Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.mft
File:                     VV50iV-5CWGfKZw_nQuwhV_YFug.mft (raw, json)
Hash identifier:          PVHJIDuoRTMHRtCwhgoPVQMC/h4Gh0hCE/27U+3I6PE=
Subject key identifier:   1C:B6:AA:34:B7:31:A3:45:0C:01:C6:60:B1:DB:2F:2E:98:3C:8B:0A
Authority key identifier: 55:5E:74:89:5F:B9:09:61:9F:29:9C:3F:9D:0B:B0:85:5F:D8:16:E8
Certificate issuer:       /CN=A9143684/serialNumber=555E74895FB909619F299C3F9D0BB0855FD816E8
Certificate serial:       3479
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VV50iV-5CWGfKZw_nQuwhV_YFug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.mft
Manifest number:          3479
Signing time:             Thu 24 Apr 2025 15:12:14 +0000
Manifest this update:     Thu 24 Apr 2025 15:12:13 +0000
Manifest next update:     Thu 01 May 2025 15:12:13 +0000
Files and hashes:         1: VV50iV-5CWGfKZw_nQuwhV_YFug.crl (hash: Gm9znQF4CMUzH1ibDXv8io7woQg+hRAktp1En2+HBbI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.crl
                          rsync://rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VV50iV-5CWGfKZw_nQuwhV_YFug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 15:12:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13433 (0x3479)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143684, serialNumber=555E74895FB909619F299C3F9D0BB0855FD816E8
        Validity
            Not Before: Apr 24 15:12:13 2025 GMT
            Not After : May  1 15:12:13 2025 GMT
        Subject: CN=680a54ce-60eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:48:a4:1f:e0:f4:ce:b3:46:95:3e:54:c2:84:
                    bf:f4:67:4b:1e:0f:bb:d3:0b:b3:70:c5:c1:4f:c7:
                    58:49:92:42:bf:07:7f:fe:38:78:23:b8:33:9e:cb:
                    09:4f:88:f5:f6:fb:3d:b9:3c:e5:78:bc:1b:80:76:
                    0b:eb:b2:72:3e:bb:16:f1:98:42:16:6a:f3:9a:27:
                    e0:8f:69:f5:fc:0e:4c:99:38:27:e8:27:2e:e6:23:
                    8c:3e:7c:2c:36:2d:15:ca:df:77:2e:b2:d4:df:36:
                    8a:dc:6a:2c:dd:b7:e2:c6:66:4b:d9:a0:3b:84:26:
                    bf:ed:ae:a8:ae:2d:b6:de:d9:aa:4f:f3:d3:df:39:
                    92:1d:8a:e1:ff:62:50:bc:53:d8:df:67:a5:61:69:
                    aa:74:ca:26:89:50:69:25:46:c7:ac:58:f5:97:fb:
                    a6:59:07:2a:74:39:b3:2c:9a:6b:5c:ab:07:60:7d:
                    5b:45:33:a1:23:8e:de:ee:54:e6:36:e8:f9:e0:48:
                    ad:fd:94:4a:41:f0:d0:cf:fb:cc:5f:13:45:ef:83:
                    21:3e:27:bc:e3:cc:df:67:ca:26:3c:83:9d:2c:31:
                    90:05:8b:5b:2f:3c:63:61:58:80:d1:20:49:eb:c2:
                    03:3a:7f:ac:fb:93:f7:d7:76:94:88:80:9a:4a:de:
                    aa:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B6:AA:34:B7:31:A3:45:0C:01:C6:60:B1:DB:2F:2E:98:3C:8B:0A
            X509v3 Authority Key Identifier:
                keyid:55:5E:74:89:5F:B9:09:61:9F:29:9C:3F:9D:0B:B0:85:5F:D8:16:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VV50iV-5CWGfKZw_nQuwhV_YFug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:db:65:a5:ce:ad:a3:93:a6:a1:37:93:98:e6:93:bd:f4:3c:
         e9:7a:c0:cf:96:88:80:ab:2b:7d:6f:72:d4:24:15:97:c3:ee:
         16:9b:03:88:6d:bc:b4:4b:1d:28:a3:fb:8b:f5:57:ad:03:a5:
         fc:39:82:06:a4:e4:a6:67:e6:c9:40:4b:9c:6a:00:4a:22:43:
         4d:ad:f3:b7:11:28:db:cb:98:ca:6e:14:15:a3:ad:55:f3:aa:
         87:e2:1b:df:91:e6:74:bb:3f:6b:8c:84:2e:a1:9b:16:69:33:
         bf:4f:50:49:d9:47:46:3f:e0:b6:40:82:5d:8d:85:a6:c6:07:
         71:6b:0b:95:a1:50:af:98:53:b2:85:b7:ef:c5:fa:fd:41:e7:
         10:96:4f:c9:d3:f9:46:cd:aa:b1:57:96:f4:e8:86:35:05:f8:
         a1:3f:d4:54:57:7a:db:51:10:e2:5a:f6:1f:04:20:dd:be:a9:
         b7:56:11:9e:55:45:84:b9:a5:cc:26:02:93:83:1b:41:76:11:
         14:ec:98:38:da:8a:53:3a:d1:31:ff:da:0d:59:4a:e1:30:ca:
         32:b1:22:6d:61:f4:1c:4c:0f:42:03:eb:c0:e3:b0:af:e8:bd:
         06:fa:8a:ed:12:08:2a:0a:6f:71:a2:57:27:cd:7b:92:f7:c8:
         f8:3c:1f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:01:09 2025 by rpki-client