Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
File:                     vv---O_FAnw03_cEx5-ygSpxMx4.mft (raw, json)
Hash identifier:          85aX3ccwnhg1JysZ/CQj0KGXW8f5nlbYJn9qju8ByFs=
Subject key identifier:   7A:77:90:31:0C:78:47:4A:37:50:87:D3:57:C4:C7:61:CF:4B:20:CC
Authority key identifier: BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E
Certificate issuer:       /CN=A91A4B39/serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
Certificate serial:       F6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
Manifest number:          F0
Signing time:             Sat 05 Apr 2025 04:40:45 +0000
Manifest this update:     Sat 05 Apr 2025 04:40:44 +0000
Manifest next update:     Sat 12 Apr 2025 04:40:44 +0000
Files and hashes:         1: vv---O_FAnw03_cEx5-ygSpxMx4.crl (hash: xfCD19HGW0bH/6oMhatVw2l9ACMFaZLTLVMMEGMj4S4=)
                          2: 32E7A4B0AF9111EEA3B14C2BC4F9AE02.roa (hash: fRxukvtDkGIC3D8QBaI9ZwcR1VcfpvwmoqPaTDJZIsg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl
                          rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 04:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B39
        Validity
            Not Before: Apr  5 04:40:44 2025 GMT
            Not After : Apr 12 04:40:44 2025 GMT
        Subject: CN=67f0b44c-4fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f7:3f:d6:54:9b:78:f0:b0:7f:b7:04:1d:80:
                    c0:2d:a9:97:0a:1d:57:32:7a:e1:11:7b:42:5c:e2:
                    cf:82:36:8a:d8:be:d5:62:8f:96:62:6e:a8:45:ac:
                    ba:41:96:3e:84:08:0f:7d:e7:09:70:9c:e2:49:7f:
                    38:5b:8f:f0:ef:28:a2:af:fb:e5:f3:94:ae:98:a9:
                    ca:e2:86:04:ac:32:68:72:cb:7c:03:af:6f:48:65:
                    06:ad:6b:aa:e6:8b:2c:d6:a1:5d:c1:86:6f:51:66:
                    69:2a:06:65:8e:ec:1a:b0:4f:a1:f9:26:bb:ec:e0:
                    a7:48:db:44:a3:4d:db:00:31:3f:18:2c:16:bd:d2:
                    74:89:e6:1c:3b:ea:4c:cd:94:3a:f8:fc:e2:21:09:
                    7e:3c:0f:e9:b0:9f:b7:6b:20:a8:0a:2c:8a:b3:4c:
                    e1:f8:fa:55:41:d2:dc:de:b7:2c:9f:dd:ec:22:5f:
                    63:bf:9b:b2:dc:9b:26:93:eb:c0:ab:35:62:b3:e8:
                    22:72:4d:61:a3:10:aa:5b:e2:10:97:71:d2:b3:bc:
                    a6:52:e5:b6:28:bf:63:d2:2a:05:5e:0c:cc:e4:d0:
                    fe:f8:63:c9:d9:7d:54:d3:9a:d5:bd:fd:12:8b:06:
                    ac:05:2b:52:c2:4e:2d:36:00:5a:be:47:3c:04:62:
                    61:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:77:90:31:0C:78:47:4A:37:50:87:D3:57:C4:C7:61:CF:4B:20:CC
