjLQQynBpcmtokYIno9lN8n44zacPZj7g=)
                          2: 0ECDB4C65E7011EC8FE5F56DC4F9AE02.roa (hash: 92lyXbjZ3ilhbPTi3bIiIM9WxhIE8HDP3fXz3FH+B/0=)
                          3: 7D232E6033A611EB8B013530C4F9AE02.roa (hash: 7lwNL3t/JdazFMQVAAWu8rGphtVMmdlmg5/1e8s3fEI=)
                          4: 7C82C65A33A611EB8B013530C4F9AE02.roa (hash: Yj2T58ly70pMGwVD+Jsc26BVVEHVfIBLr1Bjam0IA4A=)
                          5: 7B44296E33A611EB8B013530C4F9AE02.roa (hash: VBFrb7hmUOgI2LuDUX5a6ibtYNZDHswnzaDArlyUmUg=)
                          6: 7ABF29BC33A611EB8B013530C4F9AE02.roa (hash: Keuv9NsRlWrR3IwwftF+Sux47myitkAj0p1n+TAix+8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl
                          rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:11:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1842 (0x732)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F06A, serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
        Validity
            Not Before: Apr 26 21:31:52 2025 GMT
            Not After : May  3 21:31:52 2025 GMT
        Subject: CN=680d50c8-f3ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fd:6d:47:d1:d7:fd:55:41:9d:f3:7f:8d:cd:
                    2a:e2:76:30:3a:2c:7f:7a:7f:54:04:30:f8:fe:70:
                    c8:3d:91:e4:29:73:5a:88:a8:ac:7b:82:75:64:8a:
                    62:c7:44:d8:72:75:ba:eb:7c:e2:ba:f3:c1:a0:a6:
                    8b:ef:6e:88:58:ee:17:89:9f:d2:9d:e1:e5:f3:0b:
                    a7:c1:89:6c:a4:a0:a2:b9:89:3d:41:64:04:e8:82:
                    0e:be:4a:bc:bb:43:54:f5:e9:4f:81:bc:46:b3:c5:
                    1c:93:6b:27:c9:e6:c6:49:e2:96:8d:a3:5f:a7:15:
                    8d:1e:8e:e2:d9:21:86:f7:53:69:83:d4:f0:22:12:
                    11:9f:96:54:5e:ec:0c:e4:8b:1b:a7:e0:36:e4:27:
                    f1:64:e7:34:78:29:9a:ff:b8:03:71:22:9f:65:2d:
                    e9:39:6b:78:33:fd:0e:d8:a2:c9:76:a6:92:23:57:
                    bb:74:c6:0d:9c:79:75:4b:46:5b:e0:40:7e:f7:1e:
                    3c:48:1f:8e:da:db:61:b4:e3:7c:43:51:13:ce:1f:
                    10:08:00:0f:84:47:2a:58:36:f9:ab:0c:c4:83:38:
                    9c:1c:19:9b:b3:a8:7d:25:14:37:b8:86:0f:5c:ba:
                    41:f9:a7:4a:fe:1e:b8:aa:9c:5f:59:af:80:6d:28:
                    89:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:6F:20:4E:E4:24:09:0A:24:F6:A5:CA:2A:7B:63:2A:BE:18:87:51
            X509v3 Authority Key Identifier:
                keyid:BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:96:b5:f8:c2:1c:cf:64:4c:96:78:ae:70:38:b3:d1:ff:d0:
         d8:e9:57:5b:a8:fe:ca:87:73:9e:53:67:43:32:c0:f5:59:f8:
         bf:b5:af:90:7f:ab:bd:16:e2:6c:69:c0:d8:40:b9:99:67:1e:
         39:7e:18:63:79:32:bd:d3:1a:06:b3:a3:d0:15:14:f0:8f:88:
         f9:7c:24:b4:7c:ba:f6:9e:d1:cb:60:85:1d:60:67:00:c6:69:
         1f:50:2d:2c:aa:0f:82:cc:aa:53:9c:50:e0:80:7f:88:fd:7f:
         86:11:be:b7:83:a8:92:3a:71:bf:df:b6:0f:fc:df:95:c0:27:
         b3:04:8b:1a:26:e7:53:bd:2f:23:60:8f:da:ec:70:e2:ea:12:
         e1:63:55:a1:6a:82:4a:79:f9:32:dc:2a:c9:ba:65:cc:78:92:
         73:ab:37:4d:4a:c7:79:cb:71:1a:9d:a8:95:e5:3d:3d:d6:a0:
         22:0e:78:2a:c7:b1:21:e6:04:84:9a:40:5d:df:d6:66:80:ce:
         93:0f:1b:5e:82:5c:48:02:96:f4:64:fe:ca:52:14:bf:f0:6b:
         2b:7f:27:75:1c:89:c5:ba:25:ee:cc:a2:be:3a:bc:cf:05:a2:
         fb:d1:8f:8b:23:e8:85:7a:ec:44:ba:44:09:f2:f8:7f:2b:f4:
         a3:7e:9c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:07 2025 by rpki-client on console.sobornost.net