Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft
File:                     VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft (raw, json)
Hash identifier:          ZYVMlm438FoP6J+b5np96+HWxMpox1VSjNnytF87F84=
Subject key identifier:   BD:8B:D8:D1:50:27:20:BA:80:1A:92:10:A7:5F:2A:F6:A0:A3:0A:58
Authority key identifier: 56:B6:5B:80:9F:5D:AB:3A:5A:B1:57:CA:05:79:FD:8E:16:ED:CF:B3
Certificate issuer:       /CN=A91DB782/serialNumber=56B65B809F5DAB3A5AB157CA0579FD8E16EDCFB3
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrZbgJ9dqzpasVfKBXn9jhbtz7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft
Manifest number:          F8
Signing time:             Thu 03 Apr 2025 04:26:58 +0000
Manifest this update:     Thu 03 Apr 2025 04:26:57 +0000
Manifest next update:     Thu 10 Apr 2025 04:26:57 +0000
Files and hashes:         1: VrZbgJ9dqzpasVfKBXn9jhbtz7M.crl (hash: juyT3sYWQBCi0Qh6BrMk7vlc7BXHkHvXUGLkk7C1Orw=)
                          2: F4DE3470979B11EE901E210BC4F9AE02.roa (hash: fiC0aTLSwEHcelKVanda2XAXfzpX0FepeWYGM7C3Vk0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.crl
                          rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrZbgJ9dqzpasVfKBXn9jhbtz7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 04:26:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB782
        Validity
            Not Before: Apr  3 04:26:57 2025 GMT
            Not After : Apr 10 04:26:57 2025 GMT
        Subject: CN=67ee0e11-9438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:be:4e:32:89:07:81:87:13:f1:56:98:00:c9:
                    d2:fc:16:99:47:53:0d:e6:a3:70:c4:7f:e8:da:05:
                    39:46:88:de:ab:f4:52:31:53:2c:02:02:30:e1:2e:
                    15:5f:e9:a3:e0:76:b5:a2:20:0b:99:0d:70:97:f6:
                    31:e2:21:8f:59:16:7d:44:73:82:e3:a1:42:e9:48:
                    7e:ab:eb:4e:3b:db:9e:ae:e9:70:ac:a3:e3:78:91:
                    15:7b:72:f1:cf:2f:7e:ed:03:cb:9a:72:d1:ee:2b:
                    b7:50:7c:93:85:57:25:0a:4f:39:67:f5:4b:f3:36:
                    1a:0b:57:bc:83:41:08:f5:6c:bf:aa:39:4c:5e:c4:
                    64:5f:af:dc:6b:f9:79:99:31:55:ea:50:a7:75:cb:
                    34:d3:a0:b7:92:ee:3d:da:9c:61:7c:f0:4c:53:06:
                    fb:cf:12:6a:38:38:14:96:9d:17:7c:9a:dc:7c:ea:
                    b6:5d:b5:6a:64:d4:5b:a2:38:c8:d8:7b:0f:5b:d5:
                    c4:14:1a:84:65:f6:51:17:9c:5f:cc:78:78:23:63:
                    ad:86:de:b7:5d:c1:6f:dc:5a:c8:16:e4:da:51:3b:
                    2f:c0:cd:86:97:0c:31:1d:7c:44:01:6e:ae:75:fd:
                    7d:fd:39:27:f2:f7:27:9f:c0:67:12:40:15:df:5a:
                    45:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8B:D8:D1:50:27:20:BA:80:1A:92:10:A7:5F:2A:F6:A0:A3:0A:58
            X509v3 Authority Key Identifier:
                keyid:56:B6:5B:80:9F:5D:AB:3A:5A:B1:57:CA:05:79:FD:8E:16:ED:CF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrZbgJ9dqzpasVfKBXn9jhbtz7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:14:6f:71:58:7d:8c:9f:d8:37:a1:af:e3:23:fa:e0:47:bd:
         20:0a:00:1c:fe:c0:f7:3b:78:40:d2:ae:d2:64:9c:42:fb:62:
         1d:46:96:91:af:4a:1b:bd:1a:39:3c:92:96:15:fe:6c:99:53:
         ef:29:a5:1a:98:00:1b:e6:05:b3:d8:f5:36:9f:f5:3e:13:c2:
         74:8d:19:c3:4e:a2:05:57:ec:3b:fb:a9:ea:fc:fc:fe:ad:dc:
         42:a3:52:a7:fc:1b:5d:b7:51:16:10:59:b2:4c:6e:08:b1:87:
         02:ca:ae:1a:62:76:29:88:0b:9e:86:b8:80:0a:e1:f2:a2:4b:
         62:af:fc:50:3b:b9:63:63:29:d9:e1:a0:44:d2:b5:2b:52:42:
         42:56:ad:86:bb:b7:6f:c4:49:a7:3c:0b:f0:4c:83:f1:f6:ff:
         51:5a:7a:a3:18:49:48:1f:8e:1e:59:b4:24:3e:99:c3:bc:78:
         9a:d6:2d:49:b7:0f:e0:34:bf:08:a8:93:04:7b:3e:c2:1b:7a:
         64:fe:d5:6f:a9:c1:92:70:25:af:c2:27:51:12:f0:d1:a7:a0:
         9e:9e:14:e4:72:7c:47:d6:a5:8a:ad:70:29:b3:b8:19:f0:b9:
         24:5b:56:7d:3c:71:16:70:19:53:f4:d1:33:7f:7a:3e:f6:cc:
         be:a7:9b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:01:55 2025 by rpki-client