Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
File:                     Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft (raw, json)
Hash identifier:          L8SVMocKdP8Yyp6goR6oRM9rR8Vtgi6yKRSXxS+XTfA=
Subject key identifier:   7A:68:AA:7A:4F:DD:24:55:E0:45:BA:C8:73:9D:A4:1B:69:8D:2F:7C
Authority key identifier: 5A:ED:05:A6:42:76:41:08:1A:FC:E8:4F:69:72:5E:C8:56:A0:A4:EB
Certificate issuer:       /CN=A918DAC5/serialNumber=5AED05A6427641081AFCE84F69725EC856A0A4EB
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
Manifest number:          50
Signing time:             Sun 27 Apr 2025 06:06:27 +0000
Manifest this update:     Sun 27 Apr 2025 06:06:27 +0000
Manifest next update:     Sun 04 May 2025 06:06:27 +0000
Files and hashes:         1: Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl (hash: zrTrmsx0jr6sbzs29OO1PX2rR7I4fd0vnOBf0C8WfYw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl
                          rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DAC5, serialNumber=5AED05A6427641081AFCE84F69725EC856A0A4EB
        Validity
            Not Before: Apr 27 06:06:27 2025 GMT
            Not After : May  4 06:06:27 2025 GMT
        Subject: CN=680dc963-a4ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:29:b7:e8:98:84:e2:bd:c0:85:cd:02:de:ad:
                    ae:b1:f1:af:dd:35:a2:be:9a:7e:b1:53:ca:6b:e7:
                    5d:26:f8:cf:80:c2:41:75:bd:7f:88:f7:63:1e:c9:
                    54:00:af:b1:6b:28:e3:e0:9d:42:cd:00:58:df:89:
                    f1:af:2b:bc:59:a4:a8:e0:c5:f2:ed:2a:7d:a9:01:
                    00:9e:38:44:4e:73:cb:03:11:a8:69:fe:6e:58:ca:
                    04:76:c5:9d:e8:7a:35:d5:a2:fa:ae:4f:48:85:06:
                    d8:af:e3:09:a5:d6:54:74:3b:a0:c8:df:9f:3b:84:
                    5f:61:b9:05:57:13:a2:79:a9:f2:01:8d:51:e4:88:
                    f1:01:82:95:62:54:0b:55:1a:77:6e:9d:a5:25:bc:
                    e1:f0:47:c2:f1:df:1d:b2:66:20:c2:b2:a8:e5:fe:
                    c0:b1:5f:91:a3:cd:70:e5:00:19:15:58:9f:fa:f2:
                    39:56:c1:57:0b:15:71:7f:5e:7b:07:eb:bf:eb:ff:
                    1c:43:d2:13:01:f8:ff:cc:d2:3a:e6:75:0d:3c:e6:
                    27:44:c6:cc:08:dd:cf:7d:0a:12:af:b0:96:96:4c:
                    ac:fe:59:59:83:42:26:3d:53:3d:84:22:42:e2:ce:
                    16:c2:96:e3:33:56:4d:e0:07:d5:c9:81:a1:21:2e:
                    bf:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:68:AA:7A:4F:DD:24:55:E0:45:BA:C8:73:9D:A4:1B:69:8D:2F:7C
            X509v3 Authority Key Identifier:
                keyid:5A:ED:05:A6:42:76:41:08:1A:FC:E8:4F:69:72:5E:C8:56:A0:A4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c1:36:54:ec:b8:64:c4:49:a4:63:04:0c:64:f8:a2:01:78:
         31:8f:03:45:0a:1f:31:1d:83:df:4c:22:5e:1d:2a:45:5e:47:
         3e:dc:00:06:83:fe:ba:c1:50:c8:41:30:8f:46:2e:f1:d2:7a:
         57:db:ed:92:c4:9f:9b:9c:bc:11:5f:6f:7d:40:28:72:68:92:
         ec:a1:e4:5a:c9:78:ec:88:87:ac:a5:ce:17:c3:6b:70:cf:9e:
         e0:dd:1c:c7:29:7c:3d:89:66:9b:9e:99:9b:21:c4:3f:8d:0c:
         7b:bb:44:3b:1f:ec:f6:c3:ec:bb:75:43:ce:92:f8:9f:18:36:
         b3:fa:bd:00:6e:22:57:3f:48:41:b0:88:12:b3:e2:21:fa:17:
         b0:d9:71:62:40:cc:6d:b7:ca:d0:3b:dc:3e:91:59:a4:92:7d:
         55:54:3c:43:f5:48:08:40:b0:a0:13:11:2a:4d:d6:b3:7d:c0:
         91:4d:34:54:92:b3:8e:ea:9c:5d:25:cd:d6:5d:7e:8e:98:4f:
         86:be:52:58:65:15:fe:5d:d9:64:17:8a:36:3c:f2:92:59:07:
         d0:75:7b:36:d7:0a:97:91:ad:7f:99:f9:87:7f:6a:5a:af:79:
         03:8c:18:f2:4e:83:8c:88:42:8f:50:b0:cf:a7:d5:6e:eb:06:
         f4:0d:28:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:51 2025 by rpki-client on console.sobornost.net