Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
File:                     WF3cT9n54xQAXzcZj9HiLmgknes.mft (raw, json)
Hash identifier:          JBzAmTK9t666qm/dqF2Ntw3hhRroMPkqs/0jTZJ19YE=
Subject key identifier:   36:B5:22:4B:96:D4:34:BF:A8:AE:32:82:E8:69:65:56:BA:6F:91:56
Authority key identifier: 58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB
Certificate issuer:       /CN=A912871A/serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB
Certificate serial:       044C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
Manifest number:          0447
Signing time:             Sat 26 Apr 2025 23:53:12 +0000
Manifest this update:     Sat 26 Apr 2025 23:53:11 +0000
Manifest next update:     Sat 03 May 2025 23:53:11 +0000
Files and hashes:         1: WF3cT9n54xQAXzcZj9HiLmgknes.crl (hash: /3woWzJrNfeEDjnZkOv4eYr/kW3v8bJVcRbjH6+2VdQ=)
                          2: 5431D022524211ECA52D990FC4F9AE02.roa (hash: ngVDpB9EeVUj1wtwuXlGNZD63XjFCao61CO9K4ARPTk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl
                          rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 23:53:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1100 (0x44c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912871A, serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB
        Validity
            Not Before: Apr 26 23:53:11 2025 GMT
            Not After : May  3 23:53:11 2025 GMT
        Subject: CN=680d71e8-1ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f9:3a:df:e1:2e:9e:7e:cf:9e:03:2d:28:e6:
                    fc:8c:45:13:06:bb:9a:fc:d0:a6:59:37:06:5d:9e:
                    10:bd:db:6a:47:d1:2f:54:0f:77:55:f3:c2:71:7e:
                    16:e4:01:78:f0:f2:a2:6c:7e:01:e8:21:48:0e:b2:
                    7c:cf:e8:11:e1:9e:8b:e7:49:9d:a4:e7:7c:b9:aa:
                    4f:15:ef:d4:6e:eb:45:28:7e:d1:1d:8f:5e:a6:9b:
                    68:fe:66:9c:bb:83:85:f8:df:35:6a:b3:55:6a:3c:
                    2f:ec:c0:20:1f:e5:e7:9b:f4:b7:f8:f5:6a:15:14:
                    41:19:2d:76:ca:75:4b:12:07:6d:c0:a1:06:31:9b:
                    f4:bd:de:de:3d:d4:96:54:7c:c5:c6:28:7d:3c:1a:
                    28:15:53:3d:34:2d:71:45:d5:fd:b5:13:17:27:60:
                    88:45:ef:a7:ef:d8:1a:a9:b3:cf:4a:c7:e1:8d:66:
                    e9:00:20:ed:f2:fd:0a:76:0d:e9:25:22:0f:41:39:
                    fd:61:3a:44:83:12:e5:68:64:fc:21:99:f5:a1:f3:
                    c9:0c:6b:65:c6:06:6c:d8:a9:40:27:29:a9:b2:ae:
                    5f:9f:b5:a3:9f:ab:0e:d7:65:8e:01:85:96:eb:b6:
                    e1:5f:2f:ce:9b:d6:2e:db:4e:48:40:f7:28:c7:0e:
                    fd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B5:22:4B:96:D4:34:BF:A8:AE:32:82:E8:69:65:56:BA:6F:91:56
