Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
File:                     voUqizt-pcWsWlKqy4UqAaTN0II.mft (raw, json)
Hash identifier:          O6blZNRZgLYmNy27GC9YcEaRl2zhURRnAjvavbFz3as=
Subject key identifier:   DD:36:FD:3A:D7:D7:29:00:F1:17:D2:EF:85:95:A2:D3:FF:14:51:26
Authority key identifier: BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
Certificate issuer:       /CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Certificate serial:       0450
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
Manifest number:          043A
Signing time:             Sun 27 Apr 2025 00:00:38 +0000
Manifest this update:     Sun 27 Apr 2025 00:00:37 +0000
Manifest next update:     Sun 04 May 2025 00:00:37 +0000
Files and hashes:         1: voUqizt-pcWsWlKqy4UqAaTN0II.crl (hash: fP8qcW/BC0L+iqGs+OY7psp2f5H0sfmhNCJ68oCADGU=)
                          2: D717B9F0B7E511EFB5F63E6DC4F9AE02.roa (hash: R/nnjeAR+tZePhFeIgEDIZOhg5pi4qQT+4iwQfx8ekU=)
                          3: D254B444679111EF8A2C9062C4F9AE02.roa (hash: KIM/sEwaQaYFPC8qF/5+qRUkUFtySui4RoXzgpLXzmc=)
                          4: 14F55DEAB7E611EF9B9D9F6DC4F9AE02.roa (hash: BIPMm9ibDgvfx7NU935+UV2sEA5f17RgI+qcbtg58kw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
                          rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1104 (0x450)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF428, serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
        Validity
            Not Before: Apr 27 00:00:37 2025 GMT
            Not After : May  4 00:00:37 2025 GMT
        Subject: CN=680d73a6-258e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:06:cd:d7:7a:f7:59:ea:79:08:98:53:1d:00:
                    16:6d:42:e2:dc:e4:e6:e1:91:d0:53:5d:7f:97:24:
                    de:45:41:75:58:89:9f:2f:32:69:54:24:3a:89:d2:
                    6d:76:1d:0a:09:e7:22:35:c1:9f:35:39:72:5a:50:
                    1d:04:54:70:73:87:69:73:1c:62:cb:4d:cb:3f:4d:
                    63:25:5e:0d:32:c8:14:20:56:87:76:cc:73:fc:d3:
                    3b:b7:a9:49:7a:3c:82:0b:83:af:20:a1:96:d4:a9:
                    b0:3a:51:95:b9:bc:d6:1d:8d:2e:b7:79:92:d3:4a:
                    b8:04:82:27:62:8f:d7:8b:0c:a4:62:38:ef:75:8e:
                    1b:19:4e:30:7a:62:ba:ba:7c:a8:62:d8:dc:b6:2c:
                    0e:64:a0:0c:5c:1d:e2:89:e1:77:99:60:2a:21:7b:
                    06:16:76:dd:68:07:a8:9e:e2:eb:37:ca:69:9c:6d:
                    6a:89:b7:35:6d:60:ed:e9:c6:20:a6:21:d1:08:5a:
                    f6:f9:fd:b7:12:6d:0a:61:8a:83:0b:d3:3d:48:c1:
                    c3:30:88:d3:02:48:ab:ee:e6:24:ec:45:4a:a6:27:
                    a4:98:18:08:06:cf:3b:89:28:88:1c:98:a7:6a:d7:
                    1d:c3:96:21:b7:77:72:cb:38:18:2c:50:0d:77:03:
                    6a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:36:FD:3A:D7:D7:29:00:F1:17:D2:EF:85:95:A2:D3:FF:14:51:26
            X509v3 Authority Key Identifier:
                keyid:BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:85:05:86:84:15:a8:6b:4f:0c:1b:50:cd:e7:7a:42:c6:b0:
         9b:31:bc:73:95:be:05:37:9a:c1:b6:4e:f1:eb:b8:52:76:fc:
         fd:c3:3b:ec:07:a4:5c:e8:40:c1:69:58:d2:0b:d1:a6:c5:49:
         63:b0:a1:89:71:d4:61:91:83:d4:07:9a:bd:94:bd:20:e4:1d:
         93:b0:16:db:92:70:af:d4:e1:af:ad:cf:c4:2d:20:ae:ba:d8:
         71:db:70:57:a0:60:b9:b2:7f:f1:33:a4:2d:8b:f8:67:78:95:
         7d:ff:54:f2:af:45:3f:e5:1f:2b:f9:19:de:ec:ef:91:df:26:
         54:a3:cb:11:f4:db:b7:68:bf:70:07:4a:74:09:65:09:67:21:
         b5:28:f8:ab:47:4d:27:8d:8e:01:fd:ac:3a:a3:da:03:9e:8a:
         3a:59:d2:07:39:cb:e1:79:65:6a:ab:65:67:d9:ab:c4:3e:21:
         41:b4:7b:a5:12:75:5b:33:a6:a8:4f:9b:c6:0c:cd:be:56:2a:
         16:dd:e4:04:d0:fa:89:44:f9:a2:39:91:96:f6:cd:d3:cd:2f:
         66:a0:1c:fc:d0:5f:65:b9:76:f6:80:4a:92:6d:0c:91:d3:63:
         a4:f2:74:d8:5c:ae:0b:de:5d:6d:d8:d6:27:fe:d8:57:f9:bd:
         8f:85:20:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:19 2025 by rpki-client on console.sobornost.net