Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
File:                     wso-IoSMqAhkgVrBFxhWCJY6SW0.mft (raw, json)
Hash identifier:          sVgtmvHaGh/NSST63sfPL9EDFKa8WXackvW3HzWl2WM=
Subject key identifier:   51:DD:C4:3D:8F:E6:64:87:F5:9F:3E:90:5C:E2:BE:D5:D6:88:6C:97
Authority key identifier: C2:CA:3E:22:84:8C:A8:08:64:81:5A:C1:17:18:56:08:96:3A:49:6D
Certificate issuer:       /CN=A912D9B5/serialNumber=C2CA3E22848CA80864815AC117185608963A496D
Certificate serial:       072D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
Manifest number:          0727
Signing time:             Thu 24 Apr 2025 21:36:00 +0000
Manifest this update:     Thu 24 Apr 2025 21:36:00 +0000
Manifest next update:     Thu 01 May 2025 21:36:00 +0000
Files and hashes:         1: wso-IoSMqAhkgVrBFxhWCJY6SW0.crl (hash: K0rbWKP4nBTTnJ8667krXc3k8E6RsTzYKLyRKqwG5rU=)
                          2: 5FE8E1B42E1F11EBA5577457C4F9AE02.roa (hash: 1rB8wjfujUH34y0bYE/i/m37F3UP1B3bzE3MrCEyty0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.crl
                          rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 21:35:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1837 (0x72d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D9B5, serialNumber=C2CA3E22848CA80864815AC117185608963A496D
        Validity
            Not Before: Apr 24 21:36:00 2025 GMT
            Not After : May  1 21:36:00 2025 GMT
        Subject: CN=680aaec0-eb63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:34:d4:70:59:13:ad:a1:7f:e1:ed:e4:7d:98:
                    fd:6f:b4:a3:b2:8d:93:8e:1b:e3:91:84:5d:fc:bf:
                    78:88:db:7c:09:84:c5:3e:dd:60:ad:e1:5b:4b:6b:
                    d0:d3:2c:23:b3:fa:56:72:a1:cb:cc:47:38:32:5a:
                    2a:70:53:e1:9e:3e:07:4a:a5:da:4d:1f:78:bf:0a:
                    52:c6:68:8a:fe:4e:54:2e:15:dc:74:e1:bb:75:e4:
                    31:6e:d4:90:18:23:c7:0a:cb:94:37:e7:32:73:37:
                    e8:18:da:b4:2c:3c:94:02:99:8e:e8:e9:de:24:5e:
                    8f:9d:04:21:ec:e5:32:31:25:dc:ac:37:ff:38:60:
                    79:e9:ea:5e:30:ae:29:2f:60:5c:5a:0b:5c:a0:9f:
                    b0:83:bd:4d:51:26:46:4f:9a:92:5d:84:e4:88:19:
                    bf:78:f6:77:bf:d4:53:17:0b:94:85:fa:24:76:d2:
                    e6:94:95:25:32:a5:78:90:c3:98:c6:0f:6b:17:2a:
                    6b:1b:5e:63:ce:52:d9:d2:9e:a4:08:7b:31:19:17:
                    37:21:80:12:c1:f3:56:59:90:be:91:05:02:57:1a:
                    04:a6:b0:c3:bb:3d:f9:fd:20:cc:cc:5a:b1:dd:20:
                    ee:ea:90:6b:11:e7:88:6b:f6:df:c7:66:a1:55:6e:
                    db:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DD:C4:3D:8F:E6:64:87:F5:9F:3E:90:5C:E2:BE:D5:D6:88:6C:97
            X509v3 Authority Key Identifier:
                keyid:C2:CA:3E:22:84:8C:A8:08:64:81:5A:C1:17:18:56:08:96:3A:49:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:92:77:ba:48:6a:f2:a0:77:aa:58:0e:ad:68:95:6a:24:00:
         68:71:aa:7e:57:16:26:73:c3:20:76:34:1a:f8:03:23:a0:00:
         00:cc:50:74:ea:d2:f9:3a:c2:65:be:41:34:2a:a4:34:fa:81:
         dd:08:bd:cf:04:77:09:e6:03:2c:a0:84:14:53:17:db:21:a4:
         5b:73:b0:bb:76:d0:7b:01:52:76:8e:70:f1:56:49:ea:72:c1:
         43:34:c8:f3:df:3b:13:7e:45:82:34:49:e0:d9:bc:78:a1:cb:
         aa:ab:2c:f6:5c:3f:27:60:bf:d2:e1:0a:bd:4c:d4:2d:9a:15:
         bc:d8:39:3c:9b:ef:ce:59:d4:4e:d7:7c:57:cb:f7:72:c7:09:
         1a:22:98:1b:2b:1c:4a:7f:ab:94:b3:e2:73:2a:ed:08:54:17:
         3c:27:f1:e7:9b:b6:df:bf:7f:f1:1d:15:a2:8c:c6:18:59:0a:
         91:3e:62:c3:57:8b:7d:88:ab:52:85:2c:9a:26:a3:6c:37:57:
         71:93:ce:3b:2b:a5:f7:e2:ed:aa:de:34:e7:fe:48:1d:9d:19:
         75:7c:44:39:41:0c:18:dc:50:c8:2f:05:a1:c0:15:98:ca:ac:
         21:1f:72:ab:76:9b:e0:ad:1d:71:f9:c3:de:b6:5b:b2:f3:34:
         c7:65:13:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:11:37 2025 by rpki-client