Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
File:                     Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft (raw, json)
Hash identifier:          onPfZc6fL8HO5/CSEEtwCmZTn8bMttSDOmg3zMT8C88=
Subject key identifier:   40:C8:F0:2E:20:CF:10:E0:C5:A1:71:B9:E7:1A:85:CF:1C:75:E7:56
Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
Certificate issuer:       /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Certificate serial:       1053
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
Manifest number:          0FF8
Signing time:             Mon 28 Apr 2025 17:44:25 +0000
Manifest this update:     Mon 28 Apr 2025 17:44:24 +0000
Manifest next update:     Mon 05 May 2025 17:44:24 +0000
Files and hashes:         1: Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl (hash: zkgK1R8S6vwGsLqHnFfWrlp8myQDhfWMHzblTknUzkk=)
                          2: 727F33429FAD11EAAD1A6744C4F9AE02.roa (hash: 9E3TgDbI6+GnKMrsNMcyKe+QTJ6ByggMBzDm7xSwD4c=)
                          3: A8DA1B1E9EE511EA890A7220C4F9AE02.roa (hash: zMozM34kF4fkjssWZFKOWwbNxC8ctpO0n/S6xmrGp2U=)
                          4: 9D164714168511EAB282BB44C4F9AE02.roa (hash: UC9oT442f5r3Ad6bt4fyBW43wCVQtsSkEeag4T2t06g=)
                          5: 04C5DE76FF2711EAB7D5F235C4F9AE02.roa (hash: DMn88YNhtANf7oJNpEm/YcL69wX9rnoBHpOTc6fAMAs=)
                          6: ED4C74EC5B2911EDAC608856C4F9AE02.roa (hash: q9NbetQ6RooEPqs7Z6/euz24xz0gLtevk3mcKB1IVZM=)
                          7: B7D67B4ECC3011EA9B54C679C4F9AE02.roa (hash: 0pajmOLzTfRxXN+jwLdgr/HPuMFyL3nbTNRtA04jmts=)
                          8: CC320712ACE011EAB535D034C4F9AE02.roa (hash: zMOHMtYvfaZCDF6LwsEB8Dwbb4ZwRXv/YDIZ3yaOB+U=)
                          9: F47561669C3B11EABC59DA11C4F9AE02.roa (hash: FCS4+GL7rUUdkFrPp6f659LL++EemtPAULuJfkO/esc=)
                          10: F34FF6B69C3B11EABC59DA11C4F9AE02.roa (hash: MolD5bumMcf6jScQ4RC9hIXMaBQfB4E5sD8Ir6nVXrw=)
                          11: 9DE197A2168511EAB282BB44C4F9AE02.roa (hash: hOh5ZVZ+qFHQ5JWAOKeMOjW8ikSLX180HH4vgbhOg/c=)
                          12: 884A03F4447111EC83674068C4F9AE02.roa (hash: s7v3d/BTSW73Xtn7csGrhdpLigXtwYTrO1GpRuSnwkw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl
                          rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 17:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4179 (0x1053)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123D9C, serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
        Validity
            Not Before: Apr 28 17:44:24 2025 GMT
            Not After : May  5 17:44:24 2025 GMT
        Subject: CN=680fbe78-f5b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9b:6b:b1:77:b0:2e:d1:8c:13:b7:6f:a4:ae:
                    ca:c3:c3:30:f3:a6:1e:77:94:5d:73:e0:3e:52:0b:
                    b1:91:57:ee:11:20:33:a2:f5:8e:5a:9f:8e:a5:7f:
                    90:d0:77:23:5a:b1:20:9b:b4:9b:2a:61:20:ea:aa:
                    3f:2b:3a:23:4e:6c:ac:70:7a:74:42:92:73:c4:c6:
                    08:24:c6:1d:eb:f4:b7:24:2e:68:9d:7d:c9:ca:e4:
                    ab:a9:7c:c1:6c:43:ef:59:35:3a:b1:58:5d:8e:e8:
                    26:e2:90:fb:b7:49:0a:3d:2e:e8:60:66:2c:c2:ba:
                    6b:32:12:e3:99:4c:5f:25:20:f7:96:ca:d7:8b:bf:
                    d1:d6:31:88:dc:0d:7a:35:4b:f0:a6:d6:7d:3a:9e:
                    95:f1:6c:fd:cd:ec:f6:35:5f:36:c7:51:ef:fa:fd:
                    fb:0a:db:b5:3d:98:3e:3e:0a:22:2b:38:21:61:fc:
                    f5:f1:aa:63:02:16:04:6f:3d:c6:d6:d9:06:fa:65:
                    d6:58:6e:05:7d:84:9a:e4:d4:0b:f1:0b:d5:71:78:
                    0a:8f:66:b3:1b:01:83:1e:d6:7a:9e:57:af:5d:3b:
                    d5:28:8a:49:ed:45:d8:13:1e:0c:13:af:c6:2d:7d:
                    3f:f9:b5:ef:a5:c0:74:e9:7f:d7:6a:cd:6f:70:cf:
                    9d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C8:F0:2E:20:CF:10:E0:C5:A1:71:B9:E7:1A:85:CF:1C:75:E7:56
            X509v3 Authority Key Identifier:
                keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:c3:b4:c2:92:ea:b2:c2:75:7e:74:f8:70:3a:a8:2e:fe:13:
         00:8f:91:f7:e9:51:13:48:dc:21:7d:1e:02:90:67:85:a7:a2:
         e5:08:a9:fa:74:5d:73:96:33:ce:b1:b8:82:84:53:3b:a2:4a:
         b2:61:f6:b3:23:4b:17:08:0a:88:2e:d5:09:b1:f4:42:47:d2:
         e7:54:4e:9a:1c:15:8f:f6:d5:8a:62:a8:97:3d:43:a5:22:f0:
         d7:c1:c5:b6:87:52:c8:8e:78:bf:50:68:b7:30:6b:8d:b9:92:
         66:8d:1b:f3:b3:70:40:44:8f:96:bc:ee:05:8d:40:d1:a3:a5:
         04:8d:65:ad:e5:4b:4f:79:4a:89:ae:02:62:42:89:d6:26:2d:
         50:8f:02:58:6c:50:c1:32:82:3c:4d:a9:2f:08:24:c1:d9:d7:
         21:34:49:b0:09:7c:49:28:c7:72:e3:2e:a1:c2:67:e8:d5:8e:
         91:ab:a7:80:f1:d0:ee:93:75:50:72:39:7b:0e:d1:3d:34:90:
         4b:6b:f5:3c:bf:58:20:9d:f7:e9:bb:f9:b2:68:7f:57:6d:f3:
         07:48:17:ef:84:be:39:87:d8:0d:85:3f:6c:b5:72:df:ad:8e:
         07:a6:aa:ba:54:91:f4:ac:d4:70:8f:a8:5b:12:47:f9:71:bc:
         66:1a:4c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:10:25 2025 by rpki-client on console.sobornost.net