Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
File:                     vv---O_FAnw03_cEx5-ygSpxMx4.mft (raw, json)
Hash identifier:          qHiM+F/UvBC8rKTM/MNs6nBJYN96HhEQW1yibd6RQaE=
Subject key identifier:   CD:70:B6:45:2A:72:58:2B:90:8E:4F:2C:A8:9B:D6:86:2F:10:4A:E6
Authority key identifier: BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E
Certificate issuer:       /CN=A91A4B39/serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
Certificate serial:       0101
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
Manifest number:          FB
Signing time:             Sun 27 Apr 2025 04:07:51 +0000
Manifest this update:     Sun 27 Apr 2025 04:07:51 +0000
Manifest next update:     Sun 04 May 2025 04:07:51 +0000
Files and hashes:         1: vv---O_FAnw03_cEx5-ygSpxMx4.crl (hash: UVApqST6OifXpYdFVV5/lwHkHN/oMQlFFryzcFWJuWg=)
                          2: 32E7A4B0AF9111EEA3B14C2BC4F9AE02.roa (hash: fRxukvtDkGIC3D8QBaI9ZwcR1VcfpvwmoqPaTDJZIsg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl
                          rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B39, serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
        Validity
            Not Before: Apr 27 04:07:51 2025 GMT
            Not After : May  4 04:07:51 2025 GMT
        Subject: CN=680dad97-6e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4e:61:5a:69:2a:5f:29:b1:09:74:d2:4d:ca:
                    f5:bd:56:8b:70:09:b2:97:b1:56:cf:ce:1c:11:0e:
                    60:6c:cb:72:b1:ca:22:ef:73:1e:b9:c5:6d:ae:b4:
                    09:8f:b3:51:47:24:02:2d:a0:33:77:29:8c:20:a7:
                    d3:56:ce:9c:48:9d:1e:74:bd:3c:cd:6f:db:d0:36:
                    24:91:b3:e2:8f:31:30:18:08:25:e1:2c:63:e6:1f:
                    62:2a:e2:79:86:85:39:e8:58:d8:e0:3e:7c:58:77:
                    f9:2d:ff:e3:6f:a4:fc:85:af:66:2b:a9:be:e1:a5:
                    5b:f5:92:92:ef:ba:90:b7:8f:31:06:10:85:78:8c:
                    69:54:96:54:d1:f6:fe:30:82:27:f7:92:62:ea:3f:
                    be:15:83:cf:5f:92:ee:22:e4:ab:4a:7a:01:60:22:
                    35:78:9a:de:e9:02:5a:be:7b:66:d4:bf:71:ad:74:
                    40:d3:73:04:d2:f0:b3:81:10:ea:d7:70:0f:71:97:
                    6f:c1:a6:f2:a7:aa:56:97:4f:26:d3:12:c8:e3:25:
                    31:09:f3:5e:3b:71:98:bb:bd:cd:f8:dd:5b:e0:b6:
                    19:c3:3c:c0:25:7c:8e:82:21:b5:89:5c:a8:dd:77:
                    c9:03:f5:87:8b:34:4c:11:c7:86:49:a7:f0:2b:ca:
                    51:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:70:B6:45:2A:72:58:2B:90:8E:4F:2C:A8:9B:D6:86:2F:10:4A:E6
