Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft
File:                     vmOANw9kBuY_dG-vUrxQHsTQvVI.mft (raw, json)
Hash identifier:          Wy1OUFRftJeY28Pmx9RrR+7Kz/R23M1LhySGfunHQn0=
Subject key identifier:   27:3F:60:66:40:2D:C0:31:51:ED:A5:ED:C5:25:ED:28:77:B1:C7:AA
Authority key identifier: BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52
Certificate issuer:       /CN=A9171B8D/serialNumber=BE6380370F6406E63F746FAF52BC501EC4D0BD52
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft
Manifest number:          38
Signing time:             Thu 03 Jul 2025 07:49:41 +0000
Manifest this update:     Thu 03 Jul 2025 07:49:40 +0000
Manifest next update:     Thu 10 Jul 2025 07:49:40 +0000
Files and hashes:         1: vmOANw9kBuY_dG-vUrxQHsTQvVI.crl (hash: ZZtmM8LknwmQR91SP+owbKbJV61364KU5/ClPBrG1iQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl
                          rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171B8D, serialNumber=BE6380370F6406E63F746FAF52BC501EC4D0BD52
        Validity
            Not Before: Jul  3 07:49:40 2025 GMT
            Not After : Jul 10 07:49:40 2025 GMT
        Subject: CN=68663614-e434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:06:87:49:2d:ff:87:2a:e3:bb:6f:f8:82:e8:
                    29:eb:e4:e5:42:5d:f2:78:65:da:b0:7d:c4:30:98:
                    1c:87:e2:16:0c:1a:d6:b5:4c:0a:6b:4c:50:ea:fc:
                    97:1a:60:ea:6b:cb:50:2c:c8:e8:33:47:72:ec:7c:
                    ff:55:1a:24:5d:93:5e:99:8e:28:60:c9:98:f7:8e:
                    32:32:59:18:8c:e9:d4:b7:1c:78:6f:a4:7f:c1:f5:
                    0a:aa:c6:bd:e6:8f:94:d6:3d:ca:56:ff:88:c7:4e:
                    52:34:cb:5f:52:13:3e:41:44:7d:a0:b2:ce:7f:91:
                    dd:80:a8:c0:cd:d2:a8:e3:52:ec:09:88:c0:c0:f5:
                    31:23:30:dc:80:1b:a0:43:c2:83:62:56:0b:be:56:
                    47:6c:7e:da:15:12:b7:20:c5:c5:c7:f0:5c:7c:e0:
                    e7:d3:6b:2e:70:0d:f1:b3:ce:58:cf:12:bb:3d:e0:
                    7a:66:34:07:ea:54:16:95:2d:fa:d8:be:cd:48:d2:
                    4e:d9:af:f4:d2:02:42:b6:ed:6c:df:6c:9f:fb:94:
                    8c:84:5e:f5:4c:1b:48:f2:c5:66:43:5a:9c:8a:c0:
                    a6:44:4d:a9:0b:3e:ee:49:ca:1d:60:0c:47:ef:87:
                    bc:73:92:41:9f:3e:dd:1f:e7:43:46:92:5b:63:1e:
                    ff:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3F:60:66:40:2D:C0:31:51:ED:A5:ED:C5:25:ED:28:77:B1:C7:AA
            X509v3 Authority Key Identifier:
                keyid:BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:5f:a5:7d:cf:70:a4:34:b7:9e:10:4f:17:50:e2:b5:a7:a2:
         fc:0a:e5:c9:23:a4:b5:47:d7:b9:f9:70:77:9b:b0:e8:03:fa:
         9e:7a:8e:c2:69:9b:40:be:cc:91:07:c4:6c:af:dd:06:8d:d2:
         81:3c:b4:2a:67:8a:90:d9:fc:bd:72:99:62:3d:d3:44:c2:27:
         94:5c:b1:90:b2:1b:a4:bc:84:11:0a:51:0f:ed:e5:ff:ee:1d:
         69:45:29:58:ac:54:49:de:d8:12:cb:c4:0b:b7:ec:19:bc:ee:
         b6:95:77:2d:21:54:38:1a:c6:8c:af:8e:cc:12:6f:4a:df:38:
         68:72:bc:78:90:99:32:cc:43:ed:ca:1a:fe:f8:8d:8e:23:a8:
         22:d2:01:6d:c7:1d:dc:fa:f5:c0:c5:91:0d:77:29:e8:77:3b:
         fc:57:41:1e:4e:58:d4:6a:74:61:f5:61:7a:89:fe:2c:aa:32:
         8b:ee:d8:dc:5e:53:98:fb:21:a4:7f:73:6d:49:1e:5b:28:ec:
         7d:be:09:3e:6a:d0:2c:7e:57:c6:34:22:0f:11:dc:00:da:e7:
         7e:a4:26:87:cc:0b:93:a2:d4:d7:ca:68:d4:c2:ce:86:83:fb:
         87:4c:d0:7e:6c:96:a7:cc:f0:17:93:e2:01:0d:40:2a:f7:32:
         47:3c:c1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 00:04:55 2025 by rpki-client