Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft
File:                     wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft (raw, json)
Hash identifier:          5VjBWS13rXloCA0qPx1JpyvNfQClbhrFKSTr/TuxUAY=
Subject key identifier:   FD:A2:F5:58:F2:95:88:14:70:53:C0:F6:20:C4:E1:9C:0A:EF:01:5D
Authority key identifier: C3:16:31:95:85:EE:2C:F2:47:B5:35:03:71:46:7D:C2:69:DC:9C:E5
Certificate issuer:       /CN=A91619BE/serialNumber=C316319585EE2CF247B5350371467DC269DC9CE5
Certificate serial:       34AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft
Manifest number:          3489
Signing time:             Mon 28 Apr 2025 14:26:25 +0000
Manifest this update:     Mon 28 Apr 2025 14:26:25 +0000
Manifest next update:     Mon 05 May 2025 14:26:25 +0000
Files and hashes:         1: wxYxlYXuLPJHtTUDcUZ9wmncnOU.crl (hash: ZLcpzBnpczxJ/f+/XfTfCRjsRYpTm9NppJaQJ/qSJLw=)
                          2: 3AA9ABDAA6C711E9933CF621C4F9AE02.roa (hash: vX/4yZE912/s2GuoQPXplPBoigawhbTtUVYeRq0wrOs=)
                          3: 3A0818A6A6C711E9933CF621C4F9AE02.roa (hash: 1g67cbWkfoHfH38TqnuwuXBiU6DRHwpF9jTBceu2aoA=)
                          4: 39651CE6A6C711E9933CF621C4F9AE02.roa (hash: r3eAM1iSh01D9RSagvxa0vLEAGKKq7t8Jj5qAIDWLps=)
                          5: 387D8CB4A6C711E9933CF621C4F9AE02.roa (hash: c6ol8jHJXDUln65jGLaP5C/f2Ij4iKXUx4DPHDYkjY8=)
                          6: 45598DB8FA1611EA9C6CE978C4F9AE02.roa (hash: gORNfp8EF7+Nyqco8O51JKHceZDE2ToJOAPUBBi1FKY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.crl
                          rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 14:26:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13485 (0x34ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91619BE, serialNumber=C316319585EE2CF247B5350371467DC269DC9CE5
        Validity
            Not Before: Apr 28 14:26:25 2025 GMT
            Not After : May  5 14:26:25 2025 GMT
        Subject: CN=680f9011-a0ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:68:27:c1:e6:7c:db:6e:0d:8c:2f:25:44:7e:
                    7f:5f:5f:fb:eb:40:01:d1:63:c2:ae:c9:f8:d6:d4:
                    33:e1:a6:f3:8a:49:fc:09:d5:66:13:d5:14:13:5d:
                    9b:c3:f6:3c:8d:e9:16:2a:80:cd:3b:e0:46:e2:a2:
                    f1:a6:15:84:c7:75:95:12:f6:96:15:4b:34:73:16:
                    9a:a6:7d:b0:c3:07:50:25:4d:05:1e:ec:4c:97:a2:
                    f6:80:5b:53:59:3c:33:72:94:4e:9b:97:39:c5:97:
                    96:f6:a0:53:9b:82:67:3e:f1:09:0c:a0:7c:f3:7a:
                    53:28:7f:3e:b9:a5:9c:4c:aa:54:6c:1d:27:7e:89:
                    94:5c:d9:bf:82:29:e3:75:6c:9c:ff:03:7c:eb:10:
                    8c:f2:2a:8d:2f:b2:64:b0:7f:98:38:64:22:9e:82:
                    fc:8d:09:83:89:54:2a:77:5e:53:98:cc:07:b4:51:
                    ec:a6:c5:09:79:2d:8d:ec:43:5d:cf:e3:5b:ed:34:
                    1c:c9:d7:00:06:8f:af:6c:e5:90:54:f3:63:01:e1:
                    a1:ab:3a:04:59:2a:55:b6:ce:29:bf:a5:b5:aa:30:
                    be:3f:e5:de:e7:31:e9:c1:c9:20:cc:46:ff:8a:8c:
                    e8:91:64:cf:e0:ee:72:ac:c9:02:24:c4:ff:e9:e2:
                    08:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A2:F5:58:F2:95:88:14:70:53:C0:F6:20:C4:E1:9C:0A:EF:01:5D
            X509v3 Authority Key Identifier:
                keyid:C3:16:31:95:85:EE:2C:F2:47:B5:35:03:71:46:7D:C2:69:DC:9C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:07:dc:82:55:33:c8:82:bb:c3:f9:0b:59:e9:bc:a6:fb:63:
         a7:fa:e6:86:25:3b:92:8e:20:ee:f1:ec:5e:62:11:d7:c0:82:
         af:c1:54:cb:99:dc:3d:7c:51:7c:a0:ee:22:48:14:34:9d:2b:
         1b:ab:aa:27:a6:98:60:45:bf:3f:93:7c:b4:09:98:5a:9a:85:
         f3:f9:a8:3a:cd:e7:ef:24:15:02:62:72:10:c2:10:ea:27:35:
         12:ce:4d:c1:63:2b:fb:d0:ea:51:4f:f3:e1:7f:22:b7:c5:89:
         61:7b:be:80:11:7a:09:f8:35:1c:51:01:e4:e0:bf:0c:cb:89:
         b7:5a:58:d7:0a:c0:17:6d:5b:23:11:42:5b:27:a3:d3:ee:d9:
         03:a2:6e:e3:15:2a:7e:4c:09:2b:ad:e0:46:72:a4:48:13:13:
         70:20:21:4f:6d:c5:03:b7:b8:64:a7:fb:a3:83:0c:74:7b:33:
         e1:24:40:5c:b9:4e:dd:af:5c:df:9c:10:ca:3e:39:cd:c3:72:
         e7:7e:d1:90:d5:ee:a2:68:b4:de:8c:55:9d:94:37:f2:2e:76:
         02:76:33:b1:4d:15:bd:e6:5c:fa:44:46:e7:95:54:6e:2b:b3:
         be:c1:d1:91:2d:39:6e:79:ec:b9:90:44:88:02:e6:9c:6e:a6:
         20:65:c1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:45:08 2025 by rpki-client on console.sobornost.net