Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft
File:                     WothvFOjJNeitPQVPQd0bsKjNdI.mft (raw, json)
Hash identifier:          NWcNG64BDmular7w/fw3yCLQJM01E9htlFoSFT5M7K8=
Subject key identifier:   A8:47:08:E2:8C:BD:27:1C:E8:48:09:CF:C2:7B:C3:67:9A:CD:E7:27
Authority key identifier: 5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2
Certificate issuer:       /CN=A9173D12/serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2
Certificate serial:       86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft
Manifest number:          81
Signing time:             Sat 05 Apr 2025 05:54:16 +0000
Manifest this update:     Sat 05 Apr 2025 05:54:15 +0000
Manifest next update:     Sat 12 Apr 2025 05:54:15 +0000
Files and hashes:         1: WothvFOjJNeitPQVPQd0bsKjNdI.crl (hash: qctxNLVSbqJmDa7IYv+3sLxunf3ohspM6g43TAR/apg=)
                          2: AEDDE1EE556B11EFA5FB1569C4F9AE02.roa (hash: 5XjH5jYQNGqgzAYgO3kN1PD7Sd1lEpbAQIK2Gn00Jgc=)
                          3: AE51756A556B11EFA5FB1569C4F9AE02.roa (hash: Bt9vGqi9TgbZdaX+9C2xi9dkPbVYKmUnDkvJSbxIGtE=)
                          4: 014A2E90BC5C11EF9108934FC4F9AE02.roa (hash: HHG06rbqXUGTVwCC0t+f2pu30l3PoUzNu4BfvZ/sQwE=)
                          5: 02A3523ABC5C11EF9108934FC4F9AE02.roa (hash: tOqCLeToyx3OlovnhW3Ug6iPrFYH9Umb6yvHYh2Zk9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl
                          rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 05:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173D12
        Validity
            Not Before: Apr  5 05:54:15 2025 GMT
            Not After : Apr 12 05:54:15 2025 GMT
        Subject: CN=67f0c587-e2d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:eb:ad:12:36:c3:47:92:1a:ad:7e:47:25:2b:
                    3b:61:81:24:c3:ec:c9:6a:16:4c:dd:f9:f9:4b:97:
                    0c:6d:86:e4:24:2e:99:67:3d:2d:df:bf:50:d3:97:
                    ee:16:07:54:14:75:03:1d:8f:74:f4:68:c6:24:bd:
                    25:a9:2a:3a:66:96:76:ac:27:e3:d8:75:3b:d5:5b:
                    f4:b7:bd:52:56:07:bb:3e:aa:0b:0f:a5:40:f9:df:
                    18:3b:90:a6:b6:61:20:e2:c4:bf:ce:92:ab:99:aa:
                    cf:7d:20:0a:92:07:e9:d7:cb:fc:a3:1a:18:08:2c:
                    d7:48:6e:cb:8c:41:67:70:85:62:49:5f:f0:b4:37:
                    20:6e:2e:4b:0a:2f:2b:d2:d8:2c:b8:80:3b:d7:50:
                    ea:a0:c3:37:c5:6f:e4:dc:a1:83:b7:2b:c5:42:1f:
                    e1:93:f4:7f:79:8f:8c:7c:9a:bf:58:43:b8:40:eb:
                    a5:f2:ab:d6:9e:93:78:5f:02:4d:a8:63:70:f8:7a:
                    ed:37:cc:15:d0:4c:9e:08:57:06:69:9d:80:91:e5:
                    a0:ca:be:4c:78:ae:3d:fd:3b:61:a0:bd:da:5e:a9:
                    2f:13:ed:41:92:df:d6:dc:ad:57:2a:ae:75:b1:ec:
                    e2:97:b4:3e:11:bc:8f:1f:fb:0a:10:8a:46:ca:d0:
                    5b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:47:08:E2:8C:BD:27:1C:E8:48:09:CF:C2:7B:C3:67:9A:CD:E7:27
            X509v3 Authority Key Identifier:
                keyid:5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:12:e8:7f:be:8c:85:a2:f2:ae:b6:f2:79:de:f9:6e:35:23:
         aa:c5:37:48:c3:b4:ea:f0:64:b8:b1:ff:5e:85:72:99:c2:42:
         4a:e6:39:4f:57:b0:1e:a8:f2:9b:68:14:18:87:a9:9a:2a:50:
         bc:89:d8:f1:fb:29:f8:4f:1a:c9:23:f4:c3:f1:a1:e7:0a:fa:
         ab:e6:02:c2:07:50:aa:f9:a6:8c:52:67:63:5e:a6:46:df:b3:
         e1:be:2a:a9:15:52:db:b6:fd:60:58:07:44:3d:52:02:5d:10:
         57:9f:66:38:cb:12:e6:9f:c1:ce:16:dc:f0:2b:e8:df:bc:5e:
         71:f4:b6:b3:53:df:79:c0:90:e5:02:5e:64:da:16:ee:1f:6a:
         5e:69:5a:d6:53:2e:33:d3:26:95:81:6b:17:fe:c9:33:ef:73:
         00:5d:79:7f:1f:9c:1e:ab:51:ed:59:87:8d:e3:61:82:ca:f3:
         b9:5e:cb:75:28:c8:00:ac:a1:03:1d:db:b1:a0:47:9a:d6:69:
         3a:a5:90:b3:70:7b:25:e3:8e:95:c0:2c:fc:03:8e:e7:22:40:
         06:34:0a:82:b7:f2:17:67:0a:31:79:a9:c0:a6:8e:bf:5c:2a:
         eb:84:1f:88:3b:77:b9:58:f7:fb:7c:44:4a:6d:0e:39:dc:b9:
         54:b4:14:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:07 2025 by rpki-client