Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft
File:                     VtexXMGugneFjWSSwB3VMwhEzAY.mft (raw, json)
Hash identifier:          IB6MlB/7l4ZiKiOSAr+lkvpzC2DSiOcJvskzYJgdxxU=
Subject key identifier:   B7:46:48:23:90:9E:F3:7A:58:33:4B:1E:6C:44:02:EB:3B:AE:C4:E8
Authority key identifier: 56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06
Certificate issuer:       /CN=A91F0CC8/serialNumber=56D7B15CC1AE8277858D6492C01DD5330844CC06
Certificate serial:       0883
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft
Manifest number:          0866
Signing time:             Fri 30 May 2025 20:57:08 +0000
Manifest this update:     Fri 30 May 2025 20:57:08 +0000
Manifest next update:     Fri 06 Jun 2025 20:57:07 +0000
Files and hashes:         1: VtexXMGugneFjWSSwB3VMwhEzAY.crl (hash: gkCDt9ZuwJjOCErgTIcbI9NkN3oGmZh41aSeKM1z7w8=)
                          2: D4B550921C2011F09CB77376C4F9AE02.roa (hash: JQT2hti6LgfZzi6xAGa9WtWCSt6AfjSy/VBWGxZBRBM=)
                          3: C584C646CA5111EAB9696B0AC4F9AE02.roa (hash: /1HZaij49W5GixhkizZ+VpOQAh5u5EJvk7kMPCiizb8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.crl
                          rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 20:57:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2179 (0x883)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0CC8, serialNumber=56D7B15CC1AE8277858D6492C01DD5330844CC06
        Validity
            Not Before: May 30 20:57:08 2025 GMT
            Not After : Jun  6 20:57:07 2025 GMT
        Subject: CN=683a1ba4-b4b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1f:35:3b:2d:9d:76:ba:a0:e0:06:b1:e5:e9:
                    74:9a:c6:0d:b0:51:58:ab:93:ff:5e:fb:61:32:0a:
                    19:15:fd:c9:93:f2:b5:f2:89:62:0f:67:e0:50:b9:
                    ff:ba:25:47:c2:ee:fa:45:52:78:87:ec:3f:ca:39:
                    54:ee:b9:00:d5:f5:c7:05:cc:7e:51:51:4d:de:53:
                    2b:ac:d7:f2:20:44:2b:29:63:95:19:92:75:c9:4b:
                    d1:09:31:08:c4:98:c8:ef:d6:16:87:39:9a:c9:8c:
                    0c:1b:b7:fd:50:ad:f8:72:f9:77:7f:5a:f5:c9:e6:
                    22:1b:60:59:08:75:0b:db:0e:20:4a:c9:1c:ef:5f:
                    0a:2f:19:e3:fc:5a:a9:d0:71:d2:89:62:f1:25:d2:
                    fe:76:1c:87:2f:91:36:3f:20:cc:23:26:c7:d3:6d:
                    65:2c:55:f6:b9:ab:ad:87:1b:82:fa:0f:4f:86:76:
                    66:bb:e0:b0:1b:53:2b:cb:31:df:30:bd:8f:81:a5:
                    f5:d5:ea:81:49:59:cf:55:0d:82:e9:8a:76:09:8c:
                    c6:08:5f:9f:65:9a:6a:51:be:aa:1d:1f:8e:f5:d7:
                    0a:86:ca:07:a9:07:cb:b7:2e:f7:61:42:87:8d:38:
                    c3:e0:7b:eb:0c:aa:ac:2b:ff:9f:d5:54:0a:a2:0e:
                    f4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:46:48:23:90:9E:F3:7A:58:33:4B:1E:6C:44:02:EB:3B:AE:C4:E8
            X509v3 Authority Key Identifier:
                keyid:56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:27:c5:35:be:2f:88:af:aa:e8:b0:67:b2:9d:1b:ee:0f:42:
         ee:08:b6:fb:82:db:52:46:c6:8e:c7:1e:f8:4b:5a:15:92:7e:
         44:40:cf:40:8a:15:43:b6:64:10:42:a8:94:c0:5a:67:a5:b3:
         12:68:9f:e9:7a:6c:ae:e3:27:54:7f:db:78:f2:6d:2c:6c:96:
         e6:0c:c8:30:5f:2d:b0:d3:c1:99:95:d8:c8:bc:d0:ba:5d:79:
         5d:ac:60:c5:9d:cb:13:2c:9c:b8:b6:df:af:75:be:77:c0:cd:
         98:c4:20:6e:c4:91:32:40:fe:71:00:6f:06:84:7b:90:fa:a7:
         89:e2:28:87:a4:e3:2c:ee:6b:56:2b:88:91:d1:57:3c:d9:f5:
         8e:11:19:7b:2d:4a:8f:9c:01:02:7d:60:ef:74:1b:92:9f:b5:
         1a:ad:09:f7:bd:25:6d:bf:67:fc:2a:38:8c:bd:34:c5:e4:bd:
         50:85:54:7e:09:11:5c:d3:36:d4:84:b5:1c:50:58:04:1a:36:
         cb:b7:db:06:11:e9:9a:1b:1c:22:c7:29:a0:c1:d0:eb:37:c8:
         63:82:74:64:48:01:cc:6f:e8:01:3e:58:ec:ac:d0:ba:a7:eb:
         93:30:ac:6d:68:60:40:be:aa:9f:42:a1:5f:36:2e:0c:b3:c7:
         37:7f:84:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:43:46 2025 by rpki-client