Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.mft
File:                     wrgcmpNbsrM71p-3mzTuMmc5nbY.mft (raw, json)
Hash identifier:          iB+cOfW2nWXMw318oaRBDauWKGZML5XrqBaq1cjE3yM=
Subject key identifier:   1C:87:1D:98:07:89:2A:40:21:C6:C1:80:A9:42:CB:29:87:1B:EF:4C
Authority key identifier: C2:B8:1C:9A:93:5B:B2:B3:3B:D6:9F:B7:9B:34:EE:32:67:39:9D:B6
Certificate issuer:       /CN=A9180882/serialNumber=C2B81C9A935BB2B33BD69FB79B34EE3267399DB6
Certificate serial:       0199
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrgcmpNbsrM71p-3mzTuMmc5nbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.mft
Manifest number:          0196
Signing time:             Fri 25 Apr 2025 02:35:30 +0000
Manifest this update:     Fri 25 Apr 2025 02:35:30 +0000
Manifest next update:     Fri 02 May 2025 02:35:30 +0000
Files and hashes:         1: wrgcmpNbsrM71p-3mzTuMmc5nbY.crl (hash: /XkZFViKOPSMxTMEV/Xcgspgk4SdmB1wZvprM3KlPOg=)
                          2: EAD89080BA8B11EDB9005884C4F9AE02.roa (hash: cK40QtT2CNNImNuy8pJFpePuMkD3LPBAr2rQnfOdgKg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.crl
                          rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrgcmpNbsrM71p-3mzTuMmc5nbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 02:35:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180882, serialNumber=C2B81C9A935BB2B33BD69FB79B34EE3267399DB6
        Validity
            Not Before: Apr 25 02:35:30 2025 GMT
            Not After : May  2 02:35:30 2025 GMT
        Subject: CN=680af4f2-9347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:40:d3:69:32:bb:f0:3b:f8:ae:c0:8e:24:c6:
                    dc:8e:c0:27:b6:20:f9:fc:ac:36:9d:ef:81:e3:85:
                    62:86:df:62:01:24:55:93:1f:ba:fe:7d:be:c6:c4:
                    8e:82:12:ff:3d:bb:3e:dd:1c:cd:4a:0c:84:45:de:
                    3f:4d:2f:b8:e0:f4:33:56:c2:4b:18:37:45:a0:b9:
                    65:30:e8:4e:5a:b4:5a:1a:12:8a:93:9e:e6:44:37:
                    1e:c8:5a:0b:84:b6:ee:13:96:b5:b7:27:f1:f1:75:
                    75:bf:fb:0a:df:c4:15:9f:50:d2:2f:14:58:8d:86:
                    91:47:c3:53:96:f8:6b:71:52:bb:30:4a:cd:1f:34:
                    a9:0b:b9:f3:59:30:4c:94:28:02:7f:57:09:65:5c:
                    09:87:f6:5d:7c:6f:cf:36:1b:95:50:37:31:8a:1c:
                    a8:ce:44:90:37:36:df:72:48:70:09:bf:9e:53:73:
                    b9:c5:cf:e7:c2:7e:27:5f:ca:5a:bc:5a:e5:1a:d8:
                    f0:ef:22:c8:1b:e1:f4:7b:9d:ce:90:52:8b:d9:e7:
                    53:bb:3f:81:3d:60:e7:16:6e:df:d9:a7:f8:57:77:
                    49:9f:e3:a5:43:31:2e:fe:08:54:29:2c:69:37:d5:
                    a3:d6:b5:8f:1b:42:cb:ee:c6:33:a0:b9:47:ec:fd:
                    32:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:87:1D:98:07:89:2A:40:21:C6:C1:80:A9:42:CB:29:87:1B:EF:4C
            X509v3 Authority Key Identifier:
                keyid:C2:B8:1C:9A:93:5B:B2:B3:3B:D6:9F:B7:9B:34:EE:32:67:39:9D:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrgcmpNbsrM71p-3mzTuMmc5nbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:cb:5d:3d:a2:73:8c:7b:96:f0:a7:12:9c:70:cc:96:3e:6e:
         56:b2:a1:80:6c:e3:50:31:7c:b6:03:de:b0:6e:6d:43:22:b1:
         80:6e:7e:09:9a:17:d5:b7:90:8d:17:6a:3a:0a:a0:33:ab:45:
         81:66:3a:9f:8b:37:fb:9e:5a:ee:63:45:03:68:d2:d9:5a:5b:
         df:4d:c0:68:4a:1e:07:8b:ea:8f:4d:0e:4f:12:42:54:70:bc:
         36:c7:6d:e4:b1:31:05:1f:cb:9b:3a:25:e7:f3:96:1d:e2:36:
         a3:df:18:53:55:38:91:43:ad:29:11:00:be:f9:58:ba:97:1b:
         81:1b:9b:70:4f:6a:c7:bd:7f:60:ab:d0:9c:98:31:f9:3e:6d:
         08:d5:d1:39:1c:86:10:bf:1b:e7:b2:4e:ab:21:5a:fb:d2:15:
         5a:b3:0b:6f:83:16:f2:23:fc:bf:c3:76:6e:b5:36:29:c7:f4:
         ee:59:d8:17:a5:a7:bd:7b:0c:87:a4:cd:fc:b1:7f:28:84:0e:
         fc:da:4f:ad:bd:bd:17:66:e9:24:c8:08:98:25:c2:55:9d:a1:
         70:bd:e0:15:45:75:9e:6e:0a:2b:16:6d:24:ac:80:5c:9a:89:
         c1:35:04:9d:da:72:a5:49:16:da:c8:62:95:5a:7f:ce:7f:42:
         d9:8d:df:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:07:29 2025 by rpki-client