Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft
File:                     Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft (raw, json)
Hash identifier:          K3hHHfU7UJyg5BWSzBcz5Sb5/S2pR2wpzfG5LOOtGTc=
Subject key identifier:   6A:F9:3D:82:E3:78:FA:5D:FA:B9:D9:25:9F:36:24:00:C4:62:4E:03
Authority key identifier: 56:8F:76:5C:CA:B4:2C:52:30:79:8E:68:FB:C3:7C:8A:A4:9F:5F:44
Certificate issuer:       /CN=A913F478/serialNumber=568F765CCAB42C5230798E68FBC37C8AA49F5F44
Certificate serial:       01DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo92XMq0LFIweY5o-8N8iqSfX0Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft
Manifest number:          01D5
Signing time:             Sat 17 May 2025 02:33:39 +0000
Manifest this update:     Sat 17 May 2025 02:33:39 +0000
Manifest next update:     Sat 24 May 2025 02:33:39 +0000
Files and hashes:         1: Vo92XMq0LFIweY5o-8N8iqSfX0Q.crl (hash: 3A7jPzORvA04KOO3LjfZHMh+ffVrYetrDCUK5LOYpNU=)
                          2: A89C497E6D1911ED9C34360FC4F9AE02.roa (hash: UQCZG7itJMxo24ik+1Acdmbu5iaW6o2y95pik3WrmR4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.crl
                          rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo92XMq0LFIweY5o-8N8iqSfX0Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 00:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F478, serialNumber=568F765CCAB42C5230798E68FBC37C8AA49F5F44
        Validity
            Not Before: May 17 02:33:39 2025 GMT
            Not After : May 24 02:33:39 2025 GMT
        Subject: CN=6827f583-2046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:29:55:7d:fe:9c:28:57:3f:23:52:88:e5:c2:
                    b3:28:74:9b:c1:16:b5:95:03:f2:7c:54:1a:ec:29:
                    34:d3:2e:88:9e:0e:01:da:e4:e3:02:01:a1:56:51:
                    bd:07:61:b1:47:60:14:3b:75:15:21:a3:20:b3:ee:
                    35:35:29:6a:26:fa:e8:6a:8d:d5:9e:08:c1:ec:03:
                    0c:1a:34:3a:fb:61:d2:32:d4:7b:40:a6:ea:4e:96:
                    38:7f:a1:21:c5:b8:4e:e2:95:9e:79:66:66:8d:16:
                    2d:7f:a5:79:fa:27:c3:d6:82:cc:53:82:f8:dd:c2:
                    d3:7c:98:4c:4b:94:f1:52:f4:31:63:fd:53:45:cd:
                    94:7a:40:e2:ba:19:81:45:c2:3b:b4:54:71:64:6e:
                    57:6b:80:13:16:7e:a6:2a:04:4b:e3:7f:b6:01:b3:
                    1a:f0:ef:f2:26:3b:3c:4d:c6:8f:11:4a:9c:c4:96:
                    09:f3:4c:6c:9b:51:15:24:b0:dc:53:77:23:47:d8:
                    6b:f9:1f:96:99:fe:02:8b:cc:99:b1:a5:75:b2:e2:
                    fd:af:c0:40:1d:0a:99:8e:e4:cd:c2:52:c4:64:ba:
                    70:4e:1c:46:72:d8:52:35:75:ce:95:94:d1:25:ad:
                    89:b8:c1:76:9f:2b:25:6d:1f:46:25:73:37:4d:23:
                    2f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F9:3D:82:E3:78:FA:5D:FA:B9:D9:25:9F:36:24:00:C4:62:4E:03
            X509v3 Authority Key Identifier:
                keyid:56:8F:76:5C:CA:B4:2C:52:30:79:8E:68:FB:C3:7C:8A:A4:9F:5F:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo92XMq0LFIweY5o-8N8iqSfX0Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:91:61:87:4a:bc:b6:62:fe:89:52:51:94:44:3e:f8:a3:e8:
         5c:d0:32:37:b1:d0:56:33:d5:19:c4:ad:11:fc:b7:74:a5:4b:
         2a:cb:a7:38:85:ea:24:24:54:df:74:10:88:81:2b:b7:55:bc:
         e0:06:e6:a6:d8:7e:19:ee:b5:58:9f:09:4f:00:72:6d:19:df:
         02:60:c1:c0:aa:6c:28:af:bb:60:d7:fa:56:1c:6c:61:76:21:
         32:dd:24:21:96:26:c8:9a:85:55:7e:ec:74:fd:91:1a:9d:35:
         d8:d2:f8:b6:7c:1a:00:95:90:1b:53:9d:c3:a5:fd:79:84:9a:
         25:3c:88:14:be:8e:96:84:fc:1a:07:5a:b4:14:fd:4c:c4:59:
         b4:ec:61:c4:74:2e:cf:27:92:15:77:60:c7:f3:cd:e3:07:7b:
         77:34:5b:5e:a9:5a:e2:55:a3:1f:81:9d:96:96:cb:92:fc:4e:
         f0:50:a2:5e:14:7a:55:d2:18:14:bf:df:93:f7:59:6e:9c:fc:
         bb:d2:88:31:44:37:24:8e:14:bb:97:00:4a:c0:d3:49:33:7e:
         06:1a:2d:42:96:b2:bb:86:c2:d5:4a:12:05:d9:a0:84:47:36:
         b9:80:f4:cd:0c:63:78:19:f8:72:dc:f6:fe:0f:0d:bd:db:67:
         3d:32:fc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 04:26:07 2025 by rpki-client