Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
File:                     wj38Jpc5QY-leSH40pBboWdC_E0.mft (raw, json)
Hash identifier:          2NWfXa5ErdTRsmMchHpceFDb5qTUqF/oyJLvheFvtWk=
Subject key identifier:   8E:C2:A7:63:40:E1:53:7E:65:0D:8F:63:8F:B1:12:C0:16:9A:C4:1B
Authority key identifier: C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D
Certificate issuer:       /CN=A913F3A2/serialNumber=C23DFC269739418FA57921F8D2905BA16742FC4D
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
Manifest number:          4F
Signing time:             Sun 27 Apr 2025 06:08:05 +0000
Manifest this update:     Sun 27 Apr 2025 06:08:05 +0000
Manifest next update:     Sun 04 May 2025 06:08:05 +0000
Files and hashes:         1: wj38Jpc5QY-leSH40pBboWdC_E0.crl (hash: 2Ac2kIjDbRdhh7PPnKHPG1EOvhuy2XVM9aRh9ibmqvc=)
                          2: 0136C13EAE4C11EFACFD730EC4F9AE02.roa (hash: ScWyAFX8IZVuqT/OkOtoT9rz8/7+EBsMEJn2VwqrRCE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.crl
                          rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F3A2, serialNumber=C23DFC269739418FA57921F8D2905BA16742FC4D
        Validity
            Not Before: Apr 27 06:08:05 2025 GMT
            Not After : May  4 06:08:05 2025 GMT
        Subject: CN=680dc9c5-08cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:23:de:ac:f9:c9:19:30:f5:5a:e9:35:0c:35:
                    aa:0c:55:2c:b8:ac:f7:f3:b3:01:e8:ef:e1:7c:d3:
                    5f:02:e2:c6:1b:d4:b6:ed:83:a7:1f:82:34:d3:57:
                    28:43:53:1a:7d:f9:3c:68:11:58:8b:2c:e4:c2:8a:
                    70:4e:44:ba:27:ec:00:1b:00:ef:d5:70:7e:e7:ec:
                    c0:a8:0c:1c:e9:fc:e7:04:9a:7c:13:04:43:6a:39:
                    b1:7f:89:a9:04:ae:ab:ae:09:fa:83:9c:d0:43:3b:
                    cf:71:3a:70:36:98:35:d9:0f:bc:a0:af:10:1c:95:
                    7e:26:32:33:aa:68:20:0e:c4:0f:f2:d1:35:ed:5e:
                    53:3a:ad:18:c8:7c:f6:10:55:f0:15:1d:75:c4:dd:
                    f0:e1:82:c8:d4:a4:ff:7d:91:84:94:17:3a:7f:05:
                    be:5f:12:b3:e9:7b:48:e7:20:7d:e0:aa:5f:cb:c3:
                    d3:71:b5:ef:fd:2f:24:40:17:31:59:a4:ba:8e:c5:
                    94:2e:8a:80:5c:3b:09:bb:5e:18:16:2a:eb:09:38:
                    13:6b:fa:53:93:bc:99:8e:4f:66:fe:f4:71:7a:67:
                    6f:59:5f:7d:0a:8e:91:22:7f:e4:27:61:7a:94:da:
                    a6:14:0a:52:93:ca:62:95:83:dd:98:41:37:c3:8a:
                    53:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C2:A7:63:40:E1:53:7E:65:0D:8F:63:8F:B1:12:C0:16:9A:C4:1B
            X509v3 Authority Key Identifier:
                keyid:C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:86:ff:aa:ca:35:db:f1:0e:4f:e6:60:ac:93:54:f7:1a:96:
         72:97:eb:5e:73:03:12:8c:46:1f:be:24:35:29:3a:43:95:fe:
         0e:ad:56:7f:26:dd:59:b8:09:bb:9a:6d:60:3d:42:7b:dd:01:
         26:72:08:64:b7:92:c4:07:43:ab:8d:bd:49:2c:2a:05:3e:8c:
         e1:16:77:25:dc:9b:59:2f:f4:8c:3a:94:5f:1c:31:4e:be:75:
         0e:1d:cd:95:02:30:19:8c:34:76:be:e3:80:c0:0a:53:28:fb:
         05:f2:cb:1e:11:aa:71:a0:2f:96:7a:37:ec:8c:a1:1b:db:ef:
         ca:f2:c3:89:31:31:cf:34:49:98:a2:cc:fd:8c:1b:20:70:3d:
         ff:34:de:51:e4:d8:43:25:13:22:5d:9f:3b:4f:5d:d6:36:68:
         3f:66:3d:b7:f2:c8:4b:d9:51:a5:17:30:f8:c7:c5:b6:83:c9:
         ae:7c:eb:e6:6d:65:2d:57:eb:bd:fe:7c:bc:84:03:91:6a:45:
         80:24:71:2e:2f:51:00:6a:3a:13:b8:71:9c:be:1d:25:26:5f:
         bf:71:57:ba:da:17:85:3c:fe:0d:d6:bf:0c:a9:bd:1a:0e:bc:
         78:e0:f3:1a:fd:eb:92:39:72:7a:01:76:77:3a:ec:e0:ec:65:
         16:47:7d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:43 2025 by rpki-client on console.sobornost.net