Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
File:                     voUqizt-pcWsWlKqy4UqAaTN0II.mft (raw, json)
Hash identifier:          qftK93t4tFou3j+aP9AyNGALLIMPqaE/uXQ6miXfA2c=
Subject key identifier:   9D:54:DC:05:2C:15:F9:06:1C:01:62:A0:46:3C:0E:C1:98:CE:B8:DA
Authority key identifier: BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
Certificate issuer:       /CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Certificate serial:       0460
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
Manifest number:          044A
Signing time:             Sat 31 May 2025 00:30:58 +0000
Manifest this update:     Sat 31 May 2025 00:30:57 +0000
Manifest next update:     Sat 07 Jun 2025 00:30:57 +0000
Files and hashes:         1: voUqizt-pcWsWlKqy4UqAaTN0II.crl (hash: +r4ZBuzmWtblcXUYx2jhHcvF/tRiumQxEfNa85Mm+Jw=)
                          2: D717B9F0B7E511EFB5F63E6DC4F9AE02.roa (hash: R/nnjeAR+tZePhFeIgEDIZOhg5pi4qQT+4iwQfx8ekU=)
                          3: D254B444679111EF8A2C9062C4F9AE02.roa (hash: KIM/sEwaQaYFPC8qF/5+qRUkUFtySui4RoXzgpLXzmc=)
                          4: 14F55DEAB7E611EF9B9D9F6DC4F9AE02.roa (hash: BIPMm9ibDgvfx7NU935+UV2sEA5f17RgI+qcbtg58kw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
                          rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 00:30:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1120 (0x460)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF428, serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
        Validity
            Not Before: May 31 00:30:57 2025 GMT
            Not After : Jun  7 00:30:57 2025 GMT
        Subject: CN=683a4dc1-527b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:07:48:a2:e6:61:4d:56:0a:b2:e8:e7:e9:a9:
                    c9:10:90:f1:3d:27:44:9f:22:92:63:d5:67:6d:37:
                    4b:f1:e9:e4:32:6e:11:a0:72:fd:25:9a:9d:1d:5b:
                    d5:d6:bb:8a:67:59:02:71:86:5b:0d:17:d5:2b:28:
                    2f:7e:7b:30:3a:69:75:1f:69:55:a5:4a:c9:57:a9:
                    2e:08:3f:78:95:09:1d:84:3f:52:a9:60:b2:bd:f8:
                    d8:e7:63:39:b3:b3:de:b4:04:c9:53:f9:10:a7:13:
                    96:54:41:66:20:3b:e3:2c:bb:28:94:22:1d:c8:cd:
                    df:14:20:5d:9b:4f:18:4f:ce:fc:e4:45:e9:db:ed:
                    43:c8:6d:43:86:f8:67:90:fe:9a:49:31:16:72:e7:
                    b0:ea:bc:f6:26:53:c9:51:6d:3c:11:c6:98:27:06:
                    6f:94:e7:ab:82:c4:60:8c:8a:3a:6c:9c:3f:23:47:
                    d4:e6:dc:9d:b9:e9:df:d9:8b:76:b6:f1:ec:9e:77:
                    64:90:37:44:b8:51:e6:a6:e1:fb:53:15:29:10:20:
                    70:c8:9a:f4:52:3f:34:15:c5:fb:76:69:88:ad:ba:
                    a8:cc:d4:0b:72:71:99:00:1e:50:0f:d1:fb:11:a4:
                    4b:22:1a:95:b2:f5:f5:30:03:a7:68:18:84:44:7d:
                    aa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:54:DC:05:2C:15:F9:06:1C:01:62:A0:46:3C:0E:C1:98:CE:B8:DA
            X509v3 Authority Key Identifier:
                keyid:BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:7d:9b:9c:16:79:45:b7:e9:7f:15:2e:5e:68:9b:aa:78:8a:
         65:31:fa:e5:6b:01:52:e0:0c:84:f7:ed:c8:05:52:a3:eb:a9:
         56:d9:81:36:2a:60:8d:94:c3:60:56:88:56:d8:af:65:ad:3d:
         51:e8:40:89:c4:44:76:24:21:e6:16:2e:de:6e:3c:a4:c3:48:
         f0:cb:41:0f:de:a2:6c:ea:14:12:b7:f4:5e:2c:36:1e:f6:a7:
         fd:a5:3c:ed:36:10:c9:a0:93:83:ce:e7:f1:2f:91:f1:fc:29:
         e4:98:c6:3e:e4:61:7e:ed:54:f2:93:8c:dd:ba:dc:07:66:5f:
         0c:0d:bf:df:80:75:5d:0e:62:ac:e7:e8:07:c9:90:ff:ea:f8:
         5d:13:9f:d3:e7:25:dd:81:59:69:7a:b8:cc:de:81:cd:ae:33:
         0f:33:ba:a6:34:0d:57:4f:59:60:05:df:a0:0d:b8:ab:00:61:
         f2:ae:d2:23:5a:26:57:84:7e:9b:ce:7b:76:5e:6a:8a:c9:53:
         c6:ef:4a:d7:e9:54:d1:a5:a1:4c:7c:f0:ca:1b:0b:bb:67:a5:
         ac:21:32:6f:12:f1:1a:bc:02:3f:ac:43:73:8c:30:79:b1:f2:
         9c:11:5f:16:4f:80:17:98:44:fa:83:0a:41:1e:33:55:e8:74:
         72:d4:74:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:36:03 2025 by rpki-client