Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
File:                     VHoRD_LjpNQgjqW3w-hympsP1Jw.mft (raw, json)
Hash identifier:          Y5VfVed/7jc7mUIQgAzxSA1wXcw4x8Zp6YDQVmt8VS4=
Subject key identifier:   D7:DF:31:3F:B1:39:F7:4D:E9:60:1D:F2:15:6C:5E:85:77:60:BF:2D
Authority key identifier: 54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C
Certificate issuer:       /CN=A9153303/serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
Certificate serial:       A0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
Manifest number:          9F
Signing time:             Sat 17 May 2025 05:44:34 +0000
Manifest this update:     Sat 17 May 2025 05:44:33 +0000
Manifest next update:     Sat 24 May 2025 05:44:33 +0000
Files and hashes:         1: VHoRD_LjpNQgjqW3w-hympsP1Jw.crl (hash: mbhBN5f262t+ROUpFeOEOnI5JyxehkX6x1Ja4zheq1Y=)
                          2: 2916DB783FE111EFB5A50814C4F9AE02.roa (hash: z8nIuMVscKg4ddacrN0wsJlufM+eXsIydjqCMnTO5kg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl
                          rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 05:44:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153303, serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
        Validity
            Not Before: May 17 05:44:33 2025 GMT
            Not After : May 24 05:44:33 2025 GMT
        Subject: CN=68282241-aa7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cc:1d:c6:ce:f7:21:59:59:b8:e2:70:28:a9:
                    90:cf:26:9f:19:83:f8:b2:b9:b8:96:8d:96:b3:7c:
                    b7:da:66:76:e1:9b:ca:ff:08:9c:ab:ed:97:40:13:
                    c7:8a:2a:27:7a:14:e2:e5:86:b6:04:6b:0f:c1:0e:
                    22:f1:d2:3b:7c:14:a1:b8:ce:06:43:a2:31:90:f6:
                    be:02:4a:4e:fc:0c:89:eb:fb:21:19:a4:ae:08:17:
                    cb:82:a7:db:2d:49:d5:95:41:1f:22:34:74:87:89:
                    f6:b5:5a:37:85:67:b2:41:9f:e9:c8:45:13:2e:e8:
                    9c:72:b0:35:a8:79:e7:58:90:bb:2e:12:e4:05:98:
                    6a:bb:f2:fa:8a:8c:f7:12:45:ba:80:bb:5b:5a:72:
                    cd:6d:7f:41:0c:48:98:90:2b:20:7c:54:7d:3a:41:
                    b8:f5:54:d0:68:9d:8c:51:ba:73:11:57:45:10:8d:
                    52:f5:48:39:ea:59:30:e4:1c:7c:5a:6a:ce:63:8c:
                    15:e7:9b:c2:6d:f1:e7:8b:96:55:8f:b8:bb:6a:94:
                    04:36:28:55:b3:11:ce:2f:59:47:2c:69:0f:6d:1a:
                    0c:98:06:5e:31:df:2f:3e:08:1d:21:e6:e4:1a:d6:
                    a5:04:52:13:1b:21:17:bc:45:49:64:ea:16:6e:d6:
                    b6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DF:31:3F:B1:39:F7:4D:E9:60:1D:F2:15:6C:5E:85:77:60:BF:2D
            X509v3 Authority Key Identifier:
                keyid:54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e6:73:c9:77:6f:53:c3:be:c9:fb:0f:f7:8d:6a:5d:02:4c:
         a4:80:79:af:c4:30:f4:3b:b5:bb:db:d8:b8:b4:f8:01:a5:df:
         dc:ff:7f:a8:26:5f:e6:0b:a6:00:ac:95:74:68:b0:0e:d8:8a:
         ff:dd:92:f4:af:a3:9a:5f:17:28:ac:f0:b0:10:d2:8e:c1:98:
         fa:c6:85:d4:46:44:94:1c:d4:2d:b2:34:89:ec:c9:3f:14:82:
         c6:82:20:58:1c:bb:5b:bb:86:bb:f6:26:e4:c3:06:a2:c5:37:
         18:ca:ba:93:4e:21:d0:c0:13:3f:bd:47:bf:5c:6e:9b:ed:42:
         13:6b:78:f6:7f:1e:9e:8c:a4:b1:27:c8:41:f3:11:2d:1c:64:
         9a:8c:50:b4:db:b0:92:c8:0e:ec:92:46:5d:ef:cd:e9:af:47:
         80:3b:c2:ff:b1:ab:91:a0:54:d2:e3:81:6c:bd:e5:01:b0:94:
         61:0d:b4:d1:ae:bf:ac:ea:e0:09:de:73:d0:58:1c:00:c5:7b:
         0d:ff:fb:29:e4:45:5b:3a:bc:42:cb:41:ad:c2:d3:dc:f7:26:
         ff:90:05:64:cf:ac:9e:5e:cd:60:ff:e5:f8:f3:ee:28:57:a2:
         35:d1:e5:05:99:09:58:97:21:fe:dc:e8:ec:71:3b:46:59:3b:
         18:02:32:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 11:37:03 2025 by rpki-client