Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft
File:                     wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft (raw, json)
Hash identifier:          ChJ75HP01iK/nsaCZNhUCjkFAwQawpRBebNo1T2kLvE=
Subject key identifier:   01:D2:55:48:40:F7:BD:44:75:51:E1:F5:47:77:EA:E8:B3:70:4A:52
Authority key identifier: C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59
Certificate issuer:       /CN=A91ED931/serialNumber=C035450BD1A2D44B151EE38C089888A5AF4B8059
Certificate serial:       04E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft
Manifest number:          04D6
Signing time:             Sat 26 Apr 2025 23:26:30 +0000
Manifest this update:     Sat 26 Apr 2025 23:26:30 +0000
Manifest next update:     Sat 03 May 2025 23:26:30 +0000
Files and hashes:         1: wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl (hash: iIT7+4f2Xaw36GJKh947qfSvOg9OLpd8g2Gzq1gH+EQ=)
                          2: 387C18C819B811EC841B010DC4F9AE02.roa (hash: SSxUlFmRZnQyfdZc684KEqFg9kqLpMFaUqQd4F+Mxrs=)
                          3: 7273624619B511EC98D2A883C4F9AE02.roa (hash: 4vfDTErE/YPzBBb/tkZtFZYbjVLXj35WS7FwgFIIRDc=)
                          4: 7EE93AAC893111EF824EA948C4F9AE02.roa (hash: 0qxVmtS0/Q5718VBgLAhk0g/i2FXx966gyKoh4X0d7A=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl
                          rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 23:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1250 (0x4e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED931, serialNumber=C035450BD1A2D44B151EE38C089888A5AF4B8059
        Validity
            Not Before: Apr 26 23:26:30 2025 GMT
            Not After : May  3 23:26:30 2025 GMT
        Subject: CN=680d6ba6-cfe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:22:ea:6f:0e:0f:9d:89:ee:4a:d9:6c:9f:3e:
                    6f:26:c7:c2:0d:28:2c:82:00:19:dc:e8:0b:61:f2:
                    de:47:6c:a2:82:89:d1:64:81:58:79:a4:cf:e7:49:
                    e7:2c:a8:63:43:b3:68:d6:b6:c7:57:f7:50:9e:ba:
                    9c:be:45:b6:7d:fe:6b:b3:2f:04:4c:c1:82:39:6d:
                    fc:82:a9:5e:f5:48:a0:c0:22:46:a8:59:9c:40:74:
                    bc:14:ef:ba:66:f6:b0:7a:c6:9d:71:51:52:b2:d9:
                    6f:fd:78:1c:24:12:e3:c9:ac:3e:2b:46:6c:38:31:
                    e1:0e:34:72:2f:0c:70:a9:d8:b7:0f:10:19:78:e2:
                    87:9a:c4:2a:87:65:a8:19:21:3d:4f:ff:e6:76:77:
                    6a:1b:56:3c:89:ad:0e:64:96:d7:d9:e8:68:43:af:
                    73:2e:a0:b6:44:88:23:79:af:34:83:90:19:66:b4:
                    24:73:89:06:b7:e6:08:41:82:40:54:48:56:ef:6a:
                    8a:46:4b:7e:3e:26:14:e7:34:75:83:d1:55:0a:58:
                    79:70:69:2f:6e:5f:b4:bf:95:1d:fc:ab:d8:3b:d1:
                    f3:63:bd:e0:29:b2:ff:21:68:27:b2:5e:4d:5a:29:
                    a3:d3:2a:8f:88:16:69:9e:92:26:f9:cf:e1:4c:c6:
                    b7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D2:55:48:40:F7:BD:44:75:51:E1:F5:47:77:EA:E8:B3:70:4A:52
            X509v3 Authority Key Identifier:
                keyid:C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:72:f0:6d:e0:05:74:12:59:e8:69:af:9f:aa:fa:d7:01:48:
         d3:93:37:6b:48:e0:86:51:c0:89:55:ca:8c:a7:e8:a0:83:5f:
         07:52:95:40:5f:56:c2:2e:53:d0:c3:a7:8c:db:c7:79:7b:e9:
         a7:c4:78:ee:d2:30:55:0f:71:4d:2c:b9:e0:eb:6f:21:9c:e1:
         23:31:53:46:b7:8e:ee:20:84:41:12:23:8f:fa:b7:70:71:9b:
         de:2f:6c:93:6a:b3:b1:09:af:a0:7f:5b:26:0d:c2:38:50:97:
         4d:d4:d3:5a:6d:d3:b6:b7:23:19:e5:ba:70:a1:cd:63:40:ae:
         32:1a:d7:54:93:7f:2f:41:2e:72:26:e4:b2:89:e5:1f:32:f5:
         2b:aa:95:4a:a9:3c:8a:b2:8e:44:36:f6:21:81:a3:39:2f:12:
         52:19:aa:49:d1:8d:96:35:14:2b:e8:48:c1:7b:32:f3:26:30:
         a8:b8:77:17:15:e5:f7:2d:35:22:e2:72:8b:02:fe:1a:5c:bd:
         1d:cf:e1:24:65:4e:df:bd:ee:75:35:01:26:75:35:1d:e0:12:
         02:19:58:82:e9:23:f9:42:98:2c:0c:ca:e2:8d:7d:df:6f:3c:
         e8:51:b5:ea:50:49:c8:5d:1d:4e:5f:7c:8f:b6:dc:a7:da:84:
         97:74:4b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:16 2025 by rpki-client on console.sobornost.net