Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft
File:                     Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft (raw, json)
Hash identifier:          TxKGBOylmXerAAbGEsnHfSV/Jb5QcS0Uxf+Ywno7Mcw=
Subject key identifier:   E4:BB:E1:84:52:06:AD:CF:BB:1F:8C:87:1F:34:41:61:51:36:9B:B0
Authority key identifier: 57:2F:BF:1A:C4:D2:F8:49:E2:F5:BB:80:76:74:F0:1B:EB:F1:72:9D
Certificate issuer:       /CN=A918CC02/serialNumber=572FBF1AC4D2F849E2F5BB807674F01BEBF1729D
Certificate serial:       6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy-_GsTS-Eni9buAdnTwG-vxcp0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft
Manifest number:          69
Signing time:             Tue 01 Jul 2025 07:46:32 +0000
Manifest this update:     Tue 01 Jul 2025 07:46:32 +0000
Manifest next update:     Tue 08 Jul 2025 07:46:32 +0000
Files and hashes:         1: Vy-_GsTS-Eni9buAdnTwG-vxcp0.crl (hash: j3d8hWkm1F8nipGnIrBKGG0WIlOE0ymqj9uXTCzr+sU=)
                          2: 56C91968C5C011EFA167B30AC4F9AE02.roa (hash: Qpsj8zeT4wk7y+WSIb+TFw/XxcY82tQw87PIGXkqgxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.crl
                          rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy-_GsTS-Eni9buAdnTwG-vxcp0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 07:46:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CC02, serialNumber=572FBF1AC4D2F849E2F5BB807674F01BEBF1729D
        Validity
            Not Before: Jul  1 07:46:32 2025 GMT
            Not After : Jul  8 07:46:32 2025 GMT
        Subject: CN=68639258-d66c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2b:84:a6:19:74:6b:25:44:94:8b:b1:86:f2:
                    d9:82:47:97:2f:b9:2b:15:6f:1d:72:62:a6:52:f6:
                    f4:0f:4a:b4:d8:cc:bb:ad:f5:3e:97:d1:fa:6e:b0:
                    c9:4e:27:d8:7f:84:fc:90:f5:56:d6:59:8a:70:23:
                    ab:4d:49:bd:84:8f:73:76:4e:dc:f7:71:a4:5a:1f:
                    85:53:f1:5a:ae:10:90:ac:5e:31:39:f3:f1:86:d8:
                    47:a4:75:80:15:60:62:d2:44:af:b6:d3:bb:66:e6:
                    d4:9d:95:99:bb:17:af:fd:81:8e:bf:79:0c:3f:bd:
                    01:33:de:70:50:a2:dc:7f:9c:a1:5c:e3:ad:c8:d6:
                    f4:d1:ad:20:eb:04:c1:d0:c8:0c:14:bf:72:22:b1:
                    94:95:b8:3c:98:be:87:1e:1f:93:13:2b:db:ad:46:
                    22:1a:56:87:a0:48:9a:0b:fa:bf:04:b3:3a:36:6f:
                    e3:42:93:8a:98:a5:07:28:75:92:0b:d9:c5:25:33:
                    4c:50:54:26:71:f4:d3:a6:46:97:31:e5:0e:56:e6:
                    50:22:ef:76:76:c7:09:20:8e:59:3a:7c:70:c7:ee:
                    97:3d:24:5b:73:df:7f:f3:d1:4f:db:12:2f:bf:a2:
                    48:7c:04:69:01:ba:e2:79:61:f5:84:71:09:d8:47:
                    96:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BB:E1:84:52:06:AD:CF:BB:1F:8C:87:1F:34:41:61:51:36:9B:B0
            X509v3 Authority Key Identifier:
                keyid:57:2F:BF:1A:C4:D2:F8:49:E2:F5:BB:80:76:74:F0:1B:EB:F1:72:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy-_GsTS-Eni9buAdnTwG-vxcp0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:c5:4f:79:ab:62:d6:d6:aa:91:e7:65:d4:8d:9b:9c:ab:bb:
         6d:e1:08:ba:7b:2c:79:28:34:87:15:af:2b:91:4f:df:70:89:
         e1:59:6b:aa:00:11:57:d1:22:db:3a:83:da:15:09:f6:00:a0:
         c0:21:fb:c0:55:28:30:65:b0:12:f7:7e:89:f0:fc:0f:8a:a0:
         30:96:42:b3:6f:a3:61:ce:84:5d:93:2b:97:7e:09:cf:87:ec:
         55:18:62:76:98:33:e0:c2:1a:ac:a8:29:15:e8:c8:c4:ad:80:
         bc:50:c3:ca:c1:92:67:d5:9a:10:a8:dd:63:a9:4f:e5:5f:2f:
         5d:14:e2:08:d8:bf:42:e3:73:ba:fb:90:16:02:0e:b0:bd:27:
         9c:af:f1:a8:60:58:a8:20:ac:3f:fa:ab:f9:7d:fd:f7:18:24:
         36:90:0c:19:c7:7c:f0:c8:92:f1:66:f0:94:7f:e4:3d:21:f5:
         e7:0a:68:15:34:cb:09:ff:aa:ca:e8:36:0c:92:f6:89:40:4c:
         01:b2:0d:72:3c:4e:4c:77:ef:fd:e6:94:cf:01:57:69:e2:00:
         f6:dc:7d:12:d3:70:c5:06:34:1f:5d:35:5e:ef:24:45:85:49:
         1a:9d:03:00:91:a0:cc:70:c7:a8:c7:d1:a9:1a:98:04:2c:b8:
         56:1c:66:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:37:46 2025 by rpki-client