Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft
File:                     Vyfu6NouLMefq6Da0ZyISCvRWdw.mft (raw, json)
Hash identifier:          VXAbJEMNKm9eoi+dZJqtyCmjSAlCvU0cKKr55ohbWLE=
Subject key identifier:   E1:58:0B:7D:B3:25:A4:0F:A5:4C:13:01:5B:05:8F:B1:D6:68:C6:58
Authority key identifier: 57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC
Certificate issuer:       /CN=A9125C3D/serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC
Certificate serial:       037E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft
Manifest number:          0379
Signing time:             Wed 07 May 2025 00:45:59 +0000
Manifest this update:     Wed 07 May 2025 00:45:59 +0000
Manifest next update:     Wed 14 May 2025 00:45:59 +0000
Files and hashes:         1: Vyfu6NouLMefq6Da0ZyISCvRWdw.crl (hash: rwf60l4b9G7vhyQHIX3UX4PbCvxA6PSehv4OeVQW9gw=)
                          2: D66E75F0A5CF11EC94CFB734C4F9AE02.roa (hash: l/s5xmTdNpZpeVMlmGz5C4jtr1q5+jW3USj6jM51K9Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.crl
                          rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 May 2025 00:45:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 894 (0x37e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125C3D, serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC
        Validity
            Not Before: May  7 00:45:59 2025 GMT
            Not After : May 14 00:45:59 2025 GMT
        Subject: CN=681aad47-25ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5a:04:41:c5:64:22:79:92:e5:68:3a:ae:03:
                    ca:83:df:e6:5f:a6:ef:cd:20:5a:b3:44:45:08:51:
                    e3:e4:de:22:c1:37:be:a0:20:e9:b1:ff:93:cf:d8:
                    98:cf:3e:48:33:e0:2a:77:60:88:ba:58:52:ee:d0:
                    eb:eb:2d:e7:7f:39:4e:f6:42:72:9f:30:01:82:01:
                    fe:27:19:32:12:4a:27:36:46:35:8e:13:2a:10:f3:
                    d9:79:55:63:57:e6:c7:c8:fa:62:17:91:2e:ba:3f:
                    aa:86:0a:5a:82:24:7c:3f:ed:6f:fb:60:f2:7f:71:
                    f1:57:82:c1:b5:64:95:40:2f:6e:ef:a8:9a:a0:61:
                    3d:f0:f4:62:e1:e4:cc:c7:5c:08:a5:e4:c7:76:62:
                    2a:31:ff:47:96:61:76:08:cf:cb:98:99:12:64:f1:
                    62:e9:9e:19:ad:88:ff:ec:0f:21:87:97:6e:66:3d:
                    99:30:bd:bf:eb:35:8f:49:fb:69:19:4a:1d:b6:31:
                    a0:96:95:43:e5:38:7e:5f:96:64:49:a5:37:6f:5e:
                    01:1b:85:e6:ed:52:b6:8f:ae:21:8e:54:e9:dd:9c:
                    a1:a6:30:bd:92:d0:bc:23:47:68:21:c2:1f:52:a5:
                    39:5c:f1:0b:67:95:4b:fe:8c:d1:b8:44:49:18:4f:
                    47:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:58:0B:7D:B3:25:A4:0F:A5:4C:13:01:5B:05:8F:B1:D6:68:C6:58
            X509v3 Authority Key Identifier:
                keyid:57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:43:ce:f7:d1:02:62:ec:4d:3a:67:af:3b:e8:e3:f7:bf:5b:
         b2:ac:9b:a3:06:18:b8:16:e3:de:04:34:2e:d7:91:af:81:24:
         ba:41:d4:9b:9f:41:c8:d0:ed:f6:c1:a2:11:58:44:51:ca:d9:
         ca:e5:f4:95:12:11:2d:d2:4c:12:79:8d:30:4a:3e:08:0a:33:
         ca:39:86:8e:e4:3d:7b:74:11:ab:79:81:83:2e:ae:86:4b:14:
         c9:ab:a9:0e:be:42:ac:24:58:fc:99:3d:12:d8:3e:7b:f2:eb:
         4d:c4:95:73:c5:94:5f:87:96:f5:70:e6:f3:7e:bb:b5:10:03:
         15:ab:61:fb:00:68:76:da:1f:63:01:0b:1b:e4:13:04:35:5f:
         b6:c6:c4:7d:73:df:a8:27:99:f6:dd:db:80:79:41:cf:35:89:
         40:f3:d8:34:ca:78:85:cc:ca:b6:3b:ff:22:dc:ab:07:16:6f:
         54:3d:ed:7a:c6:a8:3d:c5:96:01:0a:81:ea:6f:69:05:b6:2e:
         54:82:d0:f7:de:ba:cc:4a:53:f4:ce:bf:6b:9d:1b:12:35:e7:
         9e:31:9a:e9:eb:17:d4:b6:b4:05:c5:4d:56:38:d7:60:97:77:
         ea:47:7e:39:3b:17:ad:d5:d2:d8:cd:0a:b3:67:d2:1e:85:09:
         13:7f:41:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:56:30 2025 by rpki-client