Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
File:                     wSlv-tNPKfBODvrV2SRMAqfYfY0.mft (raw, json)
Hash identifier:          fMxaOFds0rUMQ8c4RraI2BeNFBtWyt50RHfa+nYXdzY=
Subject key identifier:   96:28:5B:5E:7C:29:B1:CA:EB:68:53:E9:92:DF:3E:6E:BF:D1:5D:A2
Authority key identifier: C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
Certificate issuer:       /CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Certificate serial:       34CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
Manifest number:          34A7
Signing time:             Thu 24 Apr 2025 14:36:56 +0000
Manifest this update:     Thu 24 Apr 2025 14:36:56 +0000
Manifest next update:     Thu 01 May 2025 14:36:56 +0000
Files and hashes:         1: wSlv-tNPKfBODvrV2SRMAqfYfY0.crl (hash: Ju0OWgiRM3iTmt+Xl+7y1nc1eocUdj3a1GIfKkPgnjQ=)
                          2: 93215346C57811EA8440684AC4F9AE02.roa (hash: aQwUipFelnXNZZsX8ffdswm2bvUoYzaPrvgd4Hz86Uc=)
                          3: 117E1F1A68D411EEB1313F7DC4F9AE02.roa (hash: u4c1qwJ9TWATgmKTAMcATmYWWDAvo7ixDAZ/9U/tdpY=)
                          4: 0000FD82284811EFADB77468C4F9AE02.roa (hash: w1bbBa3f8haD8dXl0Sh3tS90MqNdPu73xuXaH88DKo0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
                          rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 14:36:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13515 (0x34cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF59C, serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
        Validity
            Not Before: Apr 24 14:36:56 2025 GMT
            Not After : May  1 14:36:56 2025 GMT
        Subject: CN=680a4c88-3fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:38:d1:10:6c:d9:86:b0:0f:d9:bb:38:bc:15:
                    77:cd:53:ca:fa:6d:9c:62:7a:a6:18:d8:77:fa:37:
                    2f:fe:06:d4:1b:7e:b9:45:f2:90:06:f2:c1:de:83:
                    52:74:2c:36:8b:2b:8d:30:47:e6:06:97:7d:21:bd:
                    56:c1:d7:b5:d2:a5:86:3e:0d:97:f3:00:1b:6b:b2:
                    2d:6b:ef:bc:14:06:f5:7b:e5:46:0f:09:f1:ba:57:
                    fa:cf:b4:ec:53:2f:cf:96:25:46:80:81:21:4d:1b:
                    b8:2b:92:58:bf:84:27:88:6f:e0:13:41:6f:00:11:
                    9a:5b:b7:38:cb:70:42:db:a0:0b:7c:7b:90:2d:53:
                    ec:1f:9d:9c:e0:a5:8f:90:2b:68:db:5f:25:a2:af:
                    3d:fc:d3:f4:5c:22:3f:57:56:7e:20:17:fb:9e:7f:
                    33:0e:57:ae:9e:e9:1d:7e:18:f3:07:7f:a1:f2:94:
                    c9:54:c7:32:22:f1:65:40:18:68:84:3d:57:54:af:
                    fa:9f:d4:33:83:34:a6:98:4f:1e:50:c4:8f:ba:5a:
                    48:4c:1b:4c:89:70:c2:5d:5b:00:05:30:d0:82:e4:
                    75:72:63:0e:3f:30:03:93:00:88:4e:88:c5:7f:80:
