Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft
File:                     VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft (raw, json)
Hash identifier:          oqlVIiJXR35S1KsgNgSjC+rsGCVlTBtMPU5Xlh0a9jg=
Subject key identifier:   6F:F5:58:A0:57:A4:E4:5A:1D:D2:13:86:19:0F:69:5E:46:C3:9D:2D
Authority key identifier: 57:07:41:62:7F:E7:CF:D5:94:EA:2F:7F:44:96:16:B7:7C:2A:C8:42
Certificate issuer:       /CN=A914597C/serialNumber=570741627FE7CFD594EA2F7F449616B77C2AC842
Certificate serial:       0192
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwdBYn_nz9WU6i9_RJYWt3wqyEI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft
Manifest number:          0190
Signing time:             Fri 25 Apr 2025 02:36:08 +0000
Manifest this update:     Fri 25 Apr 2025 02:36:07 +0000
Manifest next update:     Fri 02 May 2025 02:36:07 +0000
Files and hashes:         1: VwdBYn_nz9WU6i9_RJYWt3wqyEI.crl (hash: ggTiVuIS38JAk8l/HcZptV66wb0+EBOqNSlJ6K1KkuM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.crl
                          rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwdBYn_nz9WU6i9_RJYWt3wqyEI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 02:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914597C, serialNumber=570741627FE7CFD594EA2F7F449616B77C2AC842
        Validity
            Not Before: Apr 25 02:36:07 2025 GMT
            Not After : May  2 02:36:07 2025 GMT
        Subject: CN=680af518-db1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b2:11:8d:3f:c3:58:58:53:48:b8:f8:4f:b4:
                    a4:47:73:5d:c9:e1:f0:f6:08:bc:6c:81:cd:ce:72:
                    ab:25:9d:08:af:4e:14:24:2d:ec:7a:f7:c3:73:b7:
                    eb:60:4e:d8:ab:4a:22:ee:0b:a3:d5:d3:1c:fb:c4:
                    ce:79:7c:0c:a4:42:f3:b0:d0:5a:82:ab:e9:fe:8e:
                    9d:ac:77:ab:03:2f:af:ed:25:f3:83:5a:05:d5:ec:
                    e1:00:0c:91:a4:f1:a6:ff:05:c4:c7:9e:47:9b:99:
                    d0:59:db:fd:30:1b:22:b5:0e:97:2c:c1:af:d8:89:
                    f9:23:79:57:94:c8:5d:f4:4b:15:82:95:f6:a2:d5:
                    04:12:bd:43:7a:b1:3f:fa:a2:bd:8d:53:64:a8:4f:
                    36:95:0b:45:02:9d:dc:6d:04:56:b6:ee:5e:5f:1e:
                    07:ea:50:24:9b:8e:55:2a:24:e4:c1:a6:64:cd:ac:
                    ad:e8:bd:12:f5:cd:8b:c6:73:4f:c2:a3:2f:7d:df:
                    ed:e7:8b:ee:da:9b:66:2e:5b:79:9d:4d:07:5b:eb:
                    c1:0c:0c:f6:87:59:5d:94:3a:dd:72:b1:5e:8b:03:
                    b4:85:a9:a1:62:bb:ae:b3:9e:64:91:d8:e4:7c:2d:
                    9a:36:b1:13:96:b0:4d:96:43:9e:cc:4e:ea:7c:7e:
                    fe:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F5:58:A0:57:A4:E4:5A:1D:D2:13:86:19:0F:69:5E:46:C3:9D:2D
            X509v3 Authority Key Identifier:
                keyid:57:07:41:62:7F:E7:CF:D5:94:EA:2F:7F:44:96:16:B7:7C:2A:C8:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwdBYn_nz9WU6i9_RJYWt3wqyEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:96:f9:ff:0a:87:d3:2e:23:c0:ff:d3:ea:32:50:73:bf:4c:
         89:cb:51:2f:2d:eb:2b:67:fb:d8:c2:bd:cd:4e:aa:8e:b1:77:
         9f:17:67:aa:ec:e7:88:91:90:36:13:56:f2:14:40:61:53:69:
         05:a9:19:77:04:c7:b3:e8:7f:4a:c3:aa:4a:80:87:d3:9b:eb:
         07:62:2c:bd:06:6a:75:8c:45:db:18:4e:a4:d8:9a:00:7f:5a:
         e0:7e:50:b8:e5:c2:1d:16:f6:4c:b3:44:46:ac:78:05:9a:7f:
         1d:a6:3c:6f:50:a2:89:e5:bf:38:5b:61:e6:fd:ee:39:a1:4e:
         16:63:a4:6c:bc:b3:84:2a:c9:50:91:d7:74:fa:d8:fc:79:e2:
         e0:a0:7d:a4:7d:e9:38:72:62:41:5c:56:d1:d4:06:9e:f9:3f:
         cc:38:79:1f:86:be:6a:de:f1:c0:52:e6:11:c9:d0:83:d6:ee:
         03:6b:79:0a:0a:76:d7:d5:80:da:b7:bb:1c:9e:21:6b:ac:66:
         c2:ba:92:a2:fe:2a:79:6b:6d:1f:8f:85:3a:fc:02:85:87:8d:
         75:4a:71:37:03:91:40:b4:a4:a2:93:5a:ac:7b:04:82:37:a6:
         2f:ac:9e:18:53:e1:e6:bc:99:27:76:a8:a7:3f:30:8e:45:99:
         b7:6b:81:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:37:45 2025 by rpki-client