Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.mft
File:                     VloR-W0tjoTDhh_i4Psx3QvkBrI.mft (raw, json)
Hash identifier:          FKr5hcQUhf77meOGJZz34roL27XyWJ46bp/J/PEqkU0=
Subject key identifier:   28:BC:21:49:84:E3:31:94:4D:E8:00:CF:C2:8B:DF:47:5A:77:9A:47
Authority key identifier: 56:5A:11:F9:6D:2D:8E:84:C3:86:1F:E2:E0:FB:31:DD:0B:E4:06:B2
Certificate issuer:       /CN=A912481E/serialNumber=565A11F96D2D8E84C3861FE2E0FB31DD0BE406B2
Certificate serial:       08DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VloR-W0tjoTDhh_i4Psx3QvkBrI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.mft
Manifest number:          08D8
Signing time:             Sat 18 May 2024 21:22:32 +0000
Manifest this update:     Sat 18 May 2024 21:22:31 +0000
Manifest next update:     Sat 25 May 2024 21:22:31 +0000
Files and hashes:         1: VloR-W0tjoTDhh_i4Psx3QvkBrI.crl (hash: yYyLn6BhY2pwtSK9wTlczVlxg0DI52ssbrqkaiUntUI=)
                          2: EE89292C896211EA9036675BC4F9AE02.roa (hash: KsVgadPixSXXRjY/x8oT3IjVXjgtEh5R8H13py1l+4I=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.crl
                          rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VloR-W0tjoTDhh_i4Psx3QvkBrI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2269 (0x8dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912481E/serialNumber=565A11F96D2D8E84C3861FE2E0FB31DD0BE406B2
        Validity
            Not Before: May 18 21:22:31 2024 GMT
            Not After : May 25 21:22:31 2024 GMT
        Subject: CN=66491c17-9120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:76:99:6f:48:be:bc:d0:60:f6:f7:d1:76:4e:
                    ee:d2:74:25:cb:5f:82:05:08:99:3f:36:ac:d1:40:
                    ae:0d:1a:0e:cb:51:a4:64:1a:60:64:6f:49:12:b2:
                    f0:bf:18:aa:ba:17:bf:f1:1e:b7:44:91:a7:c8:0c:
                    ab:55:16:76:91:8f:f7:af:87:01:5e:27:74:46:90:
                    24:01:6b:58:ac:e4:f0:dd:4c:00:1b:48:e6:39:e5:
                    ac:fa:06:4b:da:e4:85:57:c6:29:c1:2e:31:66:7a:
                    7c:8a:4f:06:be:19:53:b0:bd:da:9a:d4:a8:9b:3b:
                    2a:a5:16:a5:8e:fc:03:40:fb:b9:11:5d:6e:01:43:
                    c8:93:19:56:6c:08:b0:b1:f8:73:59:60:62:60:7f:
                    dc:5f:f1:c4:f6:f0:96:7d:a8:ca:ab:dc:66:4a:b4:
                    7b:ec:db:9d:e0:12:83:85:a4:6e:9a:73:92:84:0c:
                    8c:c1:64:5b:00:90:9d:ae:98:f0:bb:8a:f0:85:d9:
                    31:c1:b6:0e:71:f8:f4:aa:1b:ff:69:f9:c4:fe:2d:
                    2f:0d:50:29:bc:c6:d4:75:9d:dd:59:95:a6:ea:08:
                    89:57:60:94:61:0a:61:99:da:fc:45:4f:df:cc:ab:
                    e3:35:9b:9f:cd:80:61:9a:87:9e:3b:db:84:01:52:
                    dc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BC:21:49:84:E3:31:94:4D:E8:00:CF:C2:8B:DF:47:5A:77:9A:47
            X509v3 Authority Key Identifier:
                keyid:56:5A:11:F9:6D:2D:8E:84:C3:86:1F:E2:E0:FB:31:DD:0B:E4:06:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VloR-W0tjoTDhh_i4Psx3QvkBrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:33:6f:1a:7a:db:1d:a4:21:23:a3:59:99:b1:48:b0:4a:a4:
         53:3f:99:27:03:08:99:c5:0b:50:70:82:61:cc:fe:60:b2:1e:
         bc:2e:5f:a3:62:c2:63:77:7e:ad:03:31:42:fb:a9:7e:f5:05:
         82:cc:a3:80:4e:0c:a2:4a:c8:a0:3a:6d:19:da:d7:9a:eb:52:
         60:60:4a:4e:57:e3:4f:4a:0c:bd:f9:0b:89:88:1f:5d:25:53:
         2e:26:5f:d6:3c:71:cb:24:03:eb:61:2e:ce:b7:38:3a:84:cb:
         c7:ae:90:ae:fe:25:51:00:7c:31:6c:7a:1f:1c:64:73:6f:5b:
         5d:4a:b8:61:1a:0a:04:86:78:fd:a2:74:3c:61:a3:e1:95:8b:
         a8:c9:47:9c:48:51:5b:9b:37:61:ca:57:4a:cc:f6:6b:d8:1d:
         17:f7:3e:4c:67:c3:3f:c0:e1:9a:78:9b:84:29:a6:34:15:4b:
         ad:52:b9:dc:e2:02:04:83:ff:89:15:87:50:df:fc:f5:da:d0:
         cb:2d:12:12:7e:2a:6a:c3:0f:75:9f:46:06:49:1e:bd:5d:bd:
         c3:08:79:11:b0:ca:ce:8b:ca:33:e7:a4:51:ab:3f:36:2d:a4:
         f6:39:d3:f8:4e:3b:b3:17:ff:b8:91:93:0f:06:37:bc:94:69:
         8f:a3:d7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:27:53 2024 by rpki-client on console-ams.rpki-client.org