Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
File:                     VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft (raw, json)
Hash identifier:          WakqREx57rFgT6EbvhSCqYU0mCf90j6JpOLOPx6THBc=
Subject key identifier:   1E:62:FC:35:21:D8:B1:F9:BC:0E:5B:F5:74:EF:0D:D5:B7:A5:FA:D8
Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E
Certificate issuer:       /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E
Certificate serial:       0420
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
Manifest number:          0408
Signing time:             Fri 25 Apr 2025 00:17:53 +0000
Manifest this update:     Fri 25 Apr 2025 00:17:52 +0000
Manifest next update:     Fri 02 May 2025 00:17:52 +0000
Files and hashes:         1: VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl (hash: Z9MGfFPqc2OJf4cCBChnMo/+hbsqdZ4jt2CktEnOpZY=)
                          2: 616435103F3E11EE81024074C4F9AE02.roa (hash: BV7IOs58jkocun9KOxJEZWid0CjNqRr4h3oLm+oM9XA=)
                          3: 168BE8747EEE11ECAB036C59C4F9AE02.roa (hash: ftvhnzXdw5KRVDKn9LZuR/Je36inLhxCbKOybLuc7M4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl
                          rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:17:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1056 (0x420)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDAD4, serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E
        Validity
            Not Before: Apr 25 00:17:52 2025 GMT
            Not After : May  2 00:17:52 2025 GMT
        Subject: CN=680ad4b1-f71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:16:a5:6b:1c:c4:a0:53:ad:32:e2:da:80:ea:
                    35:64:bf:65:ca:80:8d:43:5b:0e:63:f7:e7:e9:25:
                    36:5d:88:fe:e6:85:c3:e9:04:9b:22:17:c4:45:08:
                    27:ec:03:dc:ba:15:dc:eb:89:91:9b:ff:f4:11:80:
                    80:87:42:b5:cb:4e:70:c5:41:8a:d7:f3:ea:88:a9:
                    24:18:21:07:36:58:b0:5a:b1:bf:b0:65:52:83:0a:
                    5c:ed:e7:7a:b4:34:c8:c0:58:5e:b3:d0:2a:1e:d4:
                    74:02:0a:64:e0:df:7f:d9:23:9c:6c:47:2c:a3:b4:
                    0e:06:da:08:af:4c:56:28:1c:a2:b0:6a:ef:9f:24:
                    b5:6a:e4:0f:8e:7d:32:72:00:fb:6b:58:63:f9:d9:
                    33:3a:9f:c6:5a:9b:ac:55:21:ed:b2:fb:2e:e8:de:
                    df:d7:d7:ce:f8:01:a8:61:30:dd:64:58:37:b4:03:
                    67:ee:77:b3:35:3e:9c:8b:a8:63:9c:c3:ba:c1:a5:
                    43:47:6f:8b:91:a9:6a:71:77:ab:f1:84:77:cd:a8:
                    8f:f7:55:12:0e:98:f1:a4:d0:35:0d:5b:77:e5:cb:
                    44:43:4e:be:53:05:9d:04:07:80:fe:f9:81:3b:29:
                    e8:3b:fa:a0:e6:ff:09:89:46:12:ca:7e:75:44:70:
                    70:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:62:FC:35:21:D8:B1:F9:BC:0E:5B:F5:74:EF:0D:D5:B7:A5:FA:D8
            X509v3 Authority Key Identifier:
                keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:be:3b:23:4d:49:42:23:7f:10:e4:70:11:aa:ae:00:bb:77:
         a5:85:d2:30:75:97:93:2a:1c:fb:ff:0a:81:da:b1:ae:ea:e2:
         e7:b8:59:18:36:e7:52:8f:80:9d:88:ec:fc:e7:c3:9f:c6:08:
         0b:ce:c0:7c:92:f6:dd:e9:75:17:42:3e:2d:63:da:bb:3b:b2:
         ae:aa:6c:04:dd:da:8c:83:65:39:e9:14:ea:fd:5f:7e:38:2c:
         a8:47:e4:4c:07:e5:9c:33:46:74:dd:18:c1:ff:2b:23:91:4e:
         7f:5b:55:49:6d:a8:f1:11:77:7c:9a:38:2d:4b:2d:a3:4f:d8:
         92:e2:92:76:39:1e:81:e4:b5:8b:f1:96:b2:e7:da:af:6d:e4:
         4a:7c:00:a4:80:f1:e1:ce:60:a4:42:50:b7:c6:e2:01:a2:cc:
         1a:b2:29:cf:a1:73:04:2d:00:33:c7:d6:ed:b1:d3:eb:99:0a:
         8f:43:50:87:12:17:28:58:a7:eb:cf:ad:fb:da:01:c3:86:44:
         9a:70:08:13:7b:81:0b:87:f5:1d:30:8c:86:aa:dd:16:86:e0:
         05:fc:0c:8c:12:2b:bc:e3:a1:f1:9d:0b:ef:c7:38:de:5f:3b:
         2a:21:aa:c6:65:ff:a0:6b:e6:14:ac:f3:3f:8a:e7:77:a2:bb:
         83:4a:bb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:23 2025 by rpki-client on console.sobornost.net