Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft
File:                     VRT85Dhj9Rga80k4LThBTpYPCW8.mft (raw, json)
Hash identifier:          +kC5VJajRCKk2+Dr/MhFjXqTCPP1XOSjH0mrasFWpaw=
Subject key identifier:   94:41:1F:E6:7D:B9:E1:1B:36:26:10:B7:1C:77:12:45:52:FE:EA:69
Authority key identifier: 55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F
Certificate issuer:       /CN=A9195262/serialNumber=5514FCE43863F5181AF349382D38414E960F096F
Certificate serial:       08C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft
Manifest number:          08BC
Signing time:             Tue 08 Apr 2025 20:21:19 +0000
Manifest this update:     Tue 08 Apr 2025 20:21:18 +0000
Manifest next update:     Tue 15 Apr 2025 20:21:18 +0000
Files and hashes:         1: VRT85Dhj9Rga80k4LThBTpYPCW8.crl (hash: 24iuZNXCNLXOD4JQWLz0iysjs3sm78RpNni35O9RUw8=)
                          2: DFC21CD8B1CF11EAA8732709C4F9AE02.roa (hash: fBbrGPpyBqHG5VjMBpwa+Y1+AP7kUm89FdDIYPNDwG8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl
                          rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Apr 2025 20:21:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2245 (0x8c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195262
        Validity
            Not Before: Apr  8 20:21:18 2025 GMT
            Not After : Apr 15 20:21:18 2025 GMT
        Subject: CN=67f5853e-82b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:27:73:28:70:b3:3e:3f:b6:b4:68:8f:33:3c:
                    5d:ea:0a:b2:11:57:ae:99:a7:38:1d:1d:24:1c:ad:
                    72:7f:0b:f5:84:46:cf:10:b9:89:51:ed:39:ad:74:
                    1b:86:10:74:1b:06:4c:a8:f5:97:19:eb:4c:9c:f0:
                    aa:08:9c:ab:46:e6:df:56:7c:a6:1a:e2:5e:14:e6:
                    10:7b:b4:92:30:6d:38:11:72:ba:60:76:66:e2:eb:
                    9a:d0:74:e2:81:e0:e9:3d:86:76:14:b6:99:2a:c4:
                    06:00:b0:e9:fc:ba:47:9c:eb:6f:cc:66:1f:11:8e:
                    ab:7b:46:db:a1:9b:be:88:b2:6c:fa:61:9b:18:f9:
                    bf:fb:59:1f:44:fa:79:e2:b1:1f:fb:de:3c:09:23:
                    9e:e9:3f:3b:53:e9:e2:36:59:e2:4c:da:ac:2e:e8:
                    40:f0:d2:c4:f9:d2:f9:a0:af:40:d2:3f:02:90:c6:
                    a5:0e:61:7e:93:23:45:e6:e7:7b:2c:60:e3:4e:47:
                    ef:83:af:8b:0c:99:cf:3a:6e:fb:ca:4c:a3:c4:11:
                    86:a3:a1:4a:61:66:bc:c8:99:59:95:31:c6:49:77:
                    a9:33:55:2e:7b:0b:ad:3e:81:ec:82:77:e2:8a:2f:
                    bb:48:0c:ea:b9:b3:d9:e1:14:51:50:ec:73:fd:5b:
                    7e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:41:1F:E6:7D:B9:E1:1B:36:26:10:B7:1C:77:12:45:52:FE:EA:69
            X509v3 Authority Key Identifier:
                keyid:55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:11:ef:c6:28:d2:74:38:7e:63:01:a8:02:01:f9:76:3b:7e:
         06:66:c4:5e:6f:75:d3:7c:f8:01:c3:2c:00:09:01:23:38:d8:
         39:81:cf:5b:71:6a:31:d9:76:e7:47:13:ed:4f:a4:56:0e:84:
         c6:4c:d4:a3:db:72:d3:66:68:1e:b6:c7:09:fd:23:09:96:14:
         b2:1e:2d:85:a4:2b:4e:7f:0e:ca:62:8b:36:37:15:98:e4:d7:
         de:30:7d:de:45:c5:8a:72:56:57:35:ba:80:c7:73:f0:c1:96:
         b3:0a:29:d6:e7:59:39:7c:21:8e:90:24:3c:9b:69:c6:04:4c:
         74:6c:4d:fe:72:a7:e1:f6:dd:e1:70:3c:8f:87:4d:8b:95:90:
         9d:68:af:50:42:4d:18:c5:a4:af:25:52:54:5f:c3:b4:bb:30:
         46:36:bc:5a:31:28:a6:68:bf:b3:6d:68:4b:84:3f:0a:1f:9d:
         77:18:fa:ef:50:c1:fb:e8:fc:4c:08:d8:c3:79:aa:3c:6a:57:
         f3:25:97:88:1d:e9:00:e0:da:99:d6:f3:7c:ad:83:d9:2b:f7:
         06:bf:61:ef:8d:99:0c:74:a5:5a:2a:f5:4c:20:43:cc:24:ed:
         65:e5:ad:34:21:51:00:b6:88:4c:57:04:06:89:7d:0d:3c:ea:
         9c:f3:15:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 17:30:20 2025 by rpki-client