Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.mft
File:                     VloR-W0tjoTDhh_i4Psx3QvkBrI.mft (raw, json)
Hash identifier:          5VVfAZQqGltx4Ptdub2tC69UTB7Q1CkJAyaBKRQOmlY=
Subject key identifier:   B5:8E:95:26:8E:27:BD:51:86:EA:F6:15:DD:A5:65:33:D9:7B:C6:D5
Authority key identifier: 56:5A:11:F9:6D:2D:8E:84:C3:86:1F:E2:E0:FB:31:DD:0B:E4:06:B2
Certificate issuer:       /CN=A912481E/serialNumber=565A11F96D2D8E84C3861FE2E0FB31DD0BE406B2
Certificate serial:       08D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VloR-W0tjoTDhh_i4Psx3QvkBrI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.mft
Manifest number:          08D3
Signing time:             Mon 06 May 2024 21:29:18 +0000
Manifest this update:     Mon 06 May 2024 21:29:17 +0000
Manifest next update:     Mon 13 May 2024 21:29:17 +0000
Files and hashes:         1: VloR-W0tjoTDhh_i4Psx3QvkBrI.crl (hash: 9+wM1k1FvbIBLZ7RSomqwpy6pn6mg+M4TvuQFyvgQIM=)
                          2: EE89292C896211EA9036675BC4F9AE02.roa (hash: KsVgadPixSXXRjY/x8oT3IjVXjgtEh5R8H13py1l+4I=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.crl
                          rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VloR-W0tjoTDhh_i4Psx3QvkBrI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 20:40:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2264 (0x8d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912481E/serialNumber=565A11F96D2D8E84C3861FE2E0FB31DD0BE406B2
        Validity
            Not Before: May  6 21:29:17 2024 GMT
            Not After : May 13 21:29:17 2024 GMT
        Subject: CN=66394bad-5f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5b:13:c1:29:50:3b:c6:d0:b5:0c:f4:23:5f:
                    fd:e8:0a:70:ee:6e:73:bd:66:72:33:59:93:a8:f0:
                    2f:eb:55:68:bc:19:9d:b1:0d:1d:7d:fb:87:1c:59:
                    2f:30:aa:29:7c:aa:ed:f1:92:d5:03:5f:20:26:91:
                    a3:e6:6f:fc:81:9a:35:df:15:9d:ff:d1:d0:fa:df:
                    ae:55:45:df:67:c0:2a:0e:6d:61:21:8f:b9:1a:d3:
                    84:50:67:d0:08:97:99:4d:c5:64:43:5b:19:2b:aa:
                    50:d2:58:1a:57:c9:c3:97:72:0d:ee:7a:ba:9d:fa:
                    c3:ac:e9:b3:63:30:c1:25:6f:ad:d6:89:ff:3b:4f:
                    22:29:ae:76:d2:74:2c:74:ba:4e:0e:15:42:d3:1f:
                    71:95:4d:1e:05:11:a5:34:4f:27:9c:4c:c1:b7:73:
                    42:a4:3e:3b:84:6d:a7:72:27:da:07:18:1c:7a:29:
                    62:c0:1e:dd:e2:97:7f:c0:99:c5:3c:7f:18:35:c8:
                    b5:12:52:df:77:3f:92:3c:25:62:46:39:ef:ba:a8:
                    29:a4:5e:4d:15:f2:2c:0a:2c:8c:18:c3:48:85:22:
                    e6:19:39:73:8b:41:a0:e2:8d:ea:ba:c4:d4:a7:d6:
                    64:f5:65:24:2c:a4:e1:12:b4:26:3c:00:74:76:84:
                    33:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8E:95:26:8E:27:BD:51:86:EA:F6:15:DD:A5:65:33:D9:7B:C6:D5
            X509v3 Authority Key Identifier:
                keyid:56:5A:11:F9:6D:2D:8E:84:C3:86:1F:E2:E0:FB:31:DD:0B:E4:06:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VloR-W0tjoTDhh_i4Psx3QvkBrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:37:31:1b:6c:0a:5e:76:39:da:2c:54:c3:70:9b:5b:d7:38:
         e2:4f:40:b2:40:fc:2d:ae:41:0b:01:2c:59:7d:1e:42:0e:da:
         c9:41:8a:7b:32:b0:75:4c:e2:c9:c3:2b:32:34:9c:04:6d:01:
         6b:91:12:e0:97:6f:d0:5f:ff:81:f2:5e:82:9a:57:5b:2f:4a:
         d9:c9:57:45:60:68:09:b7:8b:45:ca:27:f0:7d:47:4d:f7:fa:
         39:9a:15:69:9e:6e:b2:f0:9d:c0:a9:e9:95:da:d4:7b:7e:d8:
         d0:26:7c:8e:35:bb:d0:69:78:73:95:c3:49:3e:62:9f:01:43:
         67:bb:34:84:dd:66:51:b8:23:99:f1:63:e5:38:ff:0b:34:82:
         8a:df:87:9a:a2:ba:24:ba:b9:85:f9:b0:4e:af:bc:a0:b7:a4:
         26:f8:9a:1f:9f:d4:4e:ec:e2:28:37:69:35:91:0c:20:57:fa:
         3c:e4:56:b7:d4:4b:b5:5b:f5:0f:20:8f:4a:0a:1f:0a:b4:84:
         40:87:0c:50:1a:e3:13:ba:87:d2:5f:f3:59:f8:21:f0:3f:bf:
         ac:0d:97:f6:2d:eb:7c:7d:30:03:b1:08:04:b9:d5:48:83:de:
         47:2b:c9:a9:10:6d:f9:d9:88:85:5a:e0:93:2d:f3:3a:f7:34:
         c9:a8:c4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:40:53 2024 by rpki-client on console-ams.rpki-client.org