Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
File:                     vkY_wZGbQUKyOCgTgn-3FtbukoM.mft (raw, json)
Hash identifier:          hX/WdVE0ssfGG6ZBI7eW5fbEBDk3vZePv/TnRTf5aNM=
Subject key identifier:   14:12:ED:84:7B:52:D7:CF:E7:EF:3A:6B:1A:34:68:D9:8D:1E:CD:2D
Authority key identifier: BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83
Certificate issuer:       /CN=A91D40BF/serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283
Certificate serial:       074F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
Manifest number:          0740
Signing time:             Sat 26 Apr 2025 21:22:55 +0000
Manifest this update:     Sat 26 Apr 2025 21:22:55 +0000
Manifest next update:     Sat 03 May 2025 21:22:55 +0000
Files and hashes:         1: vkY_wZGbQUKyOCgTgn-3FtbukoM.crl (hash: YPlmLlLklxy5gnsWlKGXT1XjWiZNGajAMWVlXeZG+Zo=)
                          2: 28543AA0BABA11EB8A51C234C4F9AE02.roa (hash: tLbuywK1hQsCi3a1AqRQB3esx6wP54LrqFgdAXcaBdM=)
                          3: ACEBC29CC5B911EBB41FAF2DC4F9AE02.roa (hash: XOt7bB+UgZTY8Thh+DvUt1JxAIDEDKn5j8X2t+ws97c=)
                          4: 2798B9A6BABA11EB8A51C234C4F9AE02.roa (hash: +zcjX2imATb1GbMG2fycsIcaiWvdU6/+K/wkiamqX6U=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl
                          rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1871 (0x74f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D40BF, serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283
        Validity
            Not Before: Apr 26 21:22:55 2025 GMT
            Not After : May  3 21:22:55 2025 GMT
        Subject: CN=680d4eaf-5860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0f:be:e8:83:d8:83:30:0a:a5:c8:72:f7:04:
                    79:cf:7a:d3:ff:b0:9a:91:e4:0f:66:69:c2:fb:bd:
                    1c:66:ba:a3:63:ce:c1:7a:2e:2a:a8:53:b0:42:ce:
                    6d:60:6b:9c:84:9f:de:96:51:0f:37:ed:9f:22:f3:
                    af:af:b7:51:94:c4:f3:18:cb:f3:9f:62:a6:87:2a:
                    9f:46:6a:51:25:75:a4:0d:cd:21:91:bf:9e:fb:2a:
                    3c:df:f9:0b:a3:8d:83:da:d2:63:c4:bd:ba:31:07:
                    e3:8e:45:8b:42:3c:90:77:d4:e1:b2:d2:7e:07:25:
                    bb:21:56:18:bc:a5:0d:09:55:fc:06:dd:f4:cd:87:
                    f1:60:03:66:e1:0a:b8:5d:d2:63:18:2a:59:20:14:
                    e9:e9:a6:f8:f0:f5:9a:05:bf:ca:3f:e4:9b:d4:ff:
                    19:b5:ff:82:05:3d:cc:b6:08:17:50:72:b2:19:af:
                    d2:3c:ca:e1:3f:45:df:0d:14:82:92:a7:28:59:1a:
                    18:80:94:6f:60:6d:6b:e0:1c:21:6e:95:e5:f9:da:
                    93:79:32:17:51:e3:14:f5:c7:27:d5:0d:ab:51:3c:
                    a3:9e:80:34:ac:ab:91:0d:76:09:43:0e:7e:97:d1:
                    fb:a2:b2:da:ab:37:cc:05:ec:f1:10:8f:b3:4d:a1:
                    d5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:12:ED:84:7B:52:D7:CF:E7:EF:3A:6B:1A:34:68:D9:8D:1E:CD:2D
            X509v3 Authority Key Identifier:
                keyid:BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:0a:98:52:fc:b3:0c:bd:cd:bc:26:f9:28:89:fb:6d:f8:20:
         02:ef:fb:f0:20:94:9b:e1:3d:b5:18:89:08:4d:4a:fc:be:51:
         ea:39:db:8e:34:8a:bb:55:76:38:f4:70:4e:a1:d6:76:55:19:
         bf:8f:48:22:18:92:68:8c:f7:a9:02:cd:0c:73:a5:fe:bf:7b:
         62:d8:57:89:dc:10:81:0b:2c:e3:c3:a0:25:ec:01:39:fd:7a:
         fc:24:c7:e5:4c:24:f8:f4:39:eb:55:4c:1f:ea:75:12:94:55:
         13:9e:57:6c:e4:01:dc:43:e8:1b:ab:ae:07:8b:b1:bb:4d:08:
         5b:ca:31:8c:f2:b8:65:63:92:d9:22:5b:65:0c:d0:47:86:20:
         bd:6d:2e:5e:72:ed:ce:50:c0:27:97:62:18:27:14:66:4a:f9:
         59:91:1f:0c:1b:3b:17:12:f0:e2:d9:7d:41:0e:47:2a:a3:ab:
         54:cb:14:ea:53:84:a9:7a:1c:80:11:44:72:1a:1e:77:49:89:
         8c:74:ee:6e:2c:d6:35:49:06:b3:bf:00:b8:19:94:f1:73:49:
         81:0d:a0:92:4b:19:a8:28:f2:e5:36:01:94:c1:e6:11:67:65:
         5c:51:53:9e:0a:01:ae:43:c1:02:64:c1:30:a7:e9:d6:ec:73:
         16:a3:5e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:11 2025 by rpki-client on console.sobornost.net