Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
File:                     vwxRAalGDasWiyHwJOMMiVoCjEI.mft (raw, json)
Hash identifier:          2sL/iyTXRsk6IibRKCSll59LRCwKEYgxtLLX+2WUWQA=
Subject key identifier:   22:03:E0:B7:0B:94:FF:4A:D8:DC:61:E4:5B:D6:68:36:B1:AB:87:F3
Authority key identifier: BF:0C:51:01:A9:46:0D:AB:16:8B:21:F0:24:E3:0C:89:5A:02:8C:42
Certificate issuer:       /CN=A9180307/serialNumber=BF0C5101A9460DAB168B21F024E30C895A028C42
Certificate serial:       04E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
Manifest number:          04E3
Signing time:             Wed 02 Apr 2025 23:46:11 +0000
Manifest this update:     Wed 02 Apr 2025 23:46:10 +0000
Manifest next update:     Wed 09 Apr 2025 23:46:10 +0000
Files and hashes:         1: vwxRAalGDasWiyHwJOMMiVoCjEI.crl (hash: eJCnnrpRny2tT6BfGmkUxtSv8/d3KTSzMZwreLz7IXM=)
                          2: 1829AEE8146B11EC81328F59C4F9AE02.roa (hash: aIxAvyaJTpqygmqgpU8RPaqkDh+o4vZaFakEjzwWwkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.crl
                          rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 23:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1257 (0x4e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180307
        Validity
            Not Before: Apr  2 23:46:10 2025 GMT
            Not After : Apr  9 23:46:10 2025 GMT
        Subject: CN=67edcc43-864d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d1:a7:1d:f8:27:fe:0d:ae:e7:1f:84:d1:8f:
                    2f:1f:c6:78:37:ac:19:df:9e:c3:d4:f4:93:20:5d:
                    98:ae:37:b6:dc:f0:8f:28:9f:bf:a1:0d:3f:36:65:
                    c0:28:89:4d:aa:5b:49:d5:24:b5:a9:19:24:e5:51:
                    9c:c6:52:6f:c5:7b:a4:f4:09:0a:8f:5b:22:41:51:
                    1b:92:c0:61:d3:13:05:4c:33:63:5c:e4:44:45:ca:
                    d7:73:b4:ef:25:e3:44:08:b9:84:fd:37:71:0f:ad:
                    41:2b:6d:89:9b:16:c2:ff:df:0c:20:9b:be:d3:f0:
                    30:c0:37:5d:c8:b4:ef:7c:8a:2b:3a:dc:27:d3:cf:
                    be:79:d5:e2:67:c0:de:06:42:97:34:1b:29:49:27:
                    68:e5:ea:10:fd:03:ec:e0:3e:ce:47:e4:cc:e5:c6:
                    18:ef:50:dd:4f:7f:36:a0:d3:f0:54:7a:3b:69:9c:
                    3d:bc:dc:c3:7f:6f:6f:1f:57:90:8c:80:bd:75:14:
                    2f:4c:48:e7:de:59:79:a8:e3:ad:b8:7d:97:16:4c:
                    00:06:41:5d:e5:1f:e5:49:b9:3a:78:84:db:8a:ab:
                    a8:64:d7:d3:11:17:b3:d2:56:0f:56:bb:9b:18:79:
                    0a:1d:a6:a2:58:41:c0:37:66:f1:db:73:b6:fa:3c:
                    0f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:03:E0:B7:0B:94:FF:4A:D8:DC:61:E4:5B:D6:68:36:B1:AB:87:F3
            X509v3 Authority Key Identifier:
                keyid:BF:0C:51:01:A9:46:0D:AB:16:8B:21:F0:24:E3:0C:89:5A:02:8C:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:8d:f4:6b:c7:22:e2:a6:d9:e4:e1:b7:5b:97:d0:fc:81:3a:
         92:28:d4:6b:c5:61:1a:a4:82:c9:fe:0a:1f:9c:2b:89:bb:1b:
         ac:23:71:55:2e:8c:ed:50:fd:27:d6:c5:60:82:aa:64:4c:e4:
         70:f5:f6:79:55:33:39:37:fb:9d:4a:5a:86:bf:63:31:69:15:
         77:d2:b9:13:12:aa:45:27:7e:06:57:a5:0c:60:ca:21:50:8f:
         52:29:8b:4d:2f:b7:a0:78:f0:48:aa:8a:24:10:0b:b9:71:6c:
         f8:bd:50:6c:48:cd:ec:be:f2:70:54:78:dc:7e:d8:55:51:7c:
         db:f2:e2:29:c0:7b:e5:28:b2:f8:b5:e8:12:9e:de:d2:9c:b2:
         71:47:ad:7e:a5:7c:6c:12:fb:31:2d:6d:02:02:bd:0b:31:0d:
         5a:fe:f3:42:7f:4d:f5:ae:db:8e:37:54:e8:ff:53:1a:54:a4:
         e7:66:70:d2:82:1b:59:0a:11:e1:0a:5c:8d:2a:f1:d5:c8:7e:
         f2:e5:79:de:5c:0d:4a:30:c0:b0:2c:89:f1:d8:60:0e:cb:e4:
         4d:9e:c2:c7:69:75:96:09:fe:8f:22:2b:51:80:97:bf:b4:9a:
         15:1f:25:dd:63:93:81:0b:f6:98:a8:e6:08:4c:ea:b1:56:18:
         ce:70:ea:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:43 2025 by rpki-client