Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
File:                     Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft (raw, json)
Hash identifier:          i09L7bXiD7apafjamqhSOEVrrVudteq0hsp2+4QKaO8=
Subject key identifier:   7B:9A:5D:40:5D:FF:AF:A7:A1:3E:55:8E:DA:BF:E2:55:60:C1:9F:82
Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
Certificate issuer:       /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Certificate serial:       1064
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
Manifest number:          1009
Signing time:             Mon 02 Jun 2025 17:40:15 +0000
Manifest this update:     Mon 02 Jun 2025 17:40:15 +0000
Manifest next update:     Mon 09 Jun 2025 17:40:15 +0000
Files and hashes:         1: Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl (hash: ffxKl9B/lSwsLWROnSyu7TEnu16chqLsJ4ywCCrOKsI=)
                          2: 727F33429FAD11EAAD1A6744C4F9AE02.roa (hash: 9E3TgDbI6+GnKMrsNMcyKe+QTJ6ByggMBzDm7xSwD4c=)
                          3: A8DA1B1E9EE511EA890A7220C4F9AE02.roa (hash: zMozM34kF4fkjssWZFKOWwbNxC8ctpO0n/S6xmrGp2U=)
                          4: 9D164714168511EAB282BB44C4F9AE02.roa (hash: UC9oT442f5r3Ad6bt4fyBW43wCVQtsSkEeag4T2t06g=)
                          5: 04C5DE76FF2711EAB7D5F235C4F9AE02.roa (hash: DMn88YNhtANf7oJNpEm/YcL69wX9rnoBHpOTc6fAMAs=)
                          6: ED4C74EC5B2911EDAC608856C4F9AE02.roa (hash: q9NbetQ6RooEPqs7Z6/euz24xz0gLtevk3mcKB1IVZM=)
                          7: B7D67B4ECC3011EA9B54C679C4F9AE02.roa (hash: 0pajmOLzTfRxXN+jwLdgr/HPuMFyL3nbTNRtA04jmts=)
                          8: CC320712ACE011EAB535D034C4F9AE02.roa (hash: zMOHMtYvfaZCDF6LwsEB8Dwbb4ZwRXv/YDIZ3yaOB+U=)
                          9: F47561669C3B11EABC59DA11C4F9AE02.roa (hash: FCS4+GL7rUUdkFrPp6f659LL++EemtPAULuJfkO/esc=)
                          10: F34FF6B69C3B11EABC59DA11C4F9AE02.roa (hash: MolD5bumMcf6jScQ4RC9hIXMaBQfB4E5sD8Ir6nVXrw=)
                          11: 9DE197A2168511EAB282BB44C4F9AE02.roa (hash: hOh5ZVZ+qFHQ5JWAOKeMOjW8ikSLX180HH4vgbhOg/c=)
                          12: 884A03F4447111EC83674068C4F9AE02.roa (hash: s7v3d/BTSW73Xtn7csGrhdpLigXtwYTrO1GpRuSnwkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl
                          rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 17:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4196 (0x1064)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123D9C, serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
        Validity
            Not Before: Jun  2 17:40:15 2025 GMT
            Not After : Jun  9 17:40:15 2025 GMT
        Subject: CN=683de1ff-fcca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:07:53:d1:c8:7b:79:5e:95:40:6c:4e:ff:3f:
                    7a:fb:1c:55:53:60:ea:a4:0e:6f:ea:b6:aa:97:be:
                    cb:00:a2:4d:f3:8a:bd:75:cd:96:1e:0b:90:57:d1:
                    e7:3e:b3:5d:52:e3:c3:ee:8a:b2:a0:05:d8:7a:19:
                    98:ab:4f:eb:8a:bf:c0:4d:10:4f:a4:e7:5c:41:90:
                    d4:12:41:2c:40:50:0b:c7:c3:97:11:bb:28:9c:95:
                    3d:d1:e2:37:be:4e:21:dd:f7:e9:0d:10:ef:5b:7e:
                    28:1f:9e:eb:fb:68:01:c7:60:e1:a7:1a:c1:2e:07:
                    96:33:f3:9a:5f:41:ea:19:3a:67:81:8b:04:78:b3:
                    f6:2b:11:32:6f:9d:e9:af:1b:f9:08:56:0d:83:57:
                    32:0e:45:b7:26:84:0e:1d:05:a9:fb:59:61:29:e2:
                    c8:48:b9:11:07:a6:18:cf:1f:d2:e1:35:df:2d:35:
                    87:73:bc:77:97:ac:f9:e2:8a:11:a0:37:7e:72:e2:
                    72:72:8d:b0:82:1e:89:eb:b2:22:f9:e7:5a:21:60:
                    a5:6b:a5:f9:de:e1:f9:da:fc:a5:f9:52:93:f3:53:
                    ed:61:c3:ad:b0:d6:ad:94:51:51:e6:81:93:c1:cc:
                    43:3f:28:68:ac:63:1c:f1:50:15:1c:49:49:4b:42:
                    ae:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9A:5D:40:5D:FF:AF:A7:A1:3E:55:8E:DA:BF:E2:55:60:C1:9F:82
            X509v3 Authority Key Identifier:
                keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:0c:96:fa:e9:7f:db:b2:72:3e:9b:58:19:ac:6a:16:9e:e4:
         77:c3:e6:ce:11:fd:4c:c5:c0:81:a6:29:64:2c:89:08:30:75:
         b4:d2:4c:0d:cb:7c:c3:05:26:51:11:54:f0:4e:b5:bb:d2:15:
         1d:71:3f:e0:45:94:f8:00:be:98:e2:b6:9f:aa:ba:bd:db:be:
         e5:b6:d1:c3:db:89:a6:a1:d5:f0:aa:ef:09:de:01:18:dd:01:
         d0:21:48:58:5e:00:b7:27:0d:22:5d:3e:1d:1e:62:dd:49:b7:
         f7:43:06:6c:fa:73:ee:45:e9:cd:9b:0f:d8:ca:a9:b6:ce:d2:
         b0:fb:85:45:9b:98:11:c7:8c:56:9e:62:8f:d8:82:6c:4f:69:
         da:59:55:dc:87:a9:33:66:00:7a:93:bf:83:32:8c:0b:bc:00:
         0c:e9:09:54:5d:73:d2:b7:94:0d:b9:7c:4d:9e:32:b3:99:5f:
         4d:f9:79:fd:84:1b:ab:0b:f8:c6:ed:99:16:df:a0:70:2a:fe:
         b5:28:37:01:b4:80:03:69:0f:76:32:90:d0:bb:0f:67:02:39:
         6a:77:c3:c6:e9:c6:ec:8c:f0:45:a9:db:0e:95:af:eb:57:8d:
         9e:e9:f6:09:03:50:16:dc:07:ad:06:86:7d:aa:54:e0:ff:06:
         ba:66:47:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:05:50 2025 by rpki-client