Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
File:                     Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft (raw, json)
Hash identifier:          rx7fJwfdQ+uDSyZQNyAoYgZwMz8inWVdu16VLUtxOF4=
Subject key identifier:   D4:0B:BF:FB:A6:7E:C6:AE:D4:DF:D1:25:4F:4C:63:2B:3C:7F:57:7C
Authority key identifier: 59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43
Certificate issuer:       /CN=A91A3E3F/serialNumber=59DDC3969B9863CFB5A15528AA4A391AF2337F43
Certificate serial:       01E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
Manifest number:          01D4
Signing time:             Fri 09 May 2025 02:10:25 +0000
Manifest this update:     Fri 09 May 2025 02:10:25 +0000
Manifest next update:     Fri 16 May 2025 02:10:25 +0000
Files and hashes:         1: Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl (hash: i+A0kuV0MTzmgrQovZm9d3MZZLKkSynBSNmFe1Wegwg=)
                          2: 538172167F5211ED8A16EF81C4F9AE02.roa (hash: NZi3AS5kSmfmC1ciiMxez1kqC/wPD4BHzNn8bShQs48=)
                          3: E6EB68347F4F11EDBD813D85C4F9AE02.roa (hash: pq5PnlojK/GAJppMbTHRBS7cpCdExCrMiIQ6oauUaFM=)
                          4: FA05DFF47F4911ED847FF862C4F9AE02.roa (hash: 2uW7Q5uLL5pnTePVa3NozZPJ/96p7ZLak+5a94dH9iU=)
                          5: F3A5BAB47F4C11ED9D79DA66C4F9AE02.roa (hash: bTHUxxssWziIXGGDs3FaNbsdMbd0w+8+gyMv7kRJZqE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl
                          rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 May 2025 02:10:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 482 (0x1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3E3F, serialNumber=59DDC3969B9863CFB5A15528AA4A391AF2337F43
        Validity
            Not Before: May  9 02:10:25 2025 GMT
            Not After : May 16 02:10:25 2025 GMT
        Subject: CN=681d6411-7599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:38:dd:07:70:44:f5:d8:23:ec:38:03:7b:c5:
                    6b:26:8e:8e:b8:a3:51:44:16:c7:32:54:fd:0c:c3:
                    79:97:f5:6f:80:a0:f2:18:f2:7b:b5:fe:ba:09:45:
                    70:07:45:39:65:40:6d:b4:c4:01:2b:db:b2:bd:a3:
                    33:53:eb:02:48:aa:96:67:0e:e9:c2:23:9a:94:17:
                    b1:1d:df:55:3e:b7:ea:1e:39:61:e5:fe:a6:23:1f:
                    a5:b0:6b:0c:f0:b0:17:1a:ea:b0:fa:f2:42:d9:ca:
                    37:34:d0:ca:d4:85:de:39:fb:0c:5a:b5:d2:0e:a1:
                    2f:5c:f8:21:2e:4c:3a:bc:c9:37:a4:69:c8:0a:07:
                    c9:70:6a:6b:cc:dc:15:ee:3d:bc:14:d6:48:dd:71:
                    5d:e0:2d:26:4a:68:30:3b:ee:86:81:66:a4:25:c1:
                    44:b0:90:a0:fa:8f:fa:37:ec:f5:b6:98:4e:07:57:
                    ad:43:39:34:51:24:c3:ed:39:22:47:b0:31:b3:27:
                    21:24:b6:67:8a:f5:e5:99:e8:79:92:a4:f4:de:12:
                    09:6d:ac:0c:de:cb:7a:0f:9e:f2:f0:d2:48:64:ae:
                    f3:fb:9d:62:3e:5b:1d:92:74:fd:c2:eb:8c:56:c1:
                    36:d3:a1:ae:a2:4e:eb:56:bc:7f:f5:df:b6:5e:8e:
                    f4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0B:BF:FB:A6:7E:C6:AE:D4:DF:D1:25:4F:4C:63:2B:3C:7F:57:7C
            X509v3 Authority Key Identifier:
                keyid:59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:7a:ec:e1:db:8a:28:90:2e:d1:28:88:d2:68:00:d3:d1:e4:
         6b:fd:cf:cb:56:03:c9:6c:ea:04:42:d9:11:fd:53:17:9f:27:
         6d:9c:20:58:a5:42:dd:c1:c4:cd:72:a9:bd:35:64:8c:5b:d2:
         4c:d3:de:31:19:8b:b3:9b:43:f0:ac:8d:70:0c:34:0e:a6:6c:
         9b:ed:84:36:29:c2:b7:bf:cc:5a:a9:46:24:06:ba:d6:10:55:
         c1:ce:5b:3a:8a:71:50:6c:33:f6:13:d0:28:94:a5:62:09:6a:
         b0:fa:46:1d:b8:85:c9:e4:a6:64:73:0d:9a:e6:47:20:d5:03:
         7a:b6:aa:6f:c8:76:75:34:13:b3:5e:b4:ed:7b:2f:df:55:0c:
         44:cd:41:f6:e8:8d:2e:17:85:6d:7d:fa:6a:89:31:7e:8c:35:
         28:e3:82:c2:54:9d:69:89:ff:e4:c3:2a:2f:f7:dd:a1:ca:9e:
         95:ce:ae:e4:c9:08:32:bb:17:5f:f9:48:a6:66:74:91:ef:dd:
         98:90:a7:94:c6:74:e0:23:f3:98:68:f1:19:9e:49:e7:9e:ee:
         3c:90:bd:6e:1f:30:f4:cc:51:ad:8c:10:dd:48:1b:6a:39:98:
         50:57:f5:fe:67:45:2e:00:a8:b7:b4:13:a7:ae:7f:8c:5a:b9:
         cf:70:64:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:24:25 2025 by rpki-client