            X509v3 Authority Key Identifier:
                keyid:58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:79:5c:45:b2:bd:aa:ab:a5:af:32:18:fe:9c:32:79:a9:e1:
         11:3b:7b:7d:4d:a1:2b:50:13:d8:79:e6:d7:df:08:54:3c:f9:
         80:d3:65:b0:2e:d4:a2:c7:b8:75:4a:e0:ee:4d:f7:a3:a6:a1:
         f9:95:33:f4:89:b5:32:c4:12:7a:f7:28:74:08:7d:65:83:9a:
         22:74:6d:e8:b6:bf:7e:2d:1d:5c:f1:d4:cf:76:a2:ec:1e:03:
         2d:be:d4:fc:5c:6b:8f:3b:6c:2e:91:69:87:81:0b:fd:3a:ef:
         85:c2:a8:9d:11:2c:bd:68:7b:86:43:ef:5b:96:29:58:2a:9f:
         ce:0c:d7:cc:76:31:52:7f:38:bd:d2:dc:ee:95:f1:12:a6:f4:
         38:11:b0:8d:26:89:2a:b1:9b:6b:d6:0c:72:b2:8e:3e:b8:55:
         eb:3e:e3:06:61:90:a1:e4:ff:91:53:79:0e:d6:37:5d:2c:0f:
         a9:61:93:9f:01:ca:d0:d9:0a:0a:76:db:26:5f:62:23:e1:c5:
         41:fa:33:58:a8:c4:b7:15:50:73:09:cf:98:2c:dd:09:19:1b:
         94:c0:9d:f6:4f:45:d6:d6:68:de:ac:f2:57:d3:d9:36:69:5e:
         f7:8b:26:24:1c:de:84:9a:76:2f:02:f6:08:96:f1:aa:71:d4:
         08:20:7c:af
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjg3MUExMTAvBgNVBAUTKDU4NUREQzRGRDlGOUUzMTQwMDVGMzcxOThGRDFFMjJF
NjgyNDlERUIwHhcNMjUwNDI2MjM1MzExWhcNMjUwNTAzMjM1MzExWjAYMRYwFAYD
VQQDEw02ODBkNzFlOC0xYWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtfk63+Eunn7PngMtKOb8jEUTBrua/NCmWTcGXZ4QvdtqR9EvVA93VfPCcX4W
5AF48PKibH4B6CFIDrJ8z+gR4Z6L50mdpOd8uapPFe/UbutFKH7RHY9eppto/mac
u4OF+N81arNVajwv7MAgH+Xnm/S3+PVqFRRBGS12ynVLEgdtwKEGMZv0vd7ePdSW
VHzFxih9PBooFVM9NC1xRdX9tRMXJ2CIRe+n79gaqbPPSsfhjWbpACDt8v0Kdg3p
JSIPQTn9YTpEgxLlaGT8IZn1ofPJDGtlxgZs2KlAJympsq5fn7Wjn6sO12WOAYWW
67bhXy/Om9Yu205IQPcoxw795QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDa1IkuW
1DS/qK4yguhpZVa6b5FWMB8GA1UdIwQYMBaAFFhd3E/Z+eMUAF83GY/R4i5oJJ3r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODcxQS8wNUJEMEYzMDUy
NDAxMUVDODY1ODA2MEVDNEY5QUUwMi9XRjNjVDluNTR4UUFYemNaajlIaUxtZ2tu
ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dGM2NUOW41NHhRQVh6Y1pqOUhpTG1na25lcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
ODcxQS8wNUJEMEYzMDUyNDAxMUVDODY1ODA2MEVDNEY5QUUwMi9XRjNjVDluNTR4
UUFYemNaajlIaUxtZ2tuZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDIeVxFsr2qq6WvMhj+nDJ5qeERO3t9TaErUBPYeebX3whUPPmA02Ww
LtSix7h1SuDuTfejpqH5lTP0ibUyxBJ69yh0CH1lg5oidG3otr9+LR1c8dTPdqLs
HgMtvtT8XGuPO2wukWmHgQv9Ou+FwqidESy9aHuGQ+9blilYKp/ODNfMdjFSfzi9
0tzulfESpvQ4EbCNJokqsZtr1gxyso4+uFXrPuMGYZCh5P+RU3kO1jddLA+pYZOf
AcrQ2QoKdtsmX2Ij4cVB+jNYqMS3FVBzCc+YLN0JGRuUwJ32T0XW1mjerPJX09k2
aV73iyYkHN6EmnYvAvYIlvGqcdQIIHyv
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:22 2025 by rpki-client on console.sobornost.net