Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
File:                     vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft (raw, json)
Hash identifier:          Imn2PzrLJl8z6qsEzFyoYA/Wql2r9TUgLAubsWx8ywc=
Subject key identifier:   D0:EC:2A:CA:18:C5:A4:91:0B:E2:4A:BF:31:73:A8:75:6B:1F:64:C7
Authority key identifier: BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99
Certificate issuer:       /CN=A919F026/serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
Certificate serial:       23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
Manifest number:          1F
Signing time:             Fri 25 Apr 2025 06:54:30 +0000
Manifest this update:     Fri 25 Apr 2025 06:54:29 +0000
Manifest next update:     Fri 02 May 2025 06:54:29 +0000
Files and hashes:         1: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl (hash: MyDt/aFQWVriuzOl2ZtixyLYGBx1mUGYFfFelRJHA0c=)
                          2: 3FCB43D2FB2911EF8A116D76C4F9AE02.roa (hash: CFjfwtbnARFkiBTSkHxcw566lVz+R0FjE0lSqqgVvOk=)
                          3: 563F3D581F3C11F09F3C7F40C4F9AE02.roa (hash: YKwfhn84elYu/Y8KsthWeHLfxYMDii6IqoqFACcb2JY=)
                          4: 362EF79CFB2911EF8C103876C4F9AE02.roa (hash: Ar+onOWOPH7xuawAkKNR4USGgISAZHmjzcJHYy39Fms=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl
                          rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 06:54:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F026, serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
        Validity
            Not Before: Apr 25 06:54:29 2025 GMT
            Not After : May  2 06:54:29 2025 GMT
        Subject: CN=680b31a5-6f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:62:4a:fa:72:5f:a1:eb:27:59:10:b0:12:66:
                    76:b8:ec:c5:45:08:0a:43:e2:8d:fa:01:81:6f:df:
                    ed:77:8e:46:86:2d:3d:dd:28:42:10:b5:0c:44:34:
                    d7:ff:de:ad:bd:a4:1a:89:1f:c9:e9:c1:50:03:62:
                    7e:ff:6c:f4:22:fc:7e:13:75:5a:1a:ca:9c:5c:c0:
                    49:45:49:4d:89:9e:13:2a:07:e3:c6:ca:3d:dd:4d:
                    2f:de:ee:ba:a5:1a:f7:ad:cc:59:b3:d5:92:3d:9c:
                    96:ff:90:85:ef:73:a7:41:f8:32:5a:16:0a:69:84:
                    7f:2b:bc:51:b4:a7:76:33:78:8c:e1:64:bf:03:02:
                    30:b2:3e:d2:4a:cf:6f:8e:58:cc:66:56:48:34:6b:
                    13:78:b0:3d:6d:ce:30:b9:32:79:1a:3f:f4:7d:ea:
                    b7:97:74:86:95:21:b5:61:88:e7:7e:0e:a4:a1:3c:
                    07:f0:7a:40:88:87:50:af:5f:4e:53:63:1b:8c:fc:
                    5f:95:b1:a7:9e:cb:83:b6:75:c0:81:e4:7e:9f:ed:
                    a8:b1:00:83:ec:59:f0:98:79:56:c4:9b:59:a1:fa:
                    a9:b5:6e:d1:f7:34:ea:d0:23:c6:2c:e7:ba:7b:a9:
                    43:37:26:b3:3a:51:0e:36:b0:d5:0e:e5:44:d7:27:
                    f0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EC:2A:CA:18:C5:A4:91:0B:E2:4A:BF:31:73:A8:75:6B:1F:64:C7
            X509v3 Authority Key Identifier:
                keyid:BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:95:0d:e6:5f:ac:a1:60:a3:d4:fd:63:d8:98:48:fc:6f:ed:
         75:35:e3:0e:2e:b4:24:0f:51:5b:3a:9b:eb:1f:1a:9d:6f:a5:
         cc:52:6e:5c:b9:48:97:08:41:3a:a9:fa:32:e1:b1:65:16:23:
         6e:fa:7d:59:9e:fd:34:8e:ba:26:55:d0:e8:fc:c4:b1:3b:a7:
         a4:5b:24:c8:83:14:5d:d6:a8:b5:0c:3b:b7:ae:bb:13:5a:51:
         38:91:a3:7f:5c:c0:33:21:b8:c4:a8:90:8b:92:bb:ed:8f:7c:
         69:fc:13:9c:9f:d8:b7:da:6e:68:15:d3:80:38:df:70:83:b2:
         b7:08:ff:0b:cb:b5:c1:77:15:a7:51:c2:6f:97:ff:03:43:56:
         aa:bb:9a:cf:68:d4:5e:c4:d1:36:7e:83:a4:26:27:30:5c:0c:
         bd:c9:09:eb:53:a7:01:b5:87:fc:8d:2c:61:e3:24:5e:9c:67:
         cc:53:7a:2f:35:c7:cd:c4:48:f4:14:d9:53:c8:8b:5d:57:84:
         03:37:53:b0:6a:07:7f:35:33:1c:bf:d6:2b:a6:1b:fd:b3:97:
         78:db:28:27:da:31:40:7a:38:f5:39:0e:01:52:84:22:ab:65:
         98:09:1c:6b:0a:8c:1f:01:cb:c0:60:2a:31:55:71:57:74:8c:
         5a:39:94:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:03:22 2025 by rpki-client