            X509v3 Authority Key Identifier:
                keyid:BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:89:ed:37:b7:ba:36:61:0c:e8:a4:d9:1f:96:85:38:fd:29:
         69:f6:5f:27:c3:e5:3e:e9:d0:ed:d6:f4:1d:c2:ab:34:d4:1c:
         18:0c:31:56:3c:98:7e:c0:a5:1f:71:40:e1:fb:93:4d:55:25:
         a9:55:71:0b:54:4e:c7:fb:ab:3e:ad:e1:e2:22:b5:de:bf:01:
         5c:2d:e6:e0:34:d2:bd:e3:ec:81:3a:45:54:ee:2b:ae:4b:38:
         75:68:b2:16:5f:e3:4f:b5:3e:37:43:69:04:22:95:0d:b2:03:
         32:07:d2:fe:92:e1:20:90:ff:cf:a1:dc:4a:e6:43:cc:a4:29:
         b6:9f:e3:73:83:11:bf:53:cc:57:1d:a8:37:d5:83:41:fc:fd:
         f4:8b:49:e8:19:b6:a6:7e:5d:dc:e8:4a:86:06:44:7d:76:e4:
         35:6d:da:e0:19:fd:8f:df:4d:09:07:68:f4:21:e3:54:18:49:
         33:f3:ab:d7:8b:c3:1e:bd:21:11:fa:f7:70:48:fb:06:0e:d1:
         77:70:8b:cb:94:d8:10:e1:f3:4d:21:2d:2a:e2:45:78:23:03:
         bd:a0:2c:e1:79:e2:a5:3e:6c:4b:46:97:e7:28:33:fe:ec:c4:
         75:7a:87:24:11:21:30:0c:b3:56:d2:af:46:12:61:4a:33:b7:
         f1:ac:bb:6c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRCMzkxMTAvBgNVBAUTKEJFRkZCRUY4RUZDNTAyN0MzNERGRjcwNEM3OUZCMjgx
MkE3MTMzMUUwHhcNMjUwNDI3MDQwNzUxWhcNMjUwNTA0MDQwNzUxWjAYMRYwFAYD
VQQDEw02ODBkYWQ5Ny02ZTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoE5hWmkqXymxCXTSTcr1vVaLcAmyl7FWz84cEQ5gbMtyscoi73MeucVtrrQJ
j7NRRyQCLaAzdymMIKfTVs6cSJ0edL08zW/b0DYkkbPijzEwGAgl4Sxj5h9iKuJ5
hoU56FjY4D58WHf5Lf/jb6T8ha9mK6m+4aVb9ZKS77qQt48xBhCFeIxpVJZU0fb+
MIIn95Ji6j++FYPPX5LuIuSrSnoBYCI1eJre6QJavntm1L9xrXRA03ME0vCzgRDq
13APcZdvwabyp6pWl08m0xLI4yUxCfNeO3GYu73N+N1b4LYZwzzAJXyOgiG1iVyo
3XfJA/WHizRMEceGSafwK8pRtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1wtkUq
clgrkI5PLKib1oYvEErmMB8GA1UdIwQYMBaAFL7/vvjvxQJ8NN/3BMefsoEqcTMe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIzOS85NTA3NEEwQUFG
NTYxMUVFQTY1NUI1ODFDNEY5QUUwMi92di0tLU9fRkFudzAzX2NFeDUteWdTcHhN
eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3Z2LS0tT19GQW53MDNfY0V4NS15Z1NweE14NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEIzOS85NTA3NEEwQUFGNTYxMUVFQTY1NUI1ODFDNEY5QUUwMi92di0tLU9fRkFu
dzAzX2NFeDUteWdTcHhNeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAYie03t7o2YQzopNkfloU4/Slp9l8nw+U+6dDt1vQdwqs01BwYDDFW
PJh+wKUfcUDh+5NNVSWpVXELVE7H+6s+reHiIrXevwFcLebgNNK94+yBOkVU7iuu
Szh1aLIWX+NPtT43Q2kEIpUNsgMyB9L+kuEgkP/PodxK5kPMpCm2n+NzgxG/U8xX
Hag31YNB/P30i0noGbamfl3c6EqGBkR9duQ1bdrgGf2P300JB2j0IeNUGEkz86vX
i8MevSER+vdwSPsGDtF3cIvLlNgQ4fNNIS0q4kV4IwO9oCzheeKlPmxLRpfnKDP+
7MR1eockESEwDLNW0q9GEmFKM7fxrLts
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:53 2025 by rpki-client on console.sobornost.net