Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183E7F/D405D254285C11ECB9ACE10DC4F9AE02/1WCjWtQMpi9T5roc3grRqjKiuWc.mft
File:                     1WCjWtQMpi9T5roc3grRqjKiuWc.mft (raw, json)
Hash identifier:          oKA6C8y8jrbktgNZC4ab+VYnDEd5rmbna9bB/fBkbSc=
Subject key identifier:   86:58:CA:E6:AD:C9:E1:FB:98:92:87:A4:D3:60:26:79:33:3E:EA:2B
Authority key identifier: D5:60:A3:5A:D4:0C:A6:2F:53:E6:BA:1C:DE:0A:D1:AA:32:A2:B9:67
Certificate issuer:       /CN=A9183E7F/serialNumber=D560A35AD40CA62F53E6BA1CDE0AD1AA32A2B967
Certificate serial:       04A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WCjWtQMpi9T5roc3grRqjKiuWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183E7F/D405D254285C11ECB9ACE10DC4F9AE02/1WCjWtQMpi9T5roc3grRqjKiuWc.mft
Manifest number:          04A4
Signing time:             Tue 08 Apr 2025 23:38:43 +0000
Manifest this update:     Tue 08 Apr 2025 23:38:42 +0000
Manifest next update:     Tue 15 Apr 2025 23:38:42 +0000
Files and hashes:         1: 1WCjWtQMpi9T5roc3grRqjKiuWc.crl (hash: 1Rj2yXFuOm5GqZSDtyi3T3P/aX4E3suCsHGms6W1Vlc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183E7F/D405D254285C11ECB9ACE10DC4F9AE02/1WCjWtQMpi9T5roc3grRqjKiuWc.crl
                          rsync://rpki.apnic.net/member_repository/A9183E7F/D405D254285C11ECB9ACE10DC4F9AE02/1WCjWtQMpi9T5roc3grRqjKiuWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WCjWtQMpi9T5roc3grRqjKiuWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Apr 2025 23:38:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1188 (0x4a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183E7F
        Validity
            Not Before: Apr  8 23:38:42 2025 GMT
            Not After : Apr 15 23:38:42 2025 GMT
        Subject: CN=67f5b383-1dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a2:3a:f8:65:03:be:9c:06:17:72:ef:47:b5:
                    83:ee:eb:91:df:ca:1a:f4:86:60:2c:05:38:e8:90:
                    3f:84:c1:ba:34:f0:56:d3:50:12:84:25:a7:c5:1e:
                    2c:c5:b3:12:b4:31:e7:f2:f9:4d:8c:50:51:09:38:
                    3e:3d:fd:b8:9e:da:41:ad:7c:45:66:e4:90:2d:5f:
                    78:13:53:22:2e:c3:96:75:7f:40:4a:40:dc:ab:aa:
                    4a:be:83:0f:58:0a:a1:9b:ae:c8:28:42:69:60:c7:
                    38:d8:67:e8:f9:9f:d0:ac:f1:fc:7c:c8:b9:c0:06:
                    e0:2b:4b:79:42:a8:b7:ac:64:c0:0a:cf:d2:44:6a:
                    1f:33:11:da:db:7d:3c:4c:34:9e:78:d3:57:ac:d9:
                    79:a0:12:db:0a:b7:78:9c:00:7d:bd:3a:4f:10:a4:
                    66:71:45:8a:c2:c3:85:a1:47:3d:f8:d0:5b:97:e7:
                    ac:5b:e5:49:1b:8d:d2:d3:e0:b4:cc:6d:c1:11:48:
                    af:37:34:97:0b:fa:44:4b:21:1e:09:85:eb:a8:39:
                    97:4b:0b:a1:d1:4f:89:41:67:16:8e:ec:77:2e:c9:
                    ed:f1:4b:af:5e:d5:fc:e3:ec:9f:9d:06:25:61:39:
                    78:1a:2b:e8:86:db:2e:93:4a:06:d9:47:6d:a0:49:
                    27:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:58:CA:E6:AD:C9:E1:FB:98:92:87:A4:D3:60:26:79:33:3E:EA:2B
            X509v3 Authority Key Identifier:
                keyid:D5:60:A3:5A:D4:0C:A6:2F:53:E6:BA:1C:DE:0A:D1:AA:32:A2:B9:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183E7F/D405D254285C11ECB9ACE10DC4F9AE02/1WCjWtQMpi9T5roc3grRqjKiuWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WCjWtQMpi9T5roc3grRqjKiuWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183E7F/D405D254285C11ECB9ACE10DC4F9AE02/1WCjWtQMpi9T5roc3grRqjKiuWc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:45:d6:9f:8b:5c:a7:0d:df:b6:6b:72:52:2f:85:8b:aa:ea:
         5b:1b:6c:81:d9:60:8f:00:cb:93:cb:2a:3f:75:fe:33:6f:8a:
         ca:1c:60:8a:00:7d:a2:6d:ae:16:e5:1d:64:58:31:1d:07:53:
         aa:1a:03:ed:ae:63:20:d9:44:78:c4:58:3d:37:de:a9:80:21:
         d8:a5:78:97:99:8d:ee:05:78:09:40:5f:28:93:3c:4a:8c:23:
         43:7b:4b:d2:a9:4f:08:3c:a1:a8:7c:2d:47:58:aa:e5:6a:89:
         40:f3:d0:a8:d5:b0:1e:4b:90:02:0d:e3:5e:f5:27:33:a8:5f:
         18:19:f6:b2:9e:96:49:a1:26:fe:71:68:5a:b1:24:30:75:f6:
         d0:ec:fe:2f:49:a9:43:dd:21:94:f5:34:eb:ab:47:fc:74:d0:
         6a:4d:31:1d:b8:c4:15:e7:d1:8c:43:f8:89:1e:d9:a5:d1:dc:
         df:be:08:ef:da:5a:c6:da:94:92:5f:79:0d:5c:85:f0:f1:2c:
         ab:c8:c5:b4:34:01:f7:b7:73:c9:53:7d:b9:54:14:26:ef:34:
         0f:e8:01:83:ad:f3:ff:7a:ad:80:64:77:a8:c9:fd:42:c5:5b:
         cc:8f:70:33:28:b1:13:ef:06:3c:1e:51:fa:90:1a:87:9b:ee:
         1e:c9:6a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:30:41 2025 by rpki-client