Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft
File:                     vm13JvnXOebsmvk0fs7LQhevej8.mft (raw, json)
Hash identifier:          Xev1SblUl3UywQsYxUf+CSOVvyv3mXgdpuAoRiuPwwQ=
Subject key identifier:   B1:68:CF:C1:E1:47:8A:3E:08:5D:B2:C5:E9:08:FA:DC:96:13:70:61
Authority key identifier: BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F
Certificate issuer:       /CN=A91ED35E/serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F
Certificate serial:       0104
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft
Manifest number:          0101
Signing time:             Thu 15 May 2025 04:26:58 +0000
Manifest this update:     Thu 15 May 2025 04:26:58 +0000
Manifest next update:     Thu 22 May 2025 04:26:58 +0000
Files and hashes:         1: vm13JvnXOebsmvk0fs7LQhevej8.crl (hash: Mn0/tpKn25Lj4atCV3yigFPn/DPLdq2V5mzzHfhLDAk=)
                          2: 3AE10060B0F111EE9727201AC4F9AE02.roa (hash: KyJCsFenYj6fuJ23jzQVPwAa2Ss88E8BW4syF1uzypU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl
                          rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 04:26:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260 (0x104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED35E, serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F
        Validity
            Not Before: May 15 04:26:58 2025 GMT
            Not After : May 22 04:26:58 2025 GMT
        Subject: CN=68256d12-12ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:56:ba:3f:70:23:57:82:d6:23:bf:7d:c5:da:
                    2b:1b:f5:ac:0e:e2:33:33:fb:7f:21:8a:9a:bf:2f:
                    57:e1:1b:33:6f:26:86:13:99:7b:6f:1a:57:ca:b6:
                    2a:35:45:b0:b4:82:55:03:86:4b:44:34:85:69:0a:
                    c2:0b:dd:42:c7:7d:0d:0b:20:1e:4a:bb:6b:53:c1:
                    4e:3a:bf:ec:e8:80:c0:8e:53:29:4d:81:52:ce:35:
                    d9:68:03:3a:74:82:8c:cf:f3:d5:3e:b4:f2:54:92:
                    a2:06:8c:fc:63:ed:2e:a1:70:2d:99:be:f7:b6:47:
                    26:0e:ca:10:89:0f:7d:c2:bd:4e:e4:82:45:6b:54:
                    c6:50:db:24:ce:5b:ce:a3:d2:c9:27:24:1d:06:38:
                    67:04:e8:ef:42:3d:de:7b:69:40:d5:25:15:7c:c7:
                    28:b1:87:59:d0:05:32:cc:78:bf:67:e6:7c:d0:cf:
                    dc:ae:ac:e7:d9:bf:23:90:f0:6a:14:54:fd:f7:21:
                    c9:e8:58:9a:bc:31:41:71:02:87:18:b3:81:66:d3:
                    9b:52:ea:e2:c6:3a:19:cb:10:50:7d:38:4b:0f:b8:
                    1f:92:d2:be:e8:f5:33:44:3c:92:7c:48:28:23:47:
                    95:e3:ef:74:db:ea:be:06:23:85:c3:9a:df:37:66:
                    5b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:68:CF:C1:E1:47:8A:3E:08:5D:B2:C5:E9:08:FA:DC:96:13:70:61
            X509v3 Authority Key Identifier:
                keyid:BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:5f:b2:7b:e7:da:fd:7a:43:99:4c:0d:c5:a9:bd:84:0b:a2:
         e2:1e:39:10:c6:bb:39:c8:f1:a7:3c:a3:0a:a4:bc:0b:aa:18:
         b7:9d:7f:dc:0b:c7:1f:48:e3:27:79:8e:23:b5:82:e6:ca:55:
         af:71:94:c7:d3:84:13:80:4b:85:97:f2:e0:87:19:e0:5b:1d:
         4a:9d:fe:fb:01:b8:f7:58:55:e8:64:27:e0:20:6b:ec:14:a7:
         11:39:16:7b:a2:ab:35:96:c5:63:95:c7:8c:07:b1:f4:c0:e0:
         27:3d:43:af:1d:91:0a:00:cb:be:6a:92:76:19:79:37:26:bf:
         f8:b8:05:f3:d5:16:35:de:24:2e:db:a3:7d:c3:b7:96:cf:df:
         67:f5:66:3d:da:50:74:b6:07:fd:00:35:c0:29:48:1e:51:52:
         8c:5d:a0:f9:b2:ab:96:00:c4:22:ee:c2:45:65:22:83:1e:ad:
         5b:da:a0:93:15:98:39:05:e9:ab:5c:e7:22:74:6a:0c:0c:53:
         32:10:0c:94:0f:dd:0f:51:3a:20:e7:c0:fb:5f:45:af:eb:91:
         ed:07:91:d7:c0:e3:d4:ab:51:41:a8:16:5b:8c:8c:48:47:c3:
         70:4c:56:32:d4:f7:bc:49:b9:ed:6a:ba:2d:a9:94:0d:63:f6:
         2f:85:ef:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 08:16:23 2025 by rpki-client