Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
File:                     WdWIElpxZphzjR0enm2KaNdAmyc.mft (raw, json)
Hash identifier:          rJdMaKFsdOqDYGnX/AQGQlA8oYYTlSepedOZL9+HZwk=
Subject key identifier:   D6:BF:FE:7F:64:06:42:2F:26:CA:16:D7:4B:EF:C4:EE:36:84:89:69
Authority key identifier: 59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27
Certificate issuer:       /CN=A91A27AB/serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
Certificate serial:       017A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
Manifest number:          0163
Signing time:             Sun 27 Apr 2025 03:12:57 +0000
Manifest this update:     Sun 27 Apr 2025 03:12:56 +0000
Manifest next update:     Sun 04 May 2025 03:12:56 +0000
Files and hashes:         1: WdWIElpxZphzjR0enm2KaNdAmyc.crl (hash: RTc1O04s5z0mTwXqV4bB0t6qBxgUOO8qrHVcBem/nlY=)
                          2: B7D0DFCE4DB711EF8E122A5FC4F9AE02.roa (hash: VKZ9LIexMFkEYGOmEADIBtbRMOmwzVdorGbV8zP17Qg=)
                          3: 6A9F1EFECC1211EEAA175022C4F9AE02.roa (hash: YF4v1PogTCjL1Qjwdf/xOXt8Ti7J50YFk5loWfPyIno=)
                          4: 74444F50490E11EFA7EAAA70C4F9AE02.roa (hash: 2y8wJ1PVjmvj/h6RNUPibqQJhsY3FKf+7tKEQmy95j0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl
                          rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A27AB, serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
        Validity
            Not Before: Apr 27 03:12:56 2025 GMT
            Not After : May  4 03:12:56 2025 GMT
        Subject: CN=680da0b8-bafd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6c:aa:a2:ac:aa:12:e5:fe:05:7b:f8:d6:60:
                    ed:a9:1f:8f:3e:3c:43:c2:d7:79:07:f3:6d:56:03:
                    42:db:4a:d9:b7:2d:bc:ad:3f:93:3e:a7:cb:0a:1a:
                    25:44:3a:ca:58:b5:84:a6:36:83:65:6e:37:23:f7:
                    25:45:62:6d:12:34:b6:06:ec:74:50:b6:1b:6e:c2:
                    ad:38:87:cd:a0:88:3f:d9:4a:64:c6:1d:97:ca:a9:
                    6d:ba:fb:48:e9:52:ea:e2:1d:05:e7:14:75:d3:79:
                    e6:98:13:bf:f4:c2:6d:81:06:7f:9f:8f:89:1e:30:
                    7e:5e:63:b0:7f:0a:30:c2:39:08:ad:79:c0:f7:80:
                    97:0a:ea:d5:ee:34:9b:02:a9:28:3f:b5:f3:e0:19:
                    78:e0:1f:a2:5f:73:5b:e4:f6:5d:27:8d:63:0b:29:
                    72:55:2c:87:ea:54:34:17:10:e8:04:84:66:28:b4:
                    ca:f3:d1:3a:12:c6:86:6e:8e:78:29:cd:3f:90:f1:
                    2c:97:5e:40:ad:48:4f:33:51:d6:a0:73:01:01:10:
                    30:1c:03:f9:17:0e:4d:35:c3:61:d7:57:c8:e0:a7:
                    f0:0c:0f:74:1c:6d:9e:1b:d4:4e:df:cb:b4:28:91:
                    15:d1:72:b3:19:a9:df:9e:87:df:7c:82:c8:b9:34:
                    3e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BF:FE:7F:64:06:42:2F:26:CA:16:D7:4B:EF:C4:EE:36:84:89:69
            X509v3 Authority Key Identifier:
                keyid:59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:3e:c5:7d:cc:3d:46:ca:86:cc:de:50:39:33:3a:52:d9:c1:
         b9:2d:87:2e:75:94:96:e4:4a:a5:57:01:1d:70:46:28:6f:38:
         dc:0a:f5:2b:1c:23:67:a4:96:51:ad:5b:f9:13:d2:ce:e9:fb:
         e8:06:58:ad:87:b1:52:9d:fb:ff:64:7c:ca:7b:6d:13:76:3b:
         82:6e:d8:f0:38:f7:02:09:ac:6e:8a:51:9e:e6:c9:ea:29:c5:
         ad:15:99:bf:1c:65:d4:57:3c:4b:ba:1c:e6:90:7d:33:66:b9:
         28:9c:73:64:2a:43:b2:30:39:c5:49:08:c3:f3:c2:92:37:a2:
         42:a7:1d:52:1a:5f:c0:39:c2:cf:ce:c9:d5:ef:8f:86:3b:2d:
         24:67:a4:28:1b:b6:92:e5:b0:16:ff:b9:48:c5:86:1e:3a:0f:
         dd:17:70:65:fb:31:ec:de:9a:8f:64:a4:43:05:6a:53:9b:86:
         97:4b:3e:e2:67:f6:ed:53:d5:2e:26:b4:6b:ed:2c:30:e0:9e:
         cb:78:69:95:95:f2:52:82:d8:9e:7b:49:33:0d:fa:12:4c:25:
         57:0c:bf:dd:15:de:ab:55:86:94:13:79:93:c9:5c:89:64:7f:
         c0:91:34:db:e2:bc:1c:3e:4e:2f:0a:c6:c7:81:b1:b1:9d:96:
         b2:a0:03:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:02 2025 by rpki-client on console.sobornost.net