Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
File:                     vRTPGp8I9oE3_oEWzXdq29sv77Q.mft (raw, json)
Hash identifier:          NGBqA03naO5rFQwROgf2L5kEpOkikIvFsHl8Xr8uqOk=
Subject key identifier:   AE:22:70:82:48:B2:87:51:3E:48:06:53:6A:13:2C:8A:58:B0:8C:C3
Authority key identifier: BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4
Certificate issuer:       /CN=A9119A40/serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
Certificate serial:       03CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
Manifest number:          101E
Signing time:             Fri 16 May 2025 18:34:12 +0000
Manifest this update:     Fri 16 May 2025 18:34:12 +0000
Manifest next update:     Fri 23 May 2025 18:34:11 +0000
Files and hashes:         1: vRTPGp8I9oE3_oEWzXdq29sv77Q.crl (hash: ZsOcDmqwiXs56/K3erVOYOeoJ+u98UIupyzvQH0nJrY=)
                          2: D5DBA6BC63ED11ED851C647DC4F9AE02.roa (hash: Cu7mP4ScFcEgh99akamYEaBRClwxLE+oM+a0PvnQM0M=)
                          3: 5277F6368D2411EC816B4C70C4F9AE02.roa (hash: jmM2MyWVgkGoSl8m7eT/QohnLLhAgCt5V5ifbC8tFnE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl
                          rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 18:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 975 (0x3cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119A40, serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
        Validity
            Not Before: May 16 18:34:12 2025 GMT
            Not After : May 23 18:34:11 2025 GMT
        Subject: CN=68278524-5f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9b:42:d8:00:1d:eb:4c:6c:05:83:11:a9:40:
                    1b:66:76:7c:10:65:f5:16:af:e1:96:51:b5:ab:2b:
                    ce:e8:7f:29:83:7e:51:9f:39:89:2d:7d:39:40:cb:
                    74:53:0a:21:21:c6:b9:2f:40:76:b6:24:af:c5:b0:
                    ab:0e:16:93:79:ac:77:73:55:93:2f:53:cc:0c:75:
                    87:15:7e:f6:30:6a:6e:79:39:4b:de:05:aa:e6:15:
                    76:84:28:71:0a:40:50:3c:d3:5f:81:18:55:90:50:
                    77:8f:a1:37:06:c5:6f:a1:2a:24:3c:13:98:dd:7a:
                    c5:c5:a5:d5:66:a1:21:67:61:f0:48:5d:90:f5:64:
                    c7:a8:8f:e2:ce:b0:09:6c:6f:54:69:00:29:1b:13:
                    e3:e3:44:14:93:4c:7c:fc:2d:64:69:f7:f3:04:df:
                    d5:6e:ff:be:9c:5c:d4:8f:49:cb:85:1b:8d:ec:2d:
                    0e:a0:20:27:3f:6a:ce:62:52:1e:80:1d:78:8b:03:
                    1a:20:aa:7b:6a:78:72:14:cd:15:8c:25:47:27:18:
                    9e:a2:e4:3e:66:d5:23:18:69:60:4b:5f:70:b5:21:
                    af:1b:40:a8:8a:94:01:ce:8e:98:80:f3:9a:27:b5:
                    77:ec:0a:96:f5:75:fc:e8:86:b4:cc:2d:57:32:34:
                    6f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:22:70:82:48:B2:87:51:3E:48:06:53:6A:13:2C:8A:58:B0:8C:C3
            X509v3 Authority Key Identifier:
                keyid:BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:fb:68:ad:4d:6c:0e:8a:9d:3a:ed:ef:fa:e6:99:05:11:ac:
         4d:0d:6e:54:e3:63:cf:a7:88:a8:a4:7c:e6:e1:7f:b4:a7:93:
         d0:a9:e4:bf:a9:df:9e:cf:3b:3d:1e:34:1c:de:3b:8b:dd:4a:
         da:9d:55:76:28:28:e5:96:70:39:08:4c:13:c2:a8:ee:17:78:
         85:df:da:1f:16:60:43:b3:5d:72:37:93:91:3e:41:c7:bd:e9:
         07:58:a1:fa:51:fb:29:91:72:d5:d3:01:78:54:27:a8:b5:d2:
         d1:c9:0c:1d:0d:bd:a4:4f:75:35:67:20:25:2d:59:c4:a4:a1:
         5a:87:6e:f2:c1:cd:21:8b:47:5f:7f:95:b2:f4:02:59:3b:bd:
         5d:c3:9a:70:66:60:e3:ea:57:94:57:29:a5:05:f7:bc:c1:47:
         5d:25:5a:89:8e:cf:f5:5c:68:42:f2:f6:ab:ac:98:10:32:4a:
         46:03:75:5a:28:35:72:02:e3:9b:c0:63:67:4c:3a:39:0f:77:
         e6:77:6e:c3:93:d7:91:44:e2:0c:b0:84:77:49:d2:8f:f7:99:
         f6:14:70:dd:78:1e:37:c5:28:91:ae:62:76:75:a9:a8:ff:79:
         1e:af:bd:cb:6a:f5:80:e7:53:de:0b:4b:99:93:4f:00:2e:31:
         fd:ce:60:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 20:53:32 2025 by rpki-client