Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft
File:                     Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft (raw, json)
Hash identifier:          VFBk6WgyAP5msYUr0dl+UOKzFMOWzcyN3AuJb0BNXsQ=
Subject key identifier:   07:88:D8:00:9A:59:C7:8F:9C:BD:5A:BC:51:2F:CF:68:03:58:DD:B0
Authority key identifier: 5A:8F:C6:D9:B9:92:32:2F:2D:7C:07:73:45:43:F7:98:97:ED:80:37
Certificate issuer:       /CN=A9153AC4/serialNumber=5A8FC6D9B992322F2D7C07734543F79897ED8037
Certificate serial:       0B98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft
Manifest number:          0B8F
Signing time:             Mon 28 Apr 2025 19:22:36 +0000
Manifest this update:     Mon 28 Apr 2025 19:22:36 +0000
Manifest next update:     Mon 05 May 2025 19:22:36 +0000
Files and hashes:         1: Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl (hash: fxqu7TICRPC5BgWF3Fn2lnFJUqvCjxA0x3BprgtM+34=)
                          2: 0E50DF10261311EAAD88B67EC4F9AE02.roa (hash: w2bZ1Vy5tJz/xtNGpIMywBX1w2FBfB12WPfrA4jI4ZM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl
                          rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 19:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2968 (0xb98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153AC4, serialNumber=5A8FC6D9B992322F2D7C07734543F79897ED8037
        Validity
            Not Before: Apr 28 19:22:36 2025 GMT
            Not After : May  5 19:22:36 2025 GMT
        Subject: CN=680fd57c-6c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0d:f1:b9:2e:a8:be:4c:b4:e8:0d:0c:a4:ad:
                    b5:e7:b9:71:95:48:68:bf:ea:aa:b7:31:1d:96:70:
                    0c:5b:23:6b:b8:2c:56:ab:8a:b8:36:27:80:65:d9:
                    ba:a1:5a:73:48:03:6d:7f:3b:de:98:dc:0f:05:78:
                    0a:98:cb:15:64:cb:b7:db:c5:a4:2c:a2:d3:2b:56:
                    c2:e9:aa:ca:50:08:ce:e9:9e:cc:6f:3c:6e:50:16:
                    fa:79:62:99:ac:61:80:f8:eb:5e:e1:69:ad:af:48:
                    fe:fc:57:08:58:e8:47:72:d5:95:9d:c0:dc:3d:2e:
                    33:2e:51:6d:bc:f1:40:1d:17:da:ee:dd:f1:0e:fb:
                    1e:0a:3d:56:0d:db:0a:12:49:9e:5e:8a:74:ad:6c:
                    b5:b1:c0:73:06:d7:47:d4:2f:b3:7a:f0:80:fe:be:
                    7f:f2:9d:10:77:4f:2b:83:32:a0:a9:22:fb:04:71:
                    43:31:64:ca:81:f8:13:57:1e:64:d7:b2:89:d6:6f:
                    66:97:45:70:89:d0:9b:49:08:46:c6:e9:47:87:1f:
                    03:e5:af:42:55:67:e5:e6:04:7e:b7:7b:4b:8e:1c:
                    3b:7b:f1:9f:ac:9d:26:4e:35:31:06:3d:ac:0b:72:
                    0f:7f:78:8f:79:67:fa:ee:f2:4b:0c:6c:b1:8b:82:
                    90:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:88:D8:00:9A:59:C7:8F:9C:BD:5A:BC:51:2F:CF:68:03:58:DD:B0
            X509v3 Authority Key Identifier:
                keyid:5A:8F:C6:D9:B9:92:32:2F:2D:7C:07:73:45:43:F7:98:97:ED:80:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:72:6e:69:8a:f2:7c:cd:1e:c8:95:ac:c6:fb:02:10:02:00:
         cf:28:33:ab:c4:7d:d6:ce:8e:58:49:d6:03:a6:57:74:85:57:
         3a:04:a0:3c:10:0b:db:89:44:7f:49:bc:23:9e:89:f8:ed:9a:
         a7:75:da:d9:1b:09:8b:44:db:de:72:4e:2c:b7:7d:d2:3d:a0:
         72:75:9c:da:06:7f:f7:56:ce:f0:c6:ad:7b:7d:36:5f:ae:54:
         3f:ca:19:d2:95:40:08:3c:25:5a:d9:a0:14:a7:85:30:d5:b9:
         c8:cc:a0:42:06:96:c7:30:eb:09:e1:31:2b:45:74:27:40:c5:
         58:60:e1:9a:05:1c:7c:1b:6e:ee:e8:0f:b3:2f:1e:f7:78:89:
         64:61:db:90:79:33:3e:1b:06:0a:ca:14:35:16:ea:95:3b:a0:
         53:13:c2:4f:57:70:6f:89:c7:1b:a6:d1:82:5e:65:6e:7d:d6:
         ac:06:3d:c2:75:3a:c0:f9:57:ae:4f:8c:90:1a:04:d9:cc:fe:
         c1:fd:55:b5:00:b7:93:45:5c:dd:88:62:d0:f8:02:fd:59:b1:
         3a:75:e3:ee:a3:02:fa:1f:8a:65:26:62:e7:e6:95:af:9c:96:
         7f:87:85:ab:76:bd:e5:82:07:58:22:cc:05:f7:b1:1c:18:22:
         9c:37:5d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:05:11 2025 by rpki-client on console.sobornost.net