Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
File:                     VVzqN0EM0oazHxoArfYlPUzgUjI.mft (raw, json)
Hash identifier:          2FjEeyBhMVaNTzWO5hKm48mMee+ZLL++yXxfGGa/eGg=
Subject key identifier:   4A:1B:0D:4B:CD:5D:87:90:5C:4C:A9:05:C2:00:FD:47:B7:56:D9:24
Authority key identifier: 55:5C:EA:37:41:0C:D2:86:B3:1F:1A:00:AD:F6:25:3D:4C:E0:52:32
Certificate issuer:       /CN=A9137522/serialNumber=555CEA37410CD286B31F1A00ADF6253D4CE05232
Certificate serial:       348A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
Manifest number:          3485
Signing time:             Fri 30 May 2025 15:06:51 +0000
Manifest this update:     Fri 30 May 2025 15:06:50 +0000
Manifest next update:     Fri 06 Jun 2025 15:06:50 +0000
Files and hashes:         1: VVzqN0EM0oazHxoArfYlPUzgUjI.crl (hash: PdZJvFPHcQuQgvlirI/GS1+Z6KcP+5yNM4GF+GBbZy8=)
                          2: FF9802D6FE3911EBBCE1485DC4F9AE02.roa (hash: rKiJ/h4am+FFw7G2LT8pzc4HoVXZT8DnOASCeasqP8w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.crl
                          rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 15:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13450 (0x348a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137522, serialNumber=555CEA37410CD286B31F1A00ADF6253D4CE05232
        Validity
            Not Before: May 30 15:06:50 2025 GMT
            Not After : Jun  6 15:06:50 2025 GMT
        Subject: CN=6839c98b-5a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:69:73:5f:16:bb:82:57:a9:1a:c6:6b:77:92:
                    9d:6b:50:ab:25:46:f6:40:ce:e3:83:1a:d2:fc:cb:
                    5b:f7:07:a3:ed:93:60:05:ee:1a:df:2a:a5:06:1b:
                    6f:b9:e3:70:1f:ed:df:e6:e9:ec:0a:ce:e3:d5:88:
                    a6:fd:0f:41:ec:d8:59:ab:0a:99:43:3e:db:f0:8e:
                    65:4f:a5:e9:de:ab:9f:ac:a7:3b:12:fb:ad:3e:c1:
                    05:10:f3:7d:5f:0b:ec:b0:4c:cb:29:8e:41:55:61:
                    0d:40:3f:b1:40:59:fc:71:70:15:1a:e3:b6:34:cf:
                    0f:b2:dd:d6:13:ad:eb:e5:ac:af:e8:a2:76:b6:b0:
                    04:48:af:d1:bc:1f:76:b9:a4:fd:dc:06:32:0e:60:
                    64:ae:f1:64:37:aa:f6:7d:d6:2f:7f:46:b8:c3:ef:
                    d0:69:0f:ae:c0:13:b7:fb:e0:67:82:ed:f8:a4:1e:
                    0d:91:15:38:a0:52:cc:75:14:e0:d0:18:96:46:da:
                    e9:17:59:42:f8:f7:e0:8c:e4:1d:a0:9c:74:6a:d4:
                    95:a7:89:37:8c:2b:4b:af:67:7e:a9:b8:fa:bf:9a:
                    0e:b8:00:8a:2b:5a:21:5e:d4:73:56:64:d4:ea:76:
                    be:2c:13:7c:25:d0:6b:25:87:7c:31:8a:cf:de:54:
                    7a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1B:0D:4B:CD:5D:87:90:5C:4C:A9:05:C2:00:FD:47:B7:56:D9:24
