Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
File:                     wuC1g9pA223YMwUcBSRZnhpZAsY.mft (raw, json)
Hash identifier:          Xm6j0GQA20bG0fS9CKYgYrNkGk+zP/Cc54rM5QeMzAw=
Subject key identifier:   A0:CE:EE:5D:79:91:80:15:05:D3:C0:94:B7:2D:49:96:11:0F:95:E2
Authority key identifier: C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6
Certificate issuer:       /CN=A91CCDD3/serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6
Certificate serial:       0843
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
Manifest number:          0832
Signing time:             Sat 26 Apr 2025 20:34:11 +0000
Manifest this update:     Sat 26 Apr 2025 20:34:10 +0000
Manifest next update:     Sat 03 May 2025 20:34:10 +0000
Files and hashes:         1: wuC1g9pA223YMwUcBSRZnhpZAsY.crl (hash: /P2XMJ5Fw88ei1QmEyieMuINlbBNBwQeRmCIsVmaJeo=)
                          2: 68EAE318D09411EA9D19403FC4F9AE02.roa (hash: QZ10qMscHBVTnnzL5dWHSJRPlyRwjNAbgp4PK8ErxtA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl
                          rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2115 (0x843)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCDD3, serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6
        Validity
            Not Before: Apr 26 20:34:10 2025 GMT
            Not After : May  3 20:34:10 2025 GMT
        Subject: CN=680d4343-2884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:74:20:96:ee:0e:4a:4d:ff:ab:31:a1:00:f9:
                    4e:4c:fc:89:7f:d3:c6:92:63:e8:e6:a2:6c:b0:ee:
                    2f:c6:12:6d:6c:15:e8:a1:f9:da:f9:bb:76:6e:40:
                    84:d3:38:5a:5b:cf:8e:e0:28:29:24:51:b3:1c:97:
                    5f:15:0d:35:fc:33:83:93:3b:ad:d8:fd:59:d4:d3:
                    28:b3:4a:59:b5:7e:22:d0:1b:15:7a:ce:5c:6c:f1:
                    6b:6c:d7:26:40:cf:18:76:4b:b0:87:54:1b:08:a5:
                    89:12:0b:16:af:a9:84:fc:58:ab:ed:c8:ad:51:e9:
                    43:44:e5:51:e4:88:10:b8:70:4d:8e:80:20:f0:4a:
                    48:b6:17:42:05:9f:2c:ea:ca:d1:3f:1a:44:8b:b0:
                    90:ea:fe:2e:0e:8a:f9:7e:f4:80:3e:2f:55:83:12:
                    af:77:9a:92:ca:16:61:4e:12:c6:2d:59:7c:19:3c:
                    36:13:72:2e:ad:c7:6d:99:58:7e:0b:0c:17:75:71:
                    71:41:08:8e:e6:95:10:3d:c4:94:d0:26:ee:1c:a0:
                    e5:af:fe:47:92:90:90:65:60:84:b1:0e:ab:1b:59:
                    26:86:84:6a:7f:19:aa:b4:50:e7:7b:65:55:88:7c:
                    f2:c9:86:19:66:e1:a6:fd:59:39:26:c9:7c:e6:aa:
                    fd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:CE:EE:5D:79:91:80:15:05:D3:C0:94:B7:2D:49:96:11:0F:95:E2
            X509v3 Authority Key Identifier:
                keyid:C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:e6:12:60:d3:98:d8:4d:10:0c:59:94:35:fd:31:66:37:0b:
         ce:4c:c4:5c:c6:9f:99:07:0e:83:3c:2e:da:b1:d9:87:98:15:
         45:74:53:82:bc:a6:86:27:7e:e2:9e:4d:66:b4:c5:44:11:85:
         e8:6f:3b:1a:af:f2:ed:85:99:dc:05:56:12:bd:dd:51:e3:1a:
         da:0b:ed:02:8a:ff:dc:3d:4d:d3:27:c3:72:ec:f4:4f:ff:4f:
         b2:bc:ab:c5:ce:ba:be:57:10:39:df:b8:9a:b3:5c:2b:e8:ea:
         f9:b0:57:58:1b:ab:d8:5c:e8:3c:b5:f5:5f:8a:46:cb:61:8e:
         d1:f0:39:54:5a:72:55:4a:2f:a3:5b:cc:89:89:0b:6c:86:9e:
         3e:30:fa:bd:43:14:06:9b:d5:b8:9e:7f:20:f3:19:af:b3:3b:
         ca:b3:9e:8a:88:98:fc:4d:8f:05:9f:cc:5b:e2:35:f7:ef:77:
         31:cd:9a:46:4f:81:64:58:21:9b:4c:ef:71:4b:0a:2a:76:5d:
         66:be:9b:13:92:9f:3b:08:93:75:96:d8:99:af:2a:8e:8c:5a:
         7b:a3:b2:a0:b4:4d:f6:dd:b0:f3:d0:c7:68:40:1c:38:7b:72:
         fa:a3:bf:16:47:d8:65:b1:6f:0e:8d:32:d4:1c:a5:23:d2:96:
         6d:e9:f0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:10 2025 by rpki-client on console.sobornost.net