Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft
File:                     vPLIrbwz4n5cdnSmbahlv1qma-U.mft (raw, json)
Hash identifier:          Fs+oxwLCh4GtAoTzPDiVtgPzFVKn4nYT+kdpJpWpuTM=
Subject key identifier:   67:E8:DD:F4:CF:6A:65:F6:E9:F3:1D:0B:62:12:39:66:38:AE:32:90
Authority key identifier: BC:F2:C8:AD:BC:33:E2:7E:5C:76:74:A6:6D:A8:65:BF:5A:A6:6B:E5
Certificate issuer:       /CN=A91619D8/serialNumber=BCF2C8ADBC33E27E5C7674A66DA865BF5AA66BE5
Certificate serial:       057D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft
Manifest number:          0566
Signing time:             Fri 04 Apr 2025 23:32:26 +0000
Manifest this update:     Fri 04 Apr 2025 23:32:25 +0000
Manifest next update:     Fri 11 Apr 2025 23:32:25 +0000
Files and hashes:         1: vPLIrbwz4n5cdnSmbahlv1qma-U.crl (hash: F1QJLzEJBVVPGfiT0rUDSvDfKsrYG1PbKN4XZqVnEXY=)
                          2: E7584B4C86A211EE9791E012C4F9AE02.roa (hash: T5GiWxH5CJSVyfHnlJ00EWYvXgx25uLrmX6jBLWmVrk=)
                          3: 7B40808086A411EE90BD604AC4F9AE02.roa (hash: kPB+7Y3RTie/Oq7MRgPUTEuPgMZheJwSjNt8QuYQwFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.crl
                          rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 23:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1405 (0x57d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91619D8
        Validity
            Not Before: Apr  4 23:32:25 2025 GMT
            Not After : Apr 11 23:32:25 2025 GMT
        Subject: CN=67f06c0a-2724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:28:fe:2e:72:ca:29:25:34:ce:53:e6:ab:52:
                    0a:03:6a:81:b5:c5:a3:64:de:5e:ee:3f:76:eb:ef:
                    9a:5c:9f:66:79:92:87:e1:e4:9e:a6:fb:1a:3f:6a:
                    83:7f:8a:60:9e:fa:3b:65:40:65:ce:9a:ec:5f:8f:
                    19:c2:8a:d5:ef:59:4f:63:8e:ec:ad:0a:83:f0:54:
                    1a:5d:9e:b1:38:f2:e1:af:9b:5d:b3:07:c6:9e:96:
                    f6:07:23:86:9c:30:52:ea:3a:4a:10:fa:21:ed:00:
                    31:80:5f:8e:2d:58:55:a2:d1:e3:f9:4a:13:55:a1:
                    5a:c5:bd:a2:b5:c6:0a:2c:37:3a:2f:14:58:3f:7a:
                    1e:b0:8c:5b:eb:e4:11:94:c9:fe:8f:34:d1:57:2f:
                    69:d5:35:bc:63:ee:3a:74:0a:6d:96:02:42:be:ae:
                    07:a8:47:99:be:c1:36:c3:3c:3e:34:4b:60:4a:b5:
                    9f:12:82:f4:36:72:85:64:89:40:54:c9:35:53:70:
                    e1:1b:2f:2d:7e:d3:01:7c:d8:6c:f9:76:16:a7:26:
                    08:51:9d:ec:36:2f:80:f0:51:fc:a9:5b:99:2a:6f:
                    ee:bb:66:63:22:89:f5:ae:11:5f:b3:c8:d0:1d:e7:
                    57:d7:9f:7a:4c:04:19:7c:d2:f9:45:1b:2c:9d:05:
                    76:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E8:DD:F4:CF:6A:65:F6:E9:F3:1D:0B:62:12:39:66:38:AE:32:90
            X509v3 Authority Key Identifier:
                keyid:BC:F2:C8:AD:BC:33:E2:7E:5C:76:74:A6:6D:A8:65:BF:5A:A6:6B:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:64:22:6f:60:be:af:f8:95:25:46:cd:c7:00:bb:43:df:1d:
         95:89:13:34:da:f4:21:80:68:2f:b4:7f:68:53:22:01:a7:a9:
         3e:99:96:ad:7e:96:bc:48:4a:58:58:05:12:d1:b7:28:6d:cd:
         d8:54:be:3e:c4:6f:d8:a9:4a:01:98:97:05:57:e2:f2:b9:33:
         40:27:64:71:81:a6:fc:2a:2c:c8:f2:a1:f3:0e:59:8c:d3:4b:
         83:48:b8:0f:c9:f8:88:d6:2d:5a:7e:8c:3e:3a:9b:3f:44:04:
         e5:4f:f6:bf:6e:e5:33:3e:de:69:1a:7d:2c:e3:74:15:58:95:
         2e:69:99:d8:09:9d:b0:5f:ca:e0:78:b5:e6:15:50:87:1e:67:
         5b:01:48:01:e2:3b:d5:b1:8c:99:a1:b6:71:22:d0:16:50:73:
         45:42:be:56:32:2c:cc:0a:84:90:90:b0:2b:31:1d:14:f3:81:
         4a:09:a4:67:73:a2:cc:73:ea:d9:b4:71:df:62:eb:22:7a:49:
         3a:10:94:9c:dc:ff:b9:f8:0c:a5:01:e4:03:1e:93:3c:4a:76:
         52:d4:0a:29:1e:52:f1:ec:10:7b:97:41:a4:a5:be:5a:45:fa:
         26:23:35:75:c1:e9:40:38:5c:12:93:94:10:f5:c6:98:54:c6:
         10:c3:ad:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:28:47 2025 by rpki-client