                    92:a1:60:af:dd:5d:cd:d4:05:d9:e0:58:fc:df:17:
                    bc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:28:5B:5E:7C:29:B1:CA:EB:68:53:E9:92:DF:3E:6E:BF:D1:5D:A2
            X509v3 Authority Key Identifier:
                keyid:C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:7a:1d:fc:28:02:83:88:56:9e:8b:b2:92:7f:45:fb:df:e8:
         7f:73:0e:48:0f:74:65:ed:ef:e5:a7:6a:70:d8:dc:a5:6c:4b:
         9e:c6:89:55:20:eb:dd:e8:a7:f0:3f:b6:2e:3c:a2:bf:f8:d1:
         20:50:c1:0c:6c:7e:61:90:39:ee:70:d2:8b:d9:9c:ae:f6:f4:
         7c:5f:fd:b8:75:42:ee:51:b2:c3:1a:4c:84:4e:49:db:dc:8d:
         8d:45:67:86:54:24:4f:23:ee:ac:d4:71:18:4f:82:67:8f:0f:
         94:84:f0:22:6c:b1:64:03:89:2d:2f:ea:75:ec:1b:91:82:64:
         09:45:9a:9e:ed:09:45:eb:7d:82:b4:44:fb:56:89:14:78:03:
         36:44:5b:84:3b:b9:9c:e4:61:38:32:e8:67:e9:d6:d9:32:03:
         85:00:3d:d5:78:71:f8:ab:7c:1d:30:86:0a:48:de:2f:26:28:
         c3:04:15:0f:a8:f1:d4:3a:d8:f3:cc:d4:00:54:86:a8:00:08:
         b9:8a:75:55:8b:a8:d8:a6:41:61:65:6c:fe:3a:49:e6:4b:82:
         93:90:2f:33:ba:2e:5f:2c:61:dd:de:ee:42:0b:e5:33:c3:75:
         8d:29:a8:82:f9:98:2e:7e:a1:d7:ec:b4:16:58:c3:09:36:e1:
         7b:d8:b6:33
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUY1OUMxMTAvBgNVBAUTKEMxMjk2RkZBRDM0RjI5RjA0RTBFRkFENUQ5MjQ0QzAy
QTdEODdEOEQwHhcNMjUwNDI0MTQzNjU2WhcNMjUwNTAxMTQzNjU2WjAYMRYwFAYD
VQQDEw02ODBhNGM4OC0zZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6zjREGzZhrAP2bs4vBV3zVPK+m2cYnqmGNh3+jcv/gbUG365RfKQBvLB3oNS
dCw2iyuNMEfmBpd9Ib1Wwde10qWGPg2X8wAba7Ita++8FAb1e+VGDwnxulf6z7Ts
Uy/PliVGgIEhTRu4K5JYv4QniG/gE0FvABGaW7c4y3BC26ALfHuQLVPsH52c4KWP
kCto218loq89/NP0XCI/V1Z+IBf7nn8zDleunukdfhjzB3+h8pTJVMcyIvFlQBho
hD1XVK/6n9QzgzSmmE8eUMSPulpITBtMiXDCXVsABTDQguR1cmMOPzADkwCITojF
f4CSoWCv3V3N1AXZ4Fj83xe8QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYoW158
KbHK62hT6ZLfPm6/0V2iMB8GA1UdIwQYMBaAFMEpb/rTTynwTg761dkkTAKn2H2N
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjU5Qy83MzVEQzRENjFE
OEQxMUUyOUE3NTQzRUIwOEIwMkNEMi93U2x2LXROUEtmQk9EdnJWMlNSTUFxZllm
WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dTbHYtdE5QS2ZCT0R2clYyU1JNQXFmWWZZMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RjU5Qy83MzVEQzRENjFEOEQxMUUyOUE3NTQzRUIwOEIwMkNEMi93U2x2LXROUEtm
Qk9EdnJWMlNSTUFxZllmWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDCeh38KAKDiFaei7KSf0X73+h/cw5ID3Rl7e/lp2pw2NylbEuexolV
IOvd6KfwP7YuPKK/+NEgUMEMbH5hkDnucNKL2Zyu9vR8X/24dULuUbLDGkyETknb
3I2NRWeGVCRPI+6s1HEYT4Jnjw+UhPAibLFkA4ktL+p17BuRgmQJRZqe7QlF632C
tET7VokUeAM2RFuEO7mc5GE4Muhn6dbZMgOFAD3VeHH4q3wdMIYKSN4vJijDBBUP
qPHUOtjzzNQAVIaoAAi5inVVi6jYpkFhZWz+OknmS4KTkC8zui5fLGHd3u5CC+Uz
w3WNKaiC+ZgufqHX7LQWWMMJNuF72LYz
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:59:05 2025 by rpki-client