Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
File:                     vwxRAalGDasWiyHwJOMMiVoCjEI.mft (raw, json)
Hash identifier:          Vhck31LLCHa00NNyYaxK/Dzw/wPK1iGPGMdvNfLg6c8=
Subject key identifier:   80:32:0A:DD:22:C0:B4:6B:D9:5C:78:58:32:28:81:2A:7E:15:96:B1
Authority key identifier: BF:0C:51:01:A9:46:0D:AB:16:8B:21:F0:24:E3:0C:89:5A:02:8C:42
Certificate issuer:       /CN=A9180307/serialNumber=BF0C5101A9460DAB168B21F024E30C895A028C42
Certificate serial:       050D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
Manifest number:          0507
Signing time:             Sat 14 Jun 2025 23:22:56 +0000
Manifest this update:     Sat 14 Jun 2025 23:22:55 +0000
Manifest next update:     Sat 21 Jun 2025 23:22:55 +0000
Files and hashes:         1: vwxRAalGDasWiyHwJOMMiVoCjEI.crl (hash: zQeBA+Llp+/dmrUFBzvbVrun73Eq6o0H88P+bsn0JHg=)
                          2: 1829AEE8146B11EC81328F59C4F9AE02.roa (hash: aIxAvyaJTpqygmqgpU8RPaqkDh+o4vZaFakEjzwWwkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.crl
                          rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 23:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1293 (0x50d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180307, serialNumber=BF0C5101A9460DAB168B21F024E30C895A028C42
        Validity
            Not Before: Jun 14 23:22:55 2025 GMT
            Not After : Jun 21 23:22:55 2025 GMT
        Subject: CN=684e044f-1da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:37:35:4a:75:0e:19:09:d5:d9:8e:3c:b6:4c:
                    33:99:f5:8f:64:86:8e:e9:97:7f:5c:00:dc:71:8b:
                    b8:51:4c:5b:c1:c0:bf:5d:65:52:02:59:29:cf:ea:
                    c1:f6:7c:de:6a:cf:90:f2:a0:4a:ff:76:49:b9:d2:
                    5d:36:f1:a3:18:36:73:be:bc:c8:53:93:fa:23:23:
                    59:3c:35:1c:e5:dd:6a:35:9e:f1:ba:88:0c:2f:ab:
                    65:c8:ea:1a:58:16:0c:2b:36:22:b5:0b:63:e1:63:
                    b5:76:52:03:00:25:89:4a:4e:62:75:2f:d8:e5:71:
                    09:65:9a:4c:2b:36:f4:64:ed:29:6e:93:d7:12:ff:
                    a9:94:cc:e5:62:1a:50:9f:53:9e:3d:85:15:66:8b:
                    34:23:48:67:81:e6:fe:28:21:e3:f3:f2:d3:cb:ae:
                    da:3c:c4:77:33:49:6b:b0:fb:0d:92:d0:e7:7c:16:
                    a3:f6:c6:49:7d:ef:33:36:0b:77:2c:bf:62:46:5f:
                    3d:be:04:d4:fe:c8:dd:1d:ea:d7:89:eb:88:25:34:
                    7f:be:10:6e:09:ea:31:a2:65:73:63:7b:83:e3:d9:
                    c1:ba:ee:03:10:5e:0a:fa:34:22:c1:d1:ee:f0:2f:
                    73:b8:72:6a:d7:ea:41:33:46:ab:e3:d0:df:0a:a2:
                    03:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:32:0A:DD:22:C0:B4:6B:D9:5C:78:58:32:28:81:2A:7E:15:96:B1
            X509v3 Authority Key Identifier:
                keyid:BF:0C:51:01:A9:46:0D:AB:16:8B:21:F0:24:E3:0C:89:5A:02:8C:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:27:90:56:52:8f:b5:ae:4f:7a:04:ed:dd:ef:e4:8e:47:dd:
         b2:03:bb:87:24:44:e1:c9:60:c3:cc:03:71:d2:e5:f3:70:6b:
         55:cc:6f:73:2c:21:e3:bb:2c:d6:c3:66:50:1c:e4:cb:3c:28:
         6d:8f:e9:62:a1:61:73:c5:a7:63:5a:a6:35:9c:a2:2b:b7:74:
         bb:7b:e7:3e:95:d4:8c:31:d3:c6:ad:40:c6:1e:83:3e:22:e0:
         ca:f1:f7:ec:24:b2:ff:1f:95:fb:38:71:af:95:16:9c:aa:69:
         fb:16:f1:db:a0:35:ab:76:2c:91:e5:3a:53:2c:6a:84:c2:c6:
         64:07:d8:dc:c5:9f:98:4a:e6:83:25:f6:84:67:c3:b8:b6:fc:
         bc:e2:1a:c4:59:f7:57:e0:da:e5:13:a6:75:04:26:e0:b8:73:
         dd:2f:a1:40:83:53:81:c7:a3:b1:42:9a:7a:e2:17:9d:19:89:
         e8:19:a0:d2:7e:6e:18:af:e8:5e:62:14:1b:bc:9b:25:72:6a:
         a8:ad:b2:98:4a:89:67:ef:4d:b9:3c:eb:91:d5:55:5a:5d:b3:
         0d:bc:ce:56:22:33:c1:86:0c:33:b7:77:e3:b0:df:dc:37:36:
         02:0c:c7:f4:9d:c2:02:ca:f2:fa:ad:df:99:0a:fc:5f:58:76:
         6b:76:d0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:41:35 2025 by rpki-client