Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
File:                     vxobyMAsIDYtD9n5K8AGoolejIA.mft (raw, json)
Hash identifier:          /BXVQO1Dia4QBcLjMijdpbXsMGnU6i4wea45gTdX63g=
Subject key identifier:   F4:14:D5:8C:3C:C8:20:71:86:65:9C:C3:FD:DE:39:A6:54:88:09:6A
Authority key identifier: BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80
Certificate issuer:       /CN=A91A423B/serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80
Certificate serial:       078D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
Manifest number:          0788
Signing time:             Sat 26 Apr 2025 21:03:21 +0000
Manifest this update:     Sat 26 Apr 2025 21:03:20 +0000
Manifest next update:     Sat 03 May 2025 21:03:20 +0000
Files and hashes:         1: vxobyMAsIDYtD9n5K8AGoolejIA.crl (hash: MN0xdmjUp8b7gv74FCUCre67v0ERgRhdMrMHzgf4/sA=)
                          2: ABD5003E079C11EBA7C04832C4F9AE02.roa (hash: 1LIqaLcLd8sIbPgwe6w2+ZfDiBIad4OGJXBnSw3QIfc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl
                          rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1933 (0x78d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A423B, serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80
        Validity
            Not Before: Apr 26 21:03:20 2025 GMT
            Not After : May  3 21:03:20 2025 GMT
        Subject: CN=680d4a18-a323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d5:c1:74:4f:6c:33:ef:2e:f3:d1:7d:6a:01:
                    39:36:94:7b:c8:0d:f0:3a:21:a5:43:23:44:7c:3b:
                    91:5b:e9:82:35:b9:c5:0f:76:df:49:70:35:a0:9e:
                    50:ad:a0:56:ae:d6:53:6c:47:78:1c:9c:b4:23:63:
                    ac:95:30:b0:af:ed:e4:93:ba:36:ee:c4:6a:c8:c6:
                    0b:a0:8f:ba:a7:1e:9c:d3:e2:fa:34:29:f9:a2:a0:
                    5d:2f:c5:ff:d0:ff:74:29:73:f9:ab:de:25:5d:7e:
                    ae:95:e1:5c:0d:44:b4:35:ff:27:5d:a8:58:c7:22:
                    6d:bc:41:63:a8:67:66:a3:b7:64:10:04:76:cd:ee:
                    13:e9:cb:bd:86:1b:3f:98:70:02:4c:fd:cc:fa:96:
                    35:a4:84:37:3e:3f:c5:c1:f4:fd:87:01:16:eb:9e:
                    6f:f9:6d:ee:85:31:ef:e8:36:d5:71:97:75:57:4b:
                    16:92:bd:c8:60:f8:d0:8f:94:d6:14:ff:3b:da:70:
                    fb:72:76:74:87:bf:0f:47:8e:77:5d:c5:60:0a:f7:
                    db:5f:a4:e6:cc:91:17:6d:b9:b5:79:f8:bc:73:6b:
                    ff:22:03:30:b0:7f:f9:8e:23:7a:97:e2:98:bf:d0:
                    2b:5a:0e:dc:b2:89:e5:95:2c:9f:35:12:dd:89:c1:
                    d8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:14:D5:8C:3C:C8:20:71:86:65:9C:C3:FD:DE:39:A6:54:88:09:6A
            X509v3 Authority Key Identifier:
                keyid:BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:58:97:13:30:ea:54:2f:af:a2:e3:4b:c9:52:30:c0:6a:73:
         3d:f1:57:fa:32:11:62:13:80:c0:c3:13:32:b8:91:02:33:fc:
         50:7c:65:d1:21:0f:d9:a6:da:13:5e:b0:1e:3e:af:ec:7e:87:
         29:8c:99:ae:d9:d7:76:70:5f:e1:34:1c:9d:8c:56:92:a7:02:
         30:88:5c:73:0b:b3:9a:91:9d:1c:73:d0:60:df:67:03:a0:84:
         c7:7f:ef:b1:9f:47:f8:d0:40:ec:dd:10:1b:05:12:b7:a8:be:
         2e:6e:e9:db:b2:95:be:82:a3:d4:20:2c:98:4b:9c:13:65:03:
         7a:c9:21:33:ca:99:99:52:fe:b5:aa:b4:b9:b7:91:05:5a:2a:
         be:77:34:28:df:3b:b1:87:ec:0e:ee:d5:0a:23:4d:61:4f:c7:
         2e:03:96:29:5d:ab:30:f7:87:b8:ed:3e:d9:32:c1:84:1a:75:
         de:d2:eb:cb:cd:c1:72:c7:f8:08:f6:29:43:ce:db:40:8e:e5:
         2c:db:4c:8c:bc:73:5b:4e:c6:bc:a6:2c:ca:08:21:0c:bf:e5:
         4b:1a:45:a6:65:89:ff:2e:19:7a:07:35:4c:44:10:19:2f:73:
         20:81:cc:04:44:ee:e8:0f:93:74:32:6d:6a:0c:12:ea:94:9b:
         6e:ea:71:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:08 2025 by rpki-client on console.sobornost.net