            X509v3 Authority Key Identifier:
                keyid:BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:d3:d6:af:46:a7:dc:0f:3c:fc:47:76:3c:26:7d:0a:f7:05:
         bb:83:26:59:f9:68:bf:e6:43:c5:f0:c1:ea:f3:c2:9e:fb:1b:
         a4:3d:c6:00:d6:3b:8d:77:65:51:44:72:53:c1:66:10:ed:47:
         8c:ce:df:d3:f8:d8:19:2b:f2:0e:d4:33:ed:5a:50:9a:13:19:
         9f:b2:d2:bb:3e:6b:67:d9:2e:40:9f:d5:d4:b5:f1:2c:d8:f7:
         81:7a:87:2b:ad:ca:c8:ba:95:a6:3d:60:f8:5f:ca:59:9c:9e:
         c4:4a:03:c9:76:78:be:c3:80:13:ed:f2:63:0f:78:ac:b5:6a:
         2f:4b:3c:e9:c0:bf:aa:ee:5e:56:a4:81:78:30:dc:ef:dc:ea:
         a5:0e:ea:9c:c7:1d:bf:bc:98:22:c1:fa:d0:2c:b5:42:bb:23:
         d1:73:39:9d:09:2c:b5:d6:7b:fd:77:14:a8:04:48:d7:e5:17:
         78:b1:0f:b1:e4:52:61:b0:a7:10:d4:3d:ce:c5:88:45:a8:95:
         09:15:0e:32:89:da:1a:83:24:18:b4:8f:4f:9f:a4:f8:55:81:
         20:96:62:34:a5:4a:3f:40:85:58:d2:2a:b1:13:84:ae:3a:9e:
         b5:88:d6:aa:6a:7e:a8:d2:4a:cb:cf:d4:37:1c:76:81:22:e1:
         d4:98:cc:4c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRCMzkxMTAvBgNVBAUTKEJFRkZCRUY4RUZDNTAyN0MzNERGRjcwNEM3OUZCMjgx
MkE3MTMzMUUwHhcNMjUwNDA1MDQ0MDQ0WhcNMjUwNDEyMDQ0MDQ0WjAYMRYwFAYD
VQQDEw02N2YwYjQ0Yy00ZmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0/c/1lSbePCwf7cEHYDALamXCh1XMnrhEXtCXOLPgjaK2L7VYo+WYm6oRay6
QZY+hAgPfecJcJziSX84W4/w7yiir/vl85SumKnK4oYErDJocst8A69vSGUGrWuq
5oss1qFdwYZvUWZpKgZljuwasE+h+Sa77OCnSNtEo03bADE/GCwWvdJ0ieYcO+pM
zZQ6+PziIQl+PA/psJ+3ayCoCiyKs0zh+PpVQdLc3rcsn93sIl9jv5uy3Jsmk+vA
qzVis+gick1hoxCqW+IQl3HSs7ymUuW2KL9j0ioFXgzM5ND++GPJ2X1U05rVvf0S
iwasBStSwk4tNgBavkc8BGJhQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHp3kDEM
eEdKN1CH01fEx2HPSyDMMB8GA1UdIwQYMBaAFL7/vvjvxQJ8NN/3BMefsoEqcTMe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIzOS85NTA3NEEwQUFG
NTYxMUVFQTY1NUI1ODFDNEY5QUUwMi92di0tLU9fRkFudzAzX2NFeDUteWdTcHhN
eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3Z2LS0tT19GQW53MDNfY0V4NS15Z1NweE14NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEIzOS85NTA3NEEwQUFGNTYxMUVFQTY1NUI1ODFDNEY5QUUwMi92di0tLU9fRkFu
dzAzX2NFeDUteWdTcHhNeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAD09avRqfcDzz8R3Y8Jn0K9wW7gyZZ+Wi/5kPF8MHq88Ke+xukPcYA
1juNd2VRRHJTwWYQ7UeMzt/T+NgZK/IO1DPtWlCaExmfstK7Pmtn2S5An9XUtfEs
2PeBeocrrcrIupWmPWD4X8pZnJ7ESgPJdni+w4AT7fJjD3istWovSzzpwL+q7l5W
pIF4MNzv3OqlDuqcxx2/vJgiwfrQLLVCuyPRczmdCSy11nv9dxSoBEjX5Rd4sQ+x
5FJhsKcQ1D3OxYhFqJUJFQ4yidoagyQYtI9Pn6T4VYEglmI0pUo/QIVY0iqxE4Su
Op61iNaqan6o0krLz9Q3HHaBIuHUmMxM
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:06:15 2025 by rpki-client