Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
File:                     voUqizt-pcWsWlKqy4UqAaTN0II.mft (raw, json)
Hash identifier:          MbvJk8jg8cuflAe8EbaHe2on9PmDcsOQEvOVq+GVhW0=
Subject key identifier:   B1:EF:E6:0F:D3:2E:D9:58:42:4E:2B:28:57:28:7E:F6:D8:73:6A:BF
Authority key identifier: BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
Certificate issuer:       /CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Certificate serial:       044F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
Manifest number:          0439
Signing time:             Fri 25 Apr 2025 00:08:36 +0000
Manifest this update:     Fri 25 Apr 2025 00:08:35 +0000
Manifest next update:     Fri 02 May 2025 00:08:35 +0000
Files and hashes:         1: voUqizt-pcWsWlKqy4UqAaTN0II.crl (hash: YPo4y4oW+83+Qx2+EMgS3MjewHhynHSiCN9PQsrHRGA=)
                          2: D717B9F0B7E511EFB5F63E6DC4F9AE02.roa (hash: R/nnjeAR+tZePhFeIgEDIZOhg5pi4qQT+4iwQfx8ekU=)
                          3: D254B444679111EF8A2C9062C4F9AE02.roa (hash: KIM/sEwaQaYFPC8qF/5+qRUkUFtySui4RoXzgpLXzmc=)
                          4: 14F55DEAB7E611EF9B9D9F6DC4F9AE02.roa (hash: BIPMm9ibDgvfx7NU935+UV2sEA5f17RgI+qcbtg58kw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
                          rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:08:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1103 (0x44f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF428, serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
        Validity
            Not Before: Apr 25 00:08:35 2025 GMT
            Not After : May  2 00:08:35 2025 GMT
        Subject: CN=680ad284-3f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:42:c6:1b:96:15:0d:11:81:20:75:b9:17:21:
                    b9:97:8f:ef:7e:84:85:2b:fc:2e:b0:1b:d7:0a:e8:
                    9b:7d:29:ff:0d:15:1b:83:d2:3e:12:d8:cb:58:0c:
                    5a:75:99:6c:ec:67:f2:4a:f5:1d:a3:ee:84:3c:c2:
                    97:0c:cb:91:43:d8:a4:38:8c:87:62:99:22:b2:3d:
                    54:c4:81:b2:af:ce:93:01:0b:b8:c5:f2:c8:4e:60:
                    24:34:26:ff:d2:8e:33:0b:4d:17:8b:93:f4:17:40:
                    c1:71:46:3b:b6:51:8e:f3:ff:2f:8c:1b:97:96:09:
                    59:0b:23:97:f9:d7:78:19:74:a4:9c:8a:65:a7:2c:
                    11:ed:4e:3e:3c:68:9b:1b:37:87:d8:9c:53:4a:ac:
                    4d:ba:d2:a0:8a:64:dd:21:dd:3e:51:01:06:30:ad:
                    9b:08:fb:12:80:f8:ec:12:a0:8f:26:ec:df:a4:6d:
                    4c:99:3e:26:f1:b4:45:8f:b5:aa:de:ff:41:e6:32:
                    9f:d1:29:b4:ae:56:77:5a:8b:ab:1b:ed:0e:b5:86:
                    8e:33:42:a8:be:16:36:32:e9:71:74:c4:14:00:3c:
                    6b:0a:9b:5f:d0:25:d0:73:66:27:af:8d:8e:62:9f:
                    66:48:fe:5f:7a:fe:38:92:26:1c:10:9e:d6:5e:a7:
                    99:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EF:E6:0F:D3:2E:D9:58:42:4E:2B:28:57:28:7E:F6:D8:73:6A:BF
            X509v3 Authority Key Identifier:
                keyid:BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:b1:12:63:58:64:99:bb:2c:c3:c4:b8:8a:1a:1a:36:5e:fb:
         e5:e4:95:e5:b4:75:5f:d7:50:c8:d8:94:87:40:8b:95:c0:c0:
         82:21:dc:da:5b:dc:58:42:51:ae:45:cb:65:33:00:6d:90:33:
         15:96:4a:58:bf:25:5c:4a:63:0f:36:c5:af:94:ac:4d:eb:29:
         72:56:75:26:86:21:c6:0c:2f:fd:42:69:dd:20:4f:cc:84:dc:
         72:4d:45:a9:6a:d4:9e:ef:19:56:6e:a4:19:77:fc:f8:10:26:
         77:84:15:de:df:79:9f:8f:72:15:2f:a8:2c:af:b4:df:a9:76:
         12:09:58:fc:b0:d6:b6:84:53:16:bc:2c:fa:00:ed:13:8a:84:
         c2:cf:72:ba:f2:9f:00:5f:79:4d:81:35:f0:91:b4:58:4a:17:
         b6:d0:4e:2e:d5:91:d0:77:5e:89:20:d8:7a:02:91:20:73:1d:
         4a:f3:6e:ac:80:7e:2d:ee:1b:9a:78:80:b3:8c:7b:b6:d1:82:
         6e:5a:bf:fa:ea:44:82:3a:81:56:99:29:d1:d4:4d:13:50:cd:
         b4:0a:48:49:5c:1e:d8:c0:98:7f:2a:e7:80:ed:1b:4d:8d:42:
         c8:37:41:0e:1b:db:1d:26:bb:de:c3:7e:66:f2:3d:91:9a:ce:
         a7:cc:cb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:36:44 2025 by rpki-client