Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft
File:                     Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft (raw, json)
Hash identifier:          n5xwLBJMiaeQlQp3k6LeEaR2U4565tCSQIFbZgmo6RI=
Subject key identifier:   AF:A7:26:E0:9B:3A:AF:62:43:90:04:33:02:31:7A:9D:74:05:1D:74
Authority key identifier: 57:2F:BF:1A:C4:D2:F8:49:E2:F5:BB:80:76:74:F0:1B:EB:F1:72:9D
Certificate issuer:       /CN=A918CC02/serialNumber=572FBF1AC4D2F849E2F5BB807674F01BEBF1729D
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy-_GsTS-Eni9buAdnTwG-vxcp0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft
Manifest number:          48
Signing time:             Fri 25 Apr 2025 06:24:53 +0000
Manifest this update:     Fri 25 Apr 2025 06:24:52 +0000
Manifest next update:     Fri 02 May 2025 06:24:52 +0000
Files and hashes:         1: Vy-_GsTS-Eni9buAdnTwG-vxcp0.crl (hash: VpfNmO3OLRFBdRh1XrtlNfUzXThhiOWzVTJ9UxFYYvA=)
                          2: 56C91968C5C011EFA167B30AC4F9AE02.roa (hash: Qpsj8zeT4wk7y+WSIb+TFw/XxcY82tQw87PIGXkqgxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.crl
                          rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy-_GsTS-Eni9buAdnTwG-vxcp0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 06:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CC02, serialNumber=572FBF1AC4D2F849E2F5BB807674F01BEBF1729D
        Validity
            Not Before: Apr 25 06:24:52 2025 GMT
            Not After : May  2 06:24:52 2025 GMT
        Subject: CN=680b2ab4-1809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b6:ce:c6:36:de:f1:95:b4:0d:53:ea:30:37:
                    33:ea:3d:f2:32:0f:9e:14:f5:88:79:bc:04:1b:10:
                    54:29:61:8c:09:a8:c6:7a:4a:c5:7a:76:0b:80:57:
                    35:86:06:16:12:76:fc:c8:2a:09:7d:c2:55:8f:e4:
                    fe:e8:8b:77:34:51:99:ce:19:b0:81:35:c7:3c:c8:
                    c7:95:83:47:1a:f3:b3:61:81:dc:f0:ff:a7:d9:0a:
                    2c:c5:f2:f2:31:57:07:ef:c0:a4:9d:75:3e:7f:bf:
                    97:fa:45:d9:6f:b7:46:b3:c2:43:0d:9d:f8:8d:02:
                    a7:89:33:ba:57:d5:59:0f:53:cb:d9:7b:56:a0:25:
                    f2:6c:db:21:66:19:fe:61:77:6c:74:c8:7e:e4:33:
                    49:1f:cb:9f:05:4f:24:e8:70:49:e8:fd:20:b7:7e:
                    a1:f9:58:f0:ed:a0:e3:cf:d2:5e:13:22:db:ec:f6:
                    2b:31:1a:7b:33:89:3b:61:d6:68:9b:d1:42:ce:19:
                    3a:7a:2e:01:7c:53:86:68:4f:15:9c:e1:41:1d:46:
                    b4:5b:ea:f4:e4:4f:ed:89:23:21:95:ee:82:70:14:
                    bb:89:17:42:53:0d:fc:4f:f1:75:5d:ec:91:c5:5a:
                    b5:f7:d8:c9:87:a7:2a:84:8f:77:71:54:27:a2:34:
                    7c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A7:26:E0:9B:3A:AF:62:43:90:04:33:02:31:7A:9D:74:05:1D:74
            X509v3 Authority Key Identifier:
                keyid:57:2F:BF:1A:C4:D2:F8:49:E2:F5:BB:80:76:74:F0:1B:EB:F1:72:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy-_GsTS-Eni9buAdnTwG-vxcp0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:3d:b9:52:f4:12:35:f5:fe:8e:7f:82:ee:8b:a9:c2:36:65:
         8b:59:d3:25:22:c4:10:89:6b:24:9a:e8:f8:8c:59:8f:d5:86:
         1c:df:07:09:13:41:70:a1:93:ab:26:a0:d6:97:91:23:df:77:
         f8:62:38:d8:ab:4a:fd:31:6a:9f:3a:ba:92:b5:3a:ab:f6:23:
         f8:d0:35:8d:17:28:de:fc:b9:c1:56:10:bf:0c:17:c6:53:eb:
         eb:c3:8a:e7:b8:d1:6c:e8:af:86:03:6e:6d:87:2f:73:4e:66:
         23:8a:0a:45:10:fb:8f:f6:87:2f:3a:83:1a:b1:b4:da:5d:b9:
         22:d5:f6:07:e8:f9:0a:da:b6:32:21:be:b0:f9:09:cb:31:3e:
         e0:76:47:c1:a4:da:b2:04:27:fa:1d:01:f3:ce:5e:b5:b7:9a:
         a5:ef:87:a1:c9:f0:4f:17:3a:c6:54:49:fe:f7:cb:e0:51:73:
         ab:e9:72:ee:c4:51:ba:1d:c6:4a:26:32:f8:3f:fe:39:f7:35:
         db:44:6e:bf:21:c3:28:16:bd:8a:45:5e:f8:4f:9c:69:05:68:
         7a:15:65:e1:78:8e:ce:4d:3f:50:4e:71:5a:3c:ab:31:96:d0:
         8f:c0:78:a2:6d:f3:f1:e6:d9:ca:9f:65:df:96:08:6c:07:34:
         74:c3:be:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:23:01 2025 by rpki-client