Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
File:                     vkY_wZGbQUKyOCgTgn-3FtbukoM.mft (raw, json)
Hash identifier:          HyPoUs+HRTyCyvQ6w+imLuwvxSYUsrbnB9G5WGfm1ko=
Subject key identifier:   DE:F7:65:43:D1:50:0D:36:93:38:32:29:D8:6A:AD:45:3F:AD:FE:CF
Authority key identifier: BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83
Certificate issuer:       /CN=A91D40BF/serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283
Certificate serial:       0743
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
Manifest number:          0734
Signing time:             Wed 02 Apr 2025 21:43:46 +0000
Manifest this update:     Wed 02 Apr 2025 21:43:45 +0000
Manifest next update:     Wed 09 Apr 2025 21:43:45 +0000
Files and hashes:         1: vkY_wZGbQUKyOCgTgn-3FtbukoM.crl (hash: 0aNqXRsCaE/i/FTkb1VhFU7uJBIKrF+oLNwZ8EWXo54=)
                          2: 28543AA0BABA11EB8A51C234C4F9AE02.roa (hash: tLbuywK1hQsCi3a1AqRQB3esx6wP54LrqFgdAXcaBdM=)
                          3: ACEBC29CC5B911EBB41FAF2DC4F9AE02.roa (hash: XOt7bB+UgZTY8Thh+DvUt1JxAIDEDKn5j8X2t+ws97c=)
                          4: 2798B9A6BABA11EB8A51C234C4F9AE02.roa (hash: +zcjX2imATb1GbMG2fycsIcaiWvdU6/+K/wkiamqX6U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl
                          rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 21:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1859 (0x743)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D40BF
        Validity
            Not Before: Apr  2 21:43:45 2025 GMT
            Not After : Apr  9 21:43:45 2025 GMT
        Subject: CN=67edaf92-3fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:73:df:c5:8d:e4:79:36:33:24:04:73:07:12:
                    94:5e:f1:2a:6b:88:2f:66:61:5c:6e:f4:5a:c4:7f:
                    8b:20:0c:7f:24:4b:0d:97:7f:a7:c3:c3:53:36:25:
                    44:4d:f6:e4:f4:18:8d:e5:9f:b8:90:6b:d5:dc:9e:
                    6b:96:a6:10:95:a9:43:ab:71:b3:6b:f2:82:9f:83:
                    7a:46:9b:c3:57:c2:f1:ee:a0:03:09:aa:0a:ae:14:
                    3c:d7:06:b3:a1:45:53:a4:bc:76:e2:56:58:62:a7:
                    d4:a7:6e:d8:80:f2:72:2a:39:6b:66:b2:80:42:1f:
                    7a:ab:49:6a:f8:3b:d4:c5:2b:12:c4:2e:ca:cd:27:
                    19:84:c0:26:9e:d9:ae:b5:2c:69:74:c9:c2:2c:9a:
                    a2:99:dd:8a:3c:54:c3:da:c3:01:42:77:09:81:ce:
                    21:7f:c1:fc:bf:7e:2a:d1:44:64:0c:81:81:cb:66:
                    7e:52:54:09:23:1d:3d:7a:03:fe:31:8b:34:19:eb:
                    7c:e8:23:da:25:a2:3f:95:01:28:a1:6e:7e:38:d2:
                    30:13:88:ed:c2:40:7d:1a:75:12:5a:79:5b:75:66:
                    25:fb:69:31:a1:2e:f4:79:3f:b2:60:30:64:cd:66:
                    aa:dd:6a:92:e4:98:32:80:5a:d9:54:b6:a1:81:d9:
                    c2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F7:65:43:D1:50:0D:36:93:38:32:29:D8:6A:AD:45:3F:AD:FE:CF
            X509v3 Authority Key Identifier:
                keyid:BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:24:41:92:17:9d:33:d0:b7:91:b5:aa:61:e9:dd:e9:9c:92:
         82:73:8a:59:be:5b:a5:1b:eb:af:c1:ef:e1:63:f9:37:ee:da:
         5a:af:9c:04:72:2e:d8:7b:10:ca:4a:0a:1a:d3:d2:b0:f9:e4:
         d6:dd:9f:c8:cd:d7:ce:da:c2:38:2b:b6:cc:83:b6:91:65:c7:
         93:b6:cc:ff:09:f4:9b:b1:d1:dd:4a:55:14:26:9b:ae:24:e9:
         85:dc:c2:1b:1f:bb:8d:75:23:c8:24:ea:5d:c0:56:1a:6f:d6:
         8d:d5:40:d1:d5:8f:8a:73:32:01:ad:69:02:95:72:5f:ba:3a:
         63:0d:26:85:f5:9d:90:17:62:50:e9:c0:30:36:0a:88:fd:8b:
         dc:64:d1:ae:81:db:d6:b3:3c:07:84:b4:06:f9:d2:c6:71:2c:
         67:db:ff:d2:8b:88:65:8a:ef:8f:ea:de:7d:ed:32:07:64:16:
         a3:70:c0:ac:89:4a:aa:ab:81:dc:c0:ba:13:e6:24:b4:4b:79:
         2a:ef:ef:ba:d8:39:17:1d:2a:11:84:4e:ee:a3:bb:ff:e0:d8:
         af:f5:f2:36:c3:ed:27:70:ff:8b:62:0b:74:a3:33:37:df:81:
         cb:32:23:f1:9b:fd:58:4d:20:01:a3:e7:8c:c9:2a:a7:50:76:
         00:48:38:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:26:58 2025 by rpki-client