Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
File:                     wrn188aMV2cnI5uSqTs2KX0bFlM.mft (raw, json)
Hash identifier:          t6oDhxb2iODz4pqMOFvVT7P+6ietzs1m+gVZKcKfM+g=
Subject key identifier:   9C:CC:20:96:D3:50:39:B4:44:CF:FC:A9:E1:0B:74:0F:0F:6E:6A:37
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Certificate issuer:       /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial:       12FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
Manifest number:          11FE
Signing time:             Sat 26 Apr 2025 17:09:37 +0000
Manifest this update:     Sat 26 Apr 2025 17:09:36 +0000
Manifest next update:     Sat 03 May 2025 17:09:36 +0000
Files and hashes:         1: wrn188aMV2cnI5uSqTs2KX0bFlM.crl (hash: wDIlYWG/NlQW17cEzfchBLBLlRyaPkt1ZtA02ez5zPM=)
                          2: 2A162D644EE411EFB8076138C4F9AE02.roa (hash: IG4jmJj09ZmYUDZS75YYloyHVVnkQPCtgyizJh/z2GY=)
                          3: 93C20720C45311EBB305C97FC4F9AE02.roa (hash: N2FIp6cqZ/iIaqLg9GcTL9vc/asv0vunls3TgsCu4g8=)
                          4: B5B4AB0839DA11EF9ECCF886C4F9AE02.roa (hash: 3pO0l/yUtX7x2D/AxqjrC/P01Kg4CqMSxw9LDwoutV8=)
                          5: CB598446EF1811ED96D1F733C4F9AE02.roa (hash: hRNZyfRzeRFOuYP02LqeZC62CwbEGFyqzlu6Izq5YRg=)
                          6: 660C8B72D03511EC9D87A00DC4F9AE02.roa (hash: zZbyRHW0pqbTrpMmp00k/TCH9Wkc7p2seUGv01Mxk78=)
                          7: 61E919B60C8D11EFA97EC809C4F9AE02.roa (hash: 6ePvq7R+VevTRBijwhsSbY7s0xfysrtCLdJS1Hrf1fw=)
                          8: 459087B0C4A411EB90A2C754C4F9AE02.roa (hash: FUvbvupZMSdGClwmyLJUN0LQUs/rAewHwV1Hd6aOfHI=)
                          9: 38C33A60AF8811E98C7EFC2AC4F9AE02.roa (hash: sguTknz+XKgvX4qQD5q6spAgfuzmInwdxR7VIdoUOEU=)
                          10: 087D2D80C4A711EB917EC55EC4F9AE02.roa (hash: oE9CTvywlwh3yT1kTz+S7CEZmViwntB8y/0OBWzj/ZY=)
                          11: CC92F19EEF1811ED96D1F733C4F9AE02.roa (hash: GFNrQVb1wvfBgedxihD2Z8QNCQ3jWb2g3ubAHNMRqyI=)
                          12: E6B3F23C041E11EA8A736F7EC4F9AE02.roa (hash: Z72B2clD1drV5IAH1qd2T+bMR6C28KSN0ZpXzAvWln4=)
                          13: 8296B130A0DC11EF8963C80AC4F9AE02.roa (hash: kEg5BySD5/6d6+2W+gzFQa7n4JYZpDzOwTlx1JrwL00=)
                          14: C699F452FDF711E8B5A6725EC4F9AE02.roa (hash: mdu9JMCWm1VcaEkAvSFDvH8Q8ILUzNJBmUo72/x8o9U=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
                          rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 17:09:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4862 (0x12fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
        Validity
            Not Before: Apr 26 17:09:36 2025 GMT
            Not After : May  3 17:09:36 2025 GMT
        Subject: CN=680d1351-dbf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6f:cd:0c:4a:db:02:e1:cf:94:31:2e:6f:c3:
                    93:3a:54:ce:81:6d:d4:9d:e8:1c:f0:9e:81:9e:ed:
                    20:73:1e:63:b4:6e:21:03:6a:a4:96:6f:8a:42:97:
                    28:e7:40:5b:0a:00:77:65:97:bc:ef:6d:a5:c1:63:
                    37:46:12:2d:ac:57:ce:f4:99:5b:d7:14:11:00:df:
                    e2:60:e7:6e:ac:04:a8:9a:f1:6b:19:38:b0:9c:1e:
                    9a:a0:52:8e:3d:a4:38:55:32:27:94:a9:5c:41:6b:
                    66:f6:f4:36:f1:fd:dc:d9:26:0b:0e:89:f2:41:c3:
                    8e:f6:b3:01:65:80:41:84:13:39:40:65:70:0b:40:
                    ce:86:a8:95:ee:26:78:f1:17:19:0e:8c:3a:77:8e:
                    bf:fa:93:0b:b8:7e:50:f0:d0:87:9b:fd:e8:b6:cd:
                    71:c7:2b:55:7b:b2:9b:de:91:65:36:9e:ab:57:71:
                    4c:cc:35:d1:cd:9c:10:77:b8:30:47:87:56:5b:1d:
                    1d:c4:5d:d1:9f:19:97:53:06:ff:d3:53:cf:b5:27:
                    b3:46:f4:68:91:85:fe:ad:d8:a8:3e:23:ed:f4:a1:
                    f4:20:d2:66:6d:b3:9b:f0:91:1c:16:48:a7:f5:3b:
                    4b:00:9c:43:c4:fc:7a:f1:d0:dd:9e:fc:1a:4f:c4:
                    66:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CC:20:96:D3:50:39:B4:44:CF:FC:A9:E1:0B:74:0F:0F:6E:6A:37
            X509v3 Authority Key Identifier:
                keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:5e:21:02:f9:01:d9:87:da:af:96:72:2b:d9:d7:3b:d0:31:
         2f:f2:06:1c:90:52:e4:0f:de:49:dd:79:c3:c5:4f:46:9d:03:
         15:99:af:ea:a0:09:cb:50:ed:7f:c8:45:08:c1:0c:23:28:ec:
         d6:29:04:ea:dd:6c:95:bc:b6:8f:2c:9d:fe:68:3e:e2:4a:8f:
         b1:a5:64:93:be:ef:2f:04:36:4e:28:58:54:95:79:69:99:16:
         23:43:15:7d:75:cd:7e:92:4e:8a:6c:cd:27:98:5b:df:78:60:
         3c:a9:70:fa:d8:8b:5a:f5:d0:fb:1f:71:00:a2:d1:a6:35:09:
         d4:05:ab:b3:73:f9:8c:6b:45:6a:c8:ec:71:fe:6d:9d:a9:be:
         a3:97:17:f5:f3:cd:69:1a:7f:bb:1d:fc:d1:c3:62:e9:54:9e:
         cc:f8:d4:67:c3:81:3a:e9:43:45:c4:3b:d1:33:b8:94:a3:07:
         44:50:06:2d:db:68:1e:58:8d:75:4e:7f:40:5e:dd:db:0c:c5:
         b6:eb:8b:e9:34:33:37:9a:ba:1c:7e:88:38:a1:34:40:20:16:
         9f:58:3e:b3:39:27:2d:d0:fd:80:e9:28:42:f4:7e:e7:1c:86:
         1b:19:ac:60:58:04:9a:f7:d8:fb:1d:ec:7f:36:a2:a6:27:7e:
         13:66:8e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:01:51 2025 by rpki-client on console.sobornost.net