Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
File:                     WCInA0DzKvjXCSJhC3CA_DQXes8.mft (raw, json)
Hash identifier:          zGgXHSfZ9+UBRIDdo15wDqA2arPufJLL2PPJx8fMtN4=
Subject key identifier:   52:02:73:C1:3E:6F:68:03:13:67:E8:1F:1F:37:40:1D:31:60:88:34
Authority key identifier: 58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF
Certificate issuer:       /CN=A91F742D/serialNumber=5822270340F32AF8D70922610B7080FC34177ACF
Certificate serial:       0569
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
Manifest number:          0565
Signing time:             Sat 26 Apr 2025 23:01:19 +0000
Manifest this update:     Sat 26 Apr 2025 23:01:18 +0000
Manifest next update:     Sat 03 May 2025 23:01:18 +0000
Files and hashes:         1: WCInA0DzKvjXCSJhC3CA_DQXes8.crl (hash: BGliCuXe3RC2WTSv9yGMqIVEAb9/fcZP+tOL9gy2UIQ=)
                          2: 78423A52DE2911EB9B09A334C4F9AE02.roa (hash: 6TM0Kz09gMjbJeG9e3468lar07wNf8zG8NNQJe1azz4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl
                          rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1385 (0x569)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F742D, serialNumber=5822270340F32AF8D70922610B7080FC34177ACF
        Validity
            Not Before: Apr 26 23:01:18 2025 GMT
            Not After : May  3 23:01:18 2025 GMT
        Subject: CN=680d65be-222f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:26:4b:21:11:ba:21:f5:df:1d:4d:b3:86:a0:
                    a2:bd:9d:69:e8:47:df:77:41:3f:ee:23:87:ae:2b:
                    b5:f7:03:64:c3:85:9e:0c:52:89:ef:53:5a:05:ac:
                    87:8a:f4:e0:ac:af:e7:84:92:4e:fc:5d:38:54:f6:
                    d2:06:b9:c9:09:84:e0:7f:da:e1:12:9d:78:a6:32:
                    9a:d2:e1:74:e8:1c:4e:11:d0:5f:44:4d:40:69:72:
                    c7:44:d9:a1:b8:63:69:a6:5b:6b:99:54:1d:6a:7c:
                    f9:a3:1a:f8:b7:78:30:e9:df:99:92:17:9a:57:9d:
                    66:08:d8:59:a6:17:bb:53:43:9c:f6:7b:cc:a6:6d:
                    38:26:50:f2:15:41:2b:e3:2f:68:01:4d:27:08:54:
                    a6:42:6b:73:14:ed:40:fc:c3:ec:6e:35:d1:24:94:
                    ef:a5:55:e8:60:73:f8:41:61:b5:62:fe:c7:89:ba:
                    ed:03:02:c1:90:e7:da:31:5a:1c:7e:de:78:c0:6b:
                    0a:6c:f4:53:e5:89:89:cf:25:01:2e:e4:48:46:67:
                    80:4a:c6:54:32:1e:02:11:3c:e9:d8:27:89:04:d4:
                    cf:a5:b3:94:15:62:1c:4f:52:a3:8b:0d:eb:8f:e3:
                    f1:a9:01:fe:03:fe:81:7d:f1:5e:dc:8c:79:04:3d:
                    ca:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:02:73:C1:3E:6F:68:03:13:67:E8:1F:1F:37:40:1D:31:60:88:34
            X509v3 Authority Key Identifier:
                keyid:58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b0:4c:b2:51:fe:8c:29:5a:8d:4c:90:d4:c8:fb:52:db:c8:
         a9:f2:26:ef:6a:ea:b8:ec:9b:93:f6:dd:73:1b:40:15:9d:33:
         d9:a0:84:89:7d:f8:75:09:0f:91:2f:37:93:af:03:14:e2:e0:
         b9:15:52:d4:24:cf:be:07:50:a0:b8:1c:04:41:d1:2f:53:b8:
         b3:6e:7b:4c:6d:a4:0c:3f:4a:79:52:85:68:1e:73:6b:02:d6:
         33:b5:32:0d:77:69:0c:4f:04:a2:5b:26:38:e9:63:3d:4c:64:
         66:b0:09:06:2d:21:5d:58:6d:94:13:5f:96:05:24:b7:1d:bc:
         ac:49:54:26:1a:12:e3:1f:71:04:42:f7:9f:d7:9e:df:52:20:
         fc:a1:42:c6:83:cb:b0:cd:dc:03:be:fc:f9:3d:6a:47:fc:5a:
         e0:5e:17:af:15:df:a3:ac:21:18:e0:86:56:f3:41:3f:b4:6f:
         bb:ac:20:e9:f5:72:5b:5f:a3:1f:4f:4e:51:9c:9f:c3:6f:aa:
         54:5b:8a:fd:91:5f:3a:53:7a:f5:ad:e8:1e:48:d2:05:4a:99:
         d3:d6:65:a9:e2:9c:c6:3b:a7:87:6d:4b:96:e7:f0:1f:a7:fd:
         8d:6a:2b:72:03:ef:3e:5c:07:c5:6b:13:98:70:35:14:07:76:
         29:f0:ce:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:18 2025 by rpki-client on console.sobornost.net