Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
File:                     vwxRAalGDasWiyHwJOMMiVoCjEI.mft (raw, json)
Hash identifier:          +1SRzq3jcLuUsUtBdBp1OQE1WrHCS0uC0irZvVuqvzc=
Subject key identifier:   CE:25:F0:53:15:5D:89:C9:CA:02:B7:1D:0B:C0:85:32:11:DB:F3:D7
Authority key identifier: BF:0C:51:01:A9:46:0D:AB:16:8B:21:F0:24:E3:0C:89:5A:02:8C:42
Certificate issuer:       /CN=A9180307/serialNumber=BF0C5101A9460DAB168B21F024E30C895A028C42
Certificate serial:       04F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
Manifest number:          04EE
Signing time:             Thu 24 Apr 2025 23:30:28 +0000
Manifest this update:     Thu 24 Apr 2025 23:30:27 +0000
Manifest next update:     Thu 01 May 2025 23:30:27 +0000
Files and hashes:         1: vwxRAalGDasWiyHwJOMMiVoCjEI.crl (hash: uHgD1yl9WMQpDtVuP0+Cku8V7+YbME2NkGKpVrw0NEk=)
                          2: 1829AEE8146B11EC81328F59C4F9AE02.roa (hash: aIxAvyaJTpqygmqgpU8RPaqkDh+o4vZaFakEjzwWwkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.crl
                          rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 23:30:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1268 (0x4f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180307, serialNumber=BF0C5101A9460DAB168B21F024E30C895A028C42
        Validity
            Not Before: Apr 24 23:30:27 2025 GMT
            Not After : May  1 23:30:27 2025 GMT
        Subject: CN=680ac993-718e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:88:97:7f:d0:5a:8e:a8:82:b7:2e:fa:b3:2e:
                    92:3d:f4:8e:b7:d4:34:fd:c6:37:39:a5:7c:86:4b:
                    70:80:76:b4:f6:26:f1:74:ab:1e:ee:c7:95:7b:c9:
                    39:4a:2e:a8:88:e4:75:47:0a:c3:ab:86:00:bc:31:
                    9c:c7:03:7d:c9:50:b7:1d:ea:4a:21:0c:1b:20:ef:
                    a1:02:41:98:83:18:61:17:8d:92:51:21:f4:86:c3:
                    d4:b7:93:71:0d:f2:d4:b0:79:2b:6d:cd:89:42:43:
                    c4:e7:92:18:44:b3:09:12:27:f4:f4:ee:80:65:ca:
                    0b:0c:ce:69:70:d6:15:83:b5:27:53:d2:18:69:48:
                    a4:cb:ec:29:2d:e9:de:f6:0a:5d:82:0f:db:d0:24:
                    23:aa:cb:d9:7c:cb:f0:50:b9:bc:9c:29:97:61:e9:
                    ce:aa:93:b3:1c:c4:97:aa:69:bf:5a:22:fb:30:a2:
                    58:c5:2e:60:8c:2b:3c:b6:26:90:2f:6c:0e:07:ff:
                    86:41:52:40:29:86:fa:49:37:e7:44:83:88:90:18:
                    92:0b:40:1c:ca:7a:0a:d9:41:dd:aa:12:12:b9:16:
                    2f:b0:ec:3e:2f:1d:bb:73:af:cb:8c:ff:e3:66:31:
                    82:f0:f7:b4:d2:00:54:66:ea:55:98:ff:c0:05:a0:
                    04:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:25:F0:53:15:5D:89:C9:CA:02:B7:1D:0B:C0:85:32:11:DB:F3:D7
            X509v3 Authority Key Identifier:
                keyid:BF:0C:51:01:A9:46:0D:AB:16:8B:21:F0:24:E3:0C:89:5A:02:8C:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:97:41:4d:6d:ff:d8:89:bd:00:c6:cb:b2:02:d2:9e:36:54:
         d7:6d:1b:ce:37:4d:44:e6:b2:43:8e:61:01:d0:d7:b0:28:38:
         0f:0d:4b:ef:5c:15:c5:3d:29:e2:46:84:73:18:9a:ce:9a:96:
         13:eb:9b:d1:92:0d:77:cb:5a:38:be:9f:c8:1e:2b:12:35:fe:
         37:10:29:77:b4:55:41:c6:17:0f:cb:47:02:34:11:fc:a6:00:
         f2:e3:81:bd:06:d4:0a:a7:7e:82:ea:ae:33:a3:f3:fb:3f:4c:
         71:3e:ed:08:85:55:7f:48:ad:96:ca:65:5c:fa:04:d3:b9:2e:
         25:1f:19:9a:31:d7:d7:29:b5:80:a2:46:e0:94:20:28:01:1e:
         16:45:05:75:71:7d:18:90:7c:de:44:12:2a:0a:c4:3b:d8:da:
         8b:54:1d:6c:f5:78:33:d9:ce:38:38:82:49:7d:5a:d0:d6:8c:
         fe:89:be:45:6f:fc:15:71:3f:42:fa:55:dd:1e:78:1a:38:68:
         fe:79:69:82:bd:a4:16:21:a5:9d:44:37:16:b5:89:af:1c:63:
         18:c2:72:63:31:83:20:81:e3:37:87:d8:0e:10:a8:f4:2d:e1:
         26:54:f9:9c:07:f6:11:d4:84:4a:bf:ed:2b:63:44:57:b5:0f:
         50:62:58:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:30:31 2025 by rpki-client