            X509v3 Authority Key Identifier:
                keyid:55:5C:EA:37:41:0C:D2:86:B3:1F:1A:00:AD:F6:25:3D:4C:E0:52:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:3c:9a:ce:8d:62:47:8f:66:13:de:e8:b1:31:96:1d:9f:a0:
         ad:58:c1:4c:00:87:1c:43:05:f9:ea:2b:48:89:1d:83:d3:df:
         23:6f:c9:0e:79:9d:3a:87:c8:e6:8a:ab:4e:eb:60:91:f2:e6:
         89:a4:92:97:08:5e:60:28:fc:c5:43:5a:65:5d:6f:65:25:28:
         fc:50:27:e2:97:52:68:f4:59:95:79:1c:76:49:7c:60:1e:f6:
         5b:06:be:7d:fc:d4:ca:30:85:a5:c3:ae:9c:f7:5a:52:ea:59:
         58:e8:12:0f:48:12:43:ad:fc:3d:cb:67:53:dd:ed:59:d8:c2:
         b3:68:9d:5d:7b:7c:d9:a8:bc:2d:8c:cb:14:a8:2d:47:26:ae:
         86:c6:8c:53:b6:0e:0a:8a:b7:d2:42:f0:a6:bd:57:74:ce:5b:
         2e:fc:c9:d3:0f:d2:64:ac:27:3c:98:8e:56:b7:7a:41:24:41:
         01:15:a3:92:98:a3:cd:ea:e3:a9:0f:99:18:9c:5c:e7:37:9f:
         97:80:2b:be:9f:41:dc:d3:89:ab:4a:29:a7:04:18:92:f1:67:
         1b:f3:ff:2e:31:80:0a:34:ee:26:7b:4b:50:27:8c:db:c7:da:
         33:1e:b8:2c:02:ca:55:02:4d:5c:45:8e:1b:c4:00:3d:ac:43:
         ed:97:ed:5a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzc1MjIxMTAvBgNVBAUTKDU1NUNFQTM3NDEwQ0QyODZCMzFGMUEwMEFERjYyNTNE
NENFMDUyMzIwHhcNMjUwNTMwMTUwNjUwWhcNMjUwNjA2MTUwNjUwWjAYMRYwFAYD
VQQDEw02ODM5Yzk4Yi01YTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwWlzXxa7glepGsZrd5Kda1CrJUb2QM7jgxrS/Mtb9wej7ZNgBe4a3yqlBhtv
ueNwH+3f5unsCs7j1Yim/Q9B7NhZqwqZQz7b8I5lT6Xp3qufrKc7EvutPsEFEPN9
XwvssEzLKY5BVWENQD+xQFn8cXAVGuO2NM8Pst3WE63r5ayv6KJ2trAESK/RvB92
uaT93AYyDmBkrvFkN6r2fdYvf0a4w+/QaQ+uwBO3++Bngu34pB4NkRU4oFLMdRTg
0BiWRtrpF1lC+PfgjOQdoJx0atSVp4k3jCtLr2d+qbj6v5oOuACKK1ohXtRzVmTU
6na+LBN8JdBrJYd8MYrP3lR6swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEobDUvN
XYeQXEypBcIA/Ue3VtkkMB8GA1UdIwQYMBaAFFVc6jdBDNKGsx8aAK32JT1M4FIy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzUyMi8xMERDMTgyODFE
OUYxMUUyOTYwNTc4OEYwOEIwMkNEMi9WVnpxTjBFTTBvYXpIeG9BcmZZbFBVemdV
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZWenFOMEVNMG9hekh4b0FyZllsUFV6Z1VqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NzUyMi8xMERDMTgyODFEOUYxMUUyOTYwNTc4OEYwOEIwMkNEMi9WVnpxTjBFTTBv
YXpIeG9BcmZZbFBVemdVakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC4PJrOjWJHj2YT3uixMZYdn6CtWMFMAIccQwX56itIiR2D098jb8kO
eZ06h8jmiqtO62CR8uaJpJKXCF5gKPzFQ1plXW9lJSj8UCfil1Jo9FmVeRx2SXxg
HvZbBr59/NTKMIWlw66c91pS6llY6BIPSBJDrfw9y2dT3e1Z2MKzaJ1de3zZqLwt
jMsUqC1HJq6GxoxTtg4KirfSQvCmvVd0zlsu/MnTD9JkrCc8mI5Wt3pBJEEBFaOS
mKPN6uOpD5kYnFznN5+XgCu+n0Hc04mrSimnBBiS8Wcb8/8uMYAKNO4me0tQJ4zb
x9ozHrgsAspVAk1cRY4bxAA9rEPtl+1a
-----END CERTIFICATE-----
Generated at Sat May 31 16:34:02 2025 by rpki-client