Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft
File:                     wbdm2intKT3fpczrCuQpdFRE1hU.mft (raw, json)
Hash identifier:          9qOFDIkPsduKwdznrTYZiI05tX4RCNilTatmBts0lPI=
Subject key identifier:   59:99:F1:3C:40:75:81:60:DE:35:62:21:A3:D9:9C:E5:D0:BD:5C:15
Authority key identifier: C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15
Certificate issuer:       /CN=A912F281/serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615
Certificate serial:       40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft
Manifest number:          3F
Signing time:             Sun 27 Apr 2025 06:16:52 +0000
Manifest this update:     Sun 27 Apr 2025 06:16:52 +0000
Manifest next update:     Sun 04 May 2025 06:16:52 +0000
Files and hashes:         1: wbdm2intKT3fpczrCuQpdFRE1hU.crl (hash: wE8DrEpRzLdtxpURMB/E5TK/hMFTryBUn5awErV4FSY=)
                          2: 8A69BFBAC67011EFAE929D0DC4F9AE02.roa (hash: sznnb83JGGX6kxaOiYhmv1K3OAoUlfeqG+/vLr2w58w=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl
                          rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F281, serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615
        Validity
            Not Before: Apr 27 06:16:52 2025 GMT
            Not After : May  4 06:16:52 2025 GMT
        Subject: CN=680dcbd4-3174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3e:51:7e:23:94:0d:09:4d:63:e8:6f:67:60:
                    14:ee:64:f0:74:34:ea:33:36:bb:fc:27:83:de:28:
                    23:d3:1d:85:ec:8f:2d:8d:e6:50:cb:6e:06:4f:55:
                    1b:9b:00:c6:dc:73:a2:b8:cd:23:08:ed:d6:80:9e:
                    26:3f:62:2c:a5:b6:c2:d2:e0:f8:e2:55:05:75:da:
                    d3:a9:e7:c4:16:89:88:8c:78:ea:aa:68:4e:12:aa:
                    e3:70:06:3c:86:91:b9:15:3a:f3:27:28:f3:f7:46:
                    60:6e:df:2b:7f:e6:d8:39:0e:a6:5d:a1:48:2a:99:
                    0a:f3:70:60:26:d3:94:ca:9e:ea:ea:96:2a:c7:97:
                    85:fd:e1:ac:31:08:76:26:3b:aa:69:29:c1:e4:f0:
                    96:f9:60:35:2f:69:72:e3:b4:72:59:8e:61:e2:fc:
                    63:73:89:32:42:9e:e4:f8:5f:f5:d1:17:f3:fa:d7:
                    5e:88:07:04:85:88:e7:8c:1d:17:f9:6e:f8:3e:ac:
                    41:26:d4:81:07:50:79:02:c7:7d:57:44:ce:90:7a:
                    9b:83:1d:a3:98:87:75:50:b7:92:e5:6c:ef:11:2e:
                    ca:e4:7f:ff:26:fd:4c:96:b4:6d:95:1d:03:74:1b:
                    d3:93:27:96:99:37:68:5f:7d:2c:94:d2:c6:11:9a:
                    25:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:99:F1:3C:40:75:81:60:DE:35:62:21:A3:D9:9C:E5:D0:BD:5C:15
            X509v3 Authority Key Identifier:
                keyid:C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:a5:a9:2c:16:5c:72:8e:64:c2:ff:8d:81:bb:8a:ad:5b:84:
         72:2f:43:80:9b:d7:98:b1:0e:30:bb:3c:5f:57:fe:3e:da:1c:
         06:24:e8:0c:aa:97:9f:56:8e:ec:74:22:25:46:09:40:50:b6:
         4c:0e:b6:22:45:ec:0e:dd:2b:d0:2c:80:fd:f6:dc:1b:ab:72:
         3c:31:a7:e5:e9:50:be:9a:48:6a:dc:42:79:17:3b:3d:ce:95:
         48:39:05:55:80:1b:dc:80:f9:5e:63:60:8e:2e:cb:28:9a:e5:
         30:27:ce:16:64:81:e3:57:31:60:8c:44:bb:e5:65:25:e1:3e:
         0b:17:0c:9c:42:70:67:66:1f:c7:dc:74:1b:c5:fd:da:f8:85:
         db:cb:00:5d:00:93:69:6e:d1:74:62:bd:f0:b1:5d:87:82:0e:
         77:2e:6d:bc:57:e2:ef:48:55:3e:85:96:78:c7:37:59:8d:90:
         7a:97:34:29:d8:42:7d:1d:f1:d0:29:4b:db:cb:50:1b:7b:54:
         61:94:d9:c4:a3:64:9e:21:da:66:0c:10:6d:e4:ff:af:9a:ef:
         20:49:b3:c3:59:9b:52:57:16:77:90:8f:87:38:bb:7a:66:12:
         83:e1:d8:db:1d:8e:7f:8c:c3:ad:cd:ef:57:50:39:91:91:58:
         8b:5e:b8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:41 2025 by rpki-client on console.sobornost.net