Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft
File:                     VtexXMGugneFjWSSwB3VMwhEzAY.mft (raw, json)
Hash identifier:          9ylivFDOB9X5Upftae/j28zNBUPQTYjXG1EdsN2nhlI=
Subject key identifier:   71:D9:A3:53:B0:32:2D:86:4E:85:91:06:9A:FB:D6:36:98:C0:6A:7F
Authority key identifier: 56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06
Certificate issuer:       /CN=A91F0CC8/serialNumber=56D7B15CC1AE8277858D6492C01DD5330844CC06
Certificate serial:       086E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft
Manifest number:          0853
Signing time:             Thu 24 Apr 2025 20:37:22 +0000
Manifest this update:     Thu 24 Apr 2025 20:37:22 +0000
Manifest next update:     Thu 01 May 2025 20:37:22 +0000
Files and hashes:         1: VtexXMGugneFjWSSwB3VMwhEzAY.crl (hash: gg+ERUQwSG5WMkZ43xEF/RVt3eUsQntERVAV55wAngk=)
                          2: D4B550921C2011F09CB77376C4F9AE02.roa (hash: SlZtNEQoEo8oXho49gjLYjnKVm8ZinsqnLWqLrWSNS0=)
                          3: C584C646CA5111EAB9696B0AC4F9AE02.roa (hash: jYQLOoLZbBJWyIWHyiEuXV1qHpjeGplW0dKs4b37zY8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.crl
                          rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 20:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2158 (0x86e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0CC8, serialNumber=56D7B15CC1AE8277858D6492C01DD5330844CC06
        Validity
            Not Before: Apr 24 20:37:22 2025 GMT
            Not After : May  1 20:37:22 2025 GMT
        Subject: CN=680aa102-0038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5b:b0:3e:6d:b7:db:74:ff:74:1c:f6:5b:1d:
                    8b:93:06:f1:1a:57:c5:98:3b:50:66:14:64:b2:65:
                    21:aa:fc:6c:13:d3:48:8f:6f:80:c5:59:48:7c:e8:
                    04:dd:06:b4:bc:5d:8b:97:d7:af:79:3e:d5:30:ec:
                    b3:d0:06:5f:6f:3d:82:11:1a:34:e0:03:ff:b0:75:
                    51:0b:e3:fe:ef:3d:03:e9:8f:1e:65:61:c4:ff:56:
                    dc:15:b6:23:0b:eb:7c:79:10:c1:19:61:0b:a0:e7:
                    49:a6:90:5e:68:7e:78:b6:aa:38:ca:7b:68:d5:36:
                    e1:33:48:ac:15:a1:62:3f:47:a6:3e:d4:ad:8d:fe:
                    80:37:5d:0c:b8:96:e3:12:59:f3:db:6e:ce:c4:f3:
                    00:89:e0:fa:97:27:da:ae:d8:96:a4:2b:c9:d0:58:
                    51:f0:c0:07:ff:2b:f6:35:46:18:51:ab:75:15:07:
                    55:93:8f:48:ec:1f:38:eb:1a:54:cf:c6:97:7a:c6:
                    7d:d7:bc:2f:c8:86:10:7f:48:7f:57:2c:60:ed:be:
                    1a:fc:30:27:3a:85:12:54:55:76:05:71:2b:bd:54:
                    d1:b1:62:e0:0b:7f:1c:46:b6:ca:8a:f1:cb:4f:5b:
                    36:c8:60:8c:8c:2b:de:ad:bc:fe:c1:27:bd:18:7b:
                    6c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D9:A3:53:B0:32:2D:86:4E:85:91:06:9A:FB:D6:36:98:C0:6A:7F
            X509v3 Authority Key Identifier:
                keyid:56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ba:d3:6b:4a:b9:64:61:92:31:80:6f:df:7b:9e:77:e7:4e:
         8c:34:d7:c5:7e:7b:22:93:b5:7f:19:53:27:43:23:47:42:6c:
         2a:41:d5:9c:5a:37:52:55:3b:fc:58:94:85:e6:58:89:24:a8:
         6e:e0:f6:d6:eb:c4:45:12:8c:e7:11:4c:44:c3:03:cc:cb:fc:
         97:e4:e2:31:ea:74:63:bb:03:e7:34:46:69:3e:db:4b:37:42:
         73:ac:4e:77:5a:7d:f0:88:6c:1c:dd:1e:65:1f:11:4c:23:6e:
         7c:5f:ab:d8:f6:47:e9:cb:0f:65:d4:a9:fe:af:47:fe:60:82:
         8f:f4:8b:a1:b3:d1:5a:23:9a:8e:30:73:5c:d3:6b:66:10:dd:
         42:3f:82:56:67:ec:88:f0:c5:ff:d7:c2:7e:c5:1b:bf:7a:a4:
         8d:aa:e1:d6:29:b9:63:54:cb:46:05:86:22:88:4c:b8:2b:2a:
         e4:c8:ac:11:00:b2:20:08:a3:a0:e7:17:ae:6d:ca:b9:72:90:
         89:27:5a:5c:61:7e:79:ea:4b:2b:93:f3:5a:62:fe:7c:2c:ae:
         1d:3b:1f:20:f5:4a:aa:9d:44:8f:00:d1:a6:1c:1c:9c:d6:ea:
         c8:fd:1a:06:af:1d:78:ef:fc:00:38:3b:57:6c:fd:6b:d6:31:
         6a:03:ad:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:43:44 2025 by rpki-client