Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
File:                     wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft (raw, json)
Hash identifier:          6QTz+ELubTyNrWsTmjnxYxWc/e8PYSpOXxUavb3DweY=
Subject key identifier:   6C:18:00:35:5A:A9:A5:B3:9C:91:0C:79:F2:32:BD:59:F2:41:AE:7D
Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1
Certificate issuer:       /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
Certificate serial:       083C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
Manifest number:          0834
Signing time:             Sat 26 Apr 2025 20:31:59 +0000
Manifest this update:     Sat 26 Apr 2025 20:31:59 +0000
Manifest next update:     Sat 03 May 2025 20:31:58 +0000
Files and hashes:         1: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl (hash: S4nZt1gUQRhrsGuGybEyMzITZCaFa9Bw8KX+q5f6yUA=)
                          2: 3443D714D46111ECB708EA24C4F9AE02.roa (hash: cLcDxJaeMDwKIqi4j9iCoiD5WtzTHERGSbREs6JVCus=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl
                          rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2108 (0x83c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
        Validity
            Not Before: Apr 26 20:31:59 2025 GMT
            Not After : May  3 20:31:58 2025 GMT
        Subject: CN=680d42bf-390e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cb:86:e3:34:a7:3f:f9:e3:c4:10:0b:20:dd:
                    d6:4b:ad:f4:af:94:6e:98:cc:cd:80:ab:f7:b2:00:
                    32:dc:31:1c:0a:61:73:0e:eb:85:54:54:91:ae:02:
                    2d:96:ef:27:ab:0f:03:66:86:52:04:0e:22:f2:4b:
                    01:f8:7b:fa:0c:12:60:eb:d9:d6:e7:66:28:d3:a8:
                    5d:e8:6a:7e:8b:73:7d:21:8e:b3:f1:d3:e7:29:35:
                    c2:89:5c:ce:dd:b6:6a:9d:f4:33:55:3f:41:bf:63:
                    9f:08:9a:df:dd:bb:20:64:c9:cc:4d:ca:d3:87:d9:
                    43:aa:ff:c6:a8:37:e6:3c:39:57:28:84:c6:67:07:
                    aa:33:30:9a:2b:b7:a4:43:9a:79:c2:33:a4:fd:1f:
                    9c:39:72:54:3b:57:9f:88:b5:7d:4f:7c:ad:dc:67:
                    4a:43:73:cb:05:8c:fd:1a:4b:61:d1:83:09:64:3d:
                    21:5b:a0:35:00:6a:e1:15:cb:8e:e2:36:fa:a0:54:
                    d7:57:f0:6c:a7:73:a6:a7:74:a4:89:67:b5:c6:82:
                    ce:06:2b:db:79:45:f1:9a:04:8a:6b:46:f7:72:f2:
                    e2:b2:9f:e0:a9:ef:d4:95:a4:7f:4b:41:30:02:d5:
                    05:bc:e9:50:cd:b5:04:13:56:60:f8:c1:b2:6d:21:
                    9d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:18:00:35:5A:A9:A5:B3:9C:91:0C:79:F2:32:BD:59:F2:41:AE:7D
            X509v3 Authority Key Identifier:
                keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d9:e4:f9:a5:39:3a:60:3b:95:26:35:55:19:a4:e5:44:82:
         11:6d:38:5d:29:9c:d3:68:43:25:06:72:b0:ed:fd:6f:a9:a3:
         f6:99:f9:e1:66:cf:b5:09:1e:89:6f:b2:95:c5:52:8a:87:57:
         35:08:3f:38:d2:77:4f:e4:de:85:31:0d:0b:be:f6:58:77:46:
         84:82:f2:b4:e1:f9:e1:de:34:a0:c1:1f:eb:cc:69:73:49:22:
         b0:ef:0d:58:e1:1a:5e:fb:bb:2d:49:6e:87:e7:cd:3f:95:45:
         0e:c4:aa:d7:5a:af:6f:e4:21:e5:6b:5d:d8:b3:23:a4:64:f7:
         a2:9f:a8:0d:46:62:07:93:b1:71:d9:66:28:77:f6:5b:a9:66:
         f4:d6:c2:ec:ef:9c:1f:61:ef:56:60:e3:ba:c0:28:0f:04:a2:
         30:6e:6f:83:37:81:ca:59:ee:97:df:8e:d7:91:c0:2d:fd:18:
         03:92:9b:92:c8:4a:02:7c:c8:33:fe:87:ef:96:b1:75:33:0c:
         97:fd:75:62:bb:4b:86:25:31:3b:2e:2d:66:75:80:69:3b:fd:
         c8:f2:cc:c7:ae:c5:37:48:e1:3a:8b:bb:a4:1b:fb:08:26:64:
         7c:b9:ba:00:3e:46:87:3f:4e:38:ca:37:22:bb:ff:fb:ac:61:
         ff:9c:a9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:13 2025 by rpki-client on console.sobornost.net