Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft
File:                     Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft (raw, json)
Hash identifier:          x5X9SqtA/y7tOw/6lM3+e7AJ5g0BXHocnXosiNCY6rc=
Subject key identifier:   73:FB:E6:33:C5:BC:96:89:77:CF:BA:13:CD:CE:B7:AE:DB:90:BA:B7
Authority key identifier: 5A:8F:C6:D9:B9:92:32:2F:2D:7C:07:73:45:43:F7:98:97:ED:80:37
Certificate issuer:       /CN=A9153AC4/serialNumber=5A8FC6D9B992322F2D7C07734543F79897ED8037
Certificate serial:       0B9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft
Manifest number:          0B92
Signing time:             Sun 04 May 2025 18:50:45 +0000
Manifest this update:     Sun 04 May 2025 18:50:44 +0000
Manifest next update:     Sun 11 May 2025 18:50:44 +0000
Files and hashes:         1: Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl (hash: KkPOWOG6dJc2ISds/PqC8omqXU2bLLk2C18LN+fsK5w=)
                          2: 0E50DF10261311EAAD88B67EC4F9AE02.roa (hash: w2bZ1Vy5tJz/xtNGpIMywBX1w2FBfB12WPfrA4jI4ZM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl
                          rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 May 2025 18:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2971 (0xb9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153AC4, serialNumber=5A8FC6D9B992322F2D7C07734543F79897ED8037
        Validity
            Not Before: May  4 18:50:44 2025 GMT
            Not After : May 11 18:50:44 2025 GMT
        Subject: CN=6817b704-5eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1a:10:d4:14:d7:64:87:03:b5:2c:69:70:93:
                    7a:90:2e:ea:bb:34:8f:34:32:c5:2e:1b:ef:47:d5:
                    f3:8f:38:ea:c8:92:95:0a:ce:31:33:92:e2:ed:ae:
                    3d:54:2b:ba:7d:f3:44:06:69:c2:fe:c1:a9:a2:9a:
                    79:8e:cd:01:30:88:16:7d:5f:03:08:4c:02:d7:29:
                    f4:0a:dc:2f:2e:ed:af:79:80:65:cb:9c:50:ec:2e:
                    6a:ee:bd:4f:ad:cc:5a:9e:ec:a8:8a:7f:65:24:2e:
                    78:18:d7:ce:e9:cd:20:e0:e7:1c:99:c2:9b:d4:3b:
                    93:fc:44:3a:e9:8e:3e:ea:6d:5c:bc:24:58:a1:ba:
                    b5:b7:a3:81:64:02:12:d1:4c:b9:ae:bf:11:40:b0:
                    b1:c8:76:97:e9:03:57:0d:03:18:8b:e3:3f:ac:32:
                    ed:bd:b6:b9:f1:43:8f:82:12:bd:42:1b:95:08:87:
                    a1:90:1b:3d:dd:83:1c:7c:82:05:26:50:1d:91:4f:
                    ba:92:9a:ea:00:d6:6b:0d:73:3e:d0:b0:52:69:51:
                    90:8d:ed:99:d3:ef:f4:45:fa:fd:81:17:d0:71:4e:
                    83:17:a5:7d:0c:e2:23:8a:6e:fc:8a:a9:25:b3:32:
                    3a:bb:46:02:5d:7f:f3:b4:77:2d:56:44:09:f0:3c:
                    df:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FB:E6:33:C5:BC:96:89:77:CF:BA:13:CD:CE:B7:AE:DB:90:BA:B7
            X509v3 Authority Key Identifier:
                keyid:5A:8F:C6:D9:B9:92:32:2F:2D:7C:07:73:45:43:F7:98:97:ED:80:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:15:8e:eb:df:0c:13:14:d1:b2:0a:b8:95:1d:9b:f0:45:1c:
         91:34:c4:e0:fd:e7:11:ed:b0:ec:3f:9c:de:b6:66:2a:de:78:
         f5:8b:af:76:48:f7:44:be:12:56:1a:6e:9d:ec:02:bd:65:f1:
         39:c3:8e:d7:49:8a:7d:b3:d7:83:a2:55:be:c0:2d:27:d2:42:
         a3:97:8a:42:13:67:e7:68:af:35:29:64:95:75:05:2a:2e:c1:
         ce:b2:47:2e:3f:72:bb:fe:ab:af:43:f2:f4:2c:61:16:c9:a7:
         83:c2:27:b5:96:fd:d0:be:ef:49:17:65:ca:00:91:94:f0:a4:
         79:ed:6c:72:ac:2c:09:19:cb:51:1a:3e:56:5d:a7:0a:4e:ab:
         e4:6f:3a:96:cd:aa:46:4d:6e:d3:8f:83:27:15:79:58:d4:a4:
         43:d9:41:10:52:51:83:97:0f:2d:c8:af:47:ba:19:89:12:9e:
         4f:ec:d7:24:df:e0:30:a5:71:da:f2:2e:0e:2d:d9:ed:d8:0c:
         5c:a0:73:e9:ee:65:b8:63:f4:bd:91:e9:18:a8:82:f6:99:10:
         ec:31:49:60:35:18:d8:20:67:9d:3c:bf:36:c0:4f:f6:c6:27:
         5c:6d:8f:76:5a:82:53:93:5e:c0:ac:3e:a6:fb:ab:87:5b:91:
         ad:b6:5c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:30:04 2025 by rpki-client