Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
File:                     wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft (raw, json)
Hash identifier:          8Fxc48rTP2Y46pFoC6kLqwUbaaT8rDv1e0WgUMMWUgE=
Subject key identifier:   04:39:D1:51:A2:EF:8F:6A:7C:69:F6:2E:72:05:17:ED:9B:9E:07:F5
Authority key identifier: C2:FC:64:48:56:4E:C6:52:6B:91:B2:FE:23:B4:FD:58:34:2D:20:F4
Certificate issuer:       /CN=A91B7292/serialNumber=C2FC6448564EC6526B91B2FE23B4FD58342D20F4
Certificate serial:       EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
Manifest number:          E1
Signing time:             Fri 25 Apr 2025 04:35:46 +0000
Manifest this update:     Fri 25 Apr 2025 04:35:46 +0000
Manifest next update:     Fri 02 May 2025 04:35:46 +0000
Files and hashes:         1: wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl (hash: VgYEhbWqD1F5tn8eA/+F46s3vERSpEBQWzYTu/RMnp8=)
                          2: F007DD9AD14B11EEAB2B5281C4F9AE02.roa (hash: UNEOMs5fqV8hRkNMf6LQuM3qbd10KwZHOmN1Q6Mt1Y8=)
                          3: 998461D4D14E11EEBD6E0D11C4F9AE02.roa (hash: Bq4ocVFZ0iosWtq4rhIKfW0siZZeuAW1JI1o4Hun97U=)
                          4: 870862B2222011EFACCDE81BC4F9AE02.roa (hash: iFM1hRRsTitvTXymeae3/v3L/18Q6Ng8NLFYYC8Eutc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 04:35:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7292, serialNumber=C2FC6448564EC6526B91B2FE23B4FD58342D20F4
        Validity
            Not Before: Apr 25 04:35:46 2025 GMT
            Not After : May  2 04:35:46 2025 GMT
        Subject: CN=680b1122-8543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a4:e0:8a:a6:ae:72:55:0c:26:e5:60:6c:a8:
                    94:6f:2e:54:6d:14:ad:99:01:17:01:75:bb:36:fe:
                    28:10:44:4f:bc:a6:c6:37:cd:84:14:62:4b:97:a0:
                    c6:00:a4:78:0a:c1:51:30:48:e8:7d:24:58:c2:d7:
                    a9:84:b8:c6:62:78:a2:e5:e0:ac:a5:43:20:94:15:
                    d8:a1:96:02:46:e4:7b:2f:b1:7d:de:fe:df:a9:9d:
                    6f:bd:78:33:e9:a5:6f:94:99:78:50:ce:d8:a0:b1:
                    ed:cb:d1:bf:fb:22:cd:db:15:1a:ec:24:55:b0:87:
                    87:f0:ca:04:ab:c8:1d:44:a2:9f:a1:cc:17:3c:cf:
                    4d:90:35:43:46:50:d8:dd:7c:4f:63:e4:f0:58:2c:
                    24:81:a8:db:10:28:f6:44:70:bd:0d:57:9b:45:8c:
                    b9:52:9b:dd:a5:ca:20:2a:99:a3:ad:e4:4d:ab:94:
                    f2:fc:d5:e1:d8:10:57:5e:b0:9f:81:c8:d5:62:48:
                    5b:1f:27:0b:a4:75:de:79:ac:ed:a7:31:2d:57:69:
                    62:f1:bb:de:e4:45:4a:62:fd:68:4d:0d:94:a1:3c:
                    72:33:81:d5:7e:75:f9:21:50:6a:6f:44:a6:a7:5a:
                    0a:79:e6:ff:95:54:4b:4f:f2:09:22:4f:1b:74:6d:
                    cf:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:39:D1:51:A2:EF:8F:6A:7C:69:F6:2E:72:05:17:ED:9B:9E:07:F5
            X509v3 Authority Key Identifier:
                keyid:C2:FC:64:48:56:4E:C6:52:6B:91:B2:FE:23:B4:FD:58:34:2D:20:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:ed:d4:43:fa:0b:7a:e7:a4:2d:6d:a2:aa:b1:88:67:3d:e2:
         fb:ca:f4:5d:84:32:1b:93:21:33:5b:df:94:ff:4d:36:42:fa:
         70:ef:47:9d:e3:3d:74:bc:ca:6c:be:2c:be:bd:67:88:b3:1f:
         b5:1a:d4:72:2f:11:6f:c6:12:7b:c8:c5:08:14:e4:a4:dd:81:
         72:78:c3:7b:f2:6c:64:45:59:61:d9:00:4a:b2:d7:4e:94:df:
         6d:c9:5f:05:9b:1c:91:4f:a1:a9:df:3c:00:d6:5a:4f:34:d3:
         4f:cb:46:4f:e4:f4:0a:f4:ac:46:52:ce:54:6b:82:e0:1b:9c:
         36:5a:95:8f:dc:be:f2:24:ca:73:79:46:ef:7b:f4:2f:32:53:
         76:c4:f6:1f:a2:cf:3b:56:17:29:16:5c:ed:2f:a9:2f:4b:27:
         c0:dc:e7:49:3f:e7:86:8c:1c:46:82:fd:fd:a6:b2:d6:6e:f4:
         76:b7:cb:1a:34:13:28:9f:48:ac:8a:20:f0:7d:5d:98:e9:c3:
         9f:aa:e5:3c:75:99:1f:f2:d9:95:61:1a:22:50:74:f9:8f:3a:
         53:7b:1c:66:d2:31:07:ca:47:8e:df:f4:de:d5:62:f2:46:95:
         16:e7:e7:64:87:a1:a0:e6:7a:7f:44:46:10:25:67:48:33:75:
         fc:dd:7e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:08:35 2025 by rpki-client