Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft
File:                     Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft (raw, json)
Hash identifier:          Dw3a8kDQaBXt5ca9al0g5vT7xlYBHAFQZMD0zxyQscQ=
Subject key identifier:   24:CD:41:42:3C:7B:5A:D6:20:D6:96:B0:D6:9E:4D:73:EF:A6:BB:A8
Authority key identifier: 57:2F:BF:1A:C4:D2:F8:49:E2:F5:BB:80:76:74:F0:1B:EB:F1:72:9D
Certificate issuer:       /CN=A918CC02/serialNumber=572FBF1AC4D2F849E2F5BB807674F01BEBF1729D
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy-_GsTS-Eni9buAdnTwG-vxcp0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft
Manifest number:          59
Signing time:             Sat 31 May 2025 06:46:48 +0000
Manifest this update:     Sat 31 May 2025 06:46:48 +0000
Manifest next update:     Sat 07 Jun 2025 06:46:48 +0000
Files and hashes:         1: Vy-_GsTS-Eni9buAdnTwG-vxcp0.crl (hash: iP0/FSjHDSHWPtuskLkMyfQRLsq6CR0lg/P0IUnr/+k=)
                          2: 56C91968C5C011EFA167B30AC4F9AE02.roa (hash: Qpsj8zeT4wk7y+WSIb+TFw/XxcY82tQw87PIGXkqgxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.crl
                          rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy-_GsTS-Eni9buAdnTwG-vxcp0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 06:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CC02, serialNumber=572FBF1AC4D2F849E2F5BB807674F01BEBF1729D
        Validity
            Not Before: May 31 06:46:48 2025 GMT
            Not After : Jun  7 06:46:48 2025 GMT
        Subject: CN=683aa5d8-6b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3c:32:ed:78:e0:ba:33:b3:03:9d:05:10:9a:
                    f8:ac:d1:a4:1c:ae:ca:33:b4:74:20:e0:a9:bd:82:
                    19:bb:b9:33:0f:6f:d6:16:d2:59:2f:54:f9:02:17:
                    14:71:32:9e:1d:ce:2d:92:b5:18:e7:c9:07:94:cb:
                    d8:0b:20:f3:d4:72:91:4a:89:08:70:b8:91:19:23:
                    78:dd:65:6e:27:7b:2d:58:25:b9:d8:ea:05:8c:28:
                    fa:6c:5c:bc:41:dd:38:4f:e2:99:fb:5f:ba:9d:e8:
                    c9:8c:b9:3e:78:80:71:19:7e:18:09:8f:d3:ec:0e:
                    38:05:62:ee:b2:72:a6:be:ca:b9:a8:4d:ce:62:10:
                    e5:56:01:f0:90:25:cf:3c:c5:3a:1d:4d:e8:43:8a:
                    fe:1a:51:ee:60:fe:94:e4:99:da:22:33:e5:ee:b5:
                    93:67:51:df:8e:de:8a:79:3e:1e:31:a1:b7:ab:36:
                    8e:4a:db:a9:03:28:5c:8d:8c:d9:5a:1a:cf:ff:e6:
                    de:2d:cd:3e:ca:0d:b6:72:e4:92:30:9a:33:8f:ea:
                    05:29:46:6b:55:79:48:18:93:ce:0f:ff:75:97:f8:
                    39:70:4f:e8:cb:a5:6d:9e:00:28:a8:23:8d:0c:20:
                    de:5d:06:52:d1:c5:3e:03:31:23:74:ce:cd:44:41:
                    88:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CD:41:42:3C:7B:5A:D6:20:D6:96:B0:D6:9E:4D:73:EF:A6:BB:A8
            X509v3 Authority Key Identifier:
                keyid:57:2F:BF:1A:C4:D2:F8:49:E2:F5:BB:80:76:74:F0:1B:EB:F1:72:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy-_GsTS-Eni9buAdnTwG-vxcp0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:64:1e:ea:bd:19:3b:6c:78:3f:ae:44:b1:db:96:e6:82:99:
         60:25:cf:b0:aa:c1:ce:18:55:52:2e:c3:38:e8:62:9d:42:db:
         9a:47:d4:0a:c0:90:f6:4d:8b:00:ec:fd:df:ae:0f:78:6e:11:
         6a:67:74:b6:a6:79:64:22:04:fe:c5:58:24:fc:61:db:38:1a:
         24:3b:ba:6b:3e:d9:15:d4:aa:a3:9f:a4:cc:ae:29:73:e2:0a:
         53:0b:ad:46:f3:da:6b:96:bb:4a:19:55:23:c2:f0:36:95:b0:
         45:cd:e2:62:0a:b5:a9:21:93:7b:c9:0b:67:c5:f4:d7:c6:12:
         d6:3e:15:28:42:c0:fc:cb:e9:a0:52:7c:ff:5c:25:62:6a:db:
         a0:a5:88:00:52:28:32:41:8a:16:d9:ad:74:15:8e:e3:5f:e0:
         f1:e8:ad:b3:30:91:3a:24:60:c7:ce:aa:59:82:69:af:fc:70:
         32:14:76:b0:3a:78:d8:cf:6c:9f:76:a4:7d:6e:75:fd:68:3b:
         2d:ce:89:e5:96:57:f0:26:ef:77:a3:ac:2e:2f:32:a3:f8:02:
         90:41:71:2e:fa:da:fe:18:1e:fe:f2:cc:c1:ac:fc:73:77:6c:
         ac:fb:8e:c6:e4:0f:e4:01:ac:20:a0:0f:fc:ae:66:5b:c2:3a:
         1b:6a:2e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 15:11:16 2025 by rpki-client