Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.mft
File:                     VR9-hn-vN0cJR19QtJbX_YhCb7E.mft (raw, json)
Hash identifier:          1ox3QF3v8W5ltWRs/l3S5yHkWiIxB4bJ3zhlmvf1Xgc=
Subject key identifier:   F3:6D:41:CA:BA:0C:D5:11:44:1F:5F:05:98:57:EF:88:6C:C9:37:43
Authority key identifier: 55:1F:7E:86:7F:AF:37:47:09:47:5F:50:B4:96:D7:FD:88:42:6F:B1
Certificate issuer:       /CN=A914417A/serialNumber=551F7E867FAF374709475F50B496D7FD88426FB1
Certificate serial:       3481
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9-hn-vN0cJR19QtJbX_YhCb7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.mft
Manifest number:          347E
Signing time:             Mon 12 May 2025 15:04:01 +0000
Manifest this update:     Mon 12 May 2025 15:04:00 +0000
Manifest next update:     Mon 19 May 2025 15:04:00 +0000
Files and hashes:         1: VR9-hn-vN0cJR19QtJbX_YhCb7E.crl (hash: 8fhuc/PQ0UXfRdSZ4Ro0rSMziciuxwIsjyMiDA9y97k=)
                          2: B4FD92C42C5211EEAD14C272C4F9AE02.roa (hash: XM3PVoMMbS3VTscbpreh5POpvogKY4I2fM4yhrQjzPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.crl
                          rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9-hn-vN0cJR19QtJbX_YhCb7E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 15:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13441 (0x3481)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914417A, serialNumber=551F7E867FAF374709475F50B496D7FD88426FB1
        Validity
            Not Before: May 12 15:04:00 2025 GMT
            Not After : May 19 15:04:00 2025 GMT
        Subject: CN=68220de1-1617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:00:2a:2a:20:4a:1e:2f:1b:bd:30:11:a2:9f:
                    38:a1:04:db:19:17:c9:b5:e6:2e:f8:d4:0a:ec:2a:
                    fc:ca:a4:56:2a:bd:49:94:a1:51:16:32:88:0c:f1:
                    f5:cc:09:7a:b7:7e:69:cb:1d:8e:ee:47:59:d8:4b:
                    ae:37:af:d9:29:23:dd:83:51:45:67:29:33:cc:3b:
                    5f:f0:d9:63:44:7a:96:d4:40:b7:7a:7c:24:89:85:
                    82:f5:d2:49:f9:78:16:ed:7f:d2:92:13:56:98:5c:
                    79:64:ef:1c:18:36:e9:0c:56:08:b2:07:d8:f3:57:
                    09:c4:24:f1:a7:2c:49:b8:7b:3f:64:3f:e4:43:dd:
                    de:a8:85:cd:cd:4e:c9:0e:12:71:4f:31:86:9d:f0:
                    91:15:af:5f:7b:e7:45:59:84:eb:7c:8a:73:a5:24:
                    aa:77:68:eb:77:73:41:50:c3:05:87:f3:1a:8d:6e:
                    17:25:b0:ca:23:e7:ce:86:f5:9b:e6:57:f9:c2:ce:
                    d1:32:49:bc:c8:45:4e:0a:10:de:ff:e9:ca:37:69:
                    d8:5b:e0:3e:dd:99:f7:13:a2:c9:03:4e:66:8b:30:
                    bb:0f:be:18:63:80:f3:8a:f8:fc:fb:a5:74:a9:21:
                    df:c4:c5:a1:00:5e:48:ce:6a:f5:5c:fd:2a:24:88:
                    a5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6D:41:CA:BA:0C:D5:11:44:1F:5F:05:98:57:EF:88:6C:C9:37:43
            X509v3 Authority Key Identifier:
                keyid:55:1F:7E:86:7F:AF:37:47:09:47:5F:50:B4:96:D7:FD:88:42:6F:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9-hn-vN0cJR19QtJbX_YhCb7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914417A/752B65021DA111E2BC82A39308B02CD2/VR9-hn-vN0cJR19QtJbX_YhCb7E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:bd:08:78:0a:c3:d7:c0:01:d9:3d:3c:eb:30:ee:45:07:b2:
         2e:aa:43:b3:34:96:bc:d6:64:18:ab:e9:42:d3:1b:71:8f:61:
         b4:96:90:c1:f3:ae:45:33:e3:1a:6d:e8:f3:0c:ac:e0:e3:f7:
         61:ee:a3:28:a4:18:8b:55:48:95:38:d0:93:b5:b1:03:62:af:
         bc:47:23:f3:de:c6:30:c9:f0:c6:4d:1b:fd:0d:c2:ff:1e:e6:
         0e:1e:22:6c:0c:68:b2:aa:17:98:07:2d:28:11:50:69:b9:8c:
         b6:2a:ce:a9:f0:d7:35:15:0a:3f:7d:27:d1:26:c0:92:1f:ee:
         f8:31:66:d1:89:8b:f2:a5:88:a5:db:af:f7:ff:8a:1d:26:9d:
         06:f7:cf:59:b3:d9:f2:b3:b3:d4:ad:16:e1:2c:4f:19:87:b6:
         b5:bf:95:95:cc:7f:94:59:6a:e0:d5:2c:1e:f1:fe:21:4d:45:
         bc:c2:d4:2b:61:42:b8:b4:9a:d6:73:c2:9d:6b:b2:27:6d:3e:
         ea:94:ab:f7:db:cd:69:7b:97:32:d5:b3:98:f0:61:17:f2:39:
         ad:c3:f9:1c:54:cc:99:2d:25:ce:06:15:a8:50:74:d3:cd:35:
         0c:a0:3e:44:9e:0e:49:87:3c:df:53:3d:dd:49:be:12:cd:a2:
         20:76:bd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:52:40 2025 by rpki-client