Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
File:                     wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft (raw, json)
Hash identifier:          5xYrssPRkl7SUC11XaLrNgpI1IeXP7U/uA8jYhSkhz4=
Subject key identifier:   5E:73:79:76:83:A5:C7:2F:87:41:69:96:11:FE:F7:61:05:C1:EE:4E
Authority key identifier: C2:FC:64:48:56:4E:C6:52:6B:91:B2:FE:23:B4:FD:58:34:2D:20:F4
Certificate issuer:       /CN=A91B7292/serialNumber=C2FC6448564EC6526B91B2FE23B4FD58342D20F4
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
Manifest number:          F2
Signing time:             Sat 31 May 2025 04:57:15 +0000
Manifest this update:     Sat 31 May 2025 04:57:15 +0000
Manifest next update:     Sat 07 Jun 2025 04:57:15 +0000
Files and hashes:         1: wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl (hash: LGNxsgReer5ptNRzoMeK9LonwkpFVLZnNBAZ08kZN2Q=)
                          2: F007DD9AD14B11EEAB2B5281C4F9AE02.roa (hash: UNEOMs5fqV8hRkNMf6LQuM3qbd10KwZHOmN1Q6Mt1Y8=)
                          3: 998461D4D14E11EEBD6E0D11C4F9AE02.roa (hash: Bq4ocVFZ0iosWtq4rhIKfW0siZZeuAW1JI1o4Hun97U=)
                          4: 870862B2222011EFACCDE81BC4F9AE02.roa (hash: iFM1hRRsTitvTXymeae3/v3L/18Q6Ng8NLFYYC8Eutc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 04:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7292, serialNumber=C2FC6448564EC6526B91B2FE23B4FD58342D20F4
        Validity
            Not Before: May 31 04:57:15 2025 GMT
            Not After : Jun  7 04:57:15 2025 GMT
        Subject: CN=683a8c2b-251a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cd:30:91:8b:fe:e9:a6:b0:ff:61:3a:0b:84:
                    1a:a0:d3:1d:11:3c:e5:4e:d9:a8:b5:06:ca:bd:a6:
                    58:e6:87:52:5e:81:01:09:a8:e5:33:10:65:3b:7f:
                    20:28:30:7a:cd:b5:5d:8a:fb:fb:1b:66:99:5e:1d:
                    27:88:f1:5d:24:c9:c7:8d:a4:b4:7d:da:a1:97:ae:
                    63:11:5a:cb:3b:9c:66:0b:aa:39:ed:2b:92:d4:07:
                    3f:9d:8d:a3:6f:a6:b6:68:f0:d4:f1:78:b4:6a:57:
                    f1:95:f8:40:51:11:3c:ea:62:d2:7d:0a:73:05:ca:
                    67:91:00:7f:f0:5d:19:c3:83:5a:47:32:56:c2:53:
                    ed:ec:a9:76:95:ef:1b:f2:ce:36:da:83:81:0a:76:
                    c5:07:6b:89:56:c5:9e:7f:42:14:ee:9a:fa:43:b1:
                    32:81:d0:05:17:47:32:f9:40:69:d7:e4:64:14:42:
                    c5:22:b1:31:e7:04:88:1b:d2:9b:f2:3d:9b:ec:13:
                    3b:26:29:6c:35:48:fa:3a:d1:d4:b3:14:ed:78:0e:
                    84:86:d4:78:c7:b8:12:55:6f:26:8c:43:89:ad:95:
                    51:13:d3:78:ce:e0:72:a5:91:e3:79:24:1f:33:87:
                    d8:7e:df:40:51:f1:ba:e2:d1:e4:8b:0c:6e:3e:5c:
                    71:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:73:79:76:83:A5:C7:2F:87:41:69:96:11:FE:F7:61:05:C1:EE:4E
            X509v3 Authority Key Identifier:
                keyid:C2:FC:64:48:56:4E:C6:52:6B:91:B2:FE:23:B4:FD:58:34:2D:20:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:9f:7e:94:cd:55:88:07:a0:58:65:8e:dd:e5:59:95:89:62:
         52:70:6c:b4:cb:1e:78:30:2f:54:b5:dc:6e:6e:93:bc:5f:5c:
         b9:85:72:4f:3d:5a:4d:67:ce:9a:0b:8b:de:db:d0:10:88:41:
         fa:68:f0:58:2a:1d:21:a1:97:4f:f2:7a:f1:00:e1:37:23:72:
         7d:10:d7:91:f7:c1:f5:b1:c7:31:cf:c0:a8:e0:9e:49:a1:23:
         bf:aa:ea:3c:7e:ad:8b:4c:4f:f1:34:31:2f:d0:ef:02:f5:ba:
         f7:c7:e6:a6:e8:ee:92:c8:54:43:cc:eb:65:fc:31:c5:6c:9d:
         f1:93:36:bb:d7:b0:85:5f:c8:cd:29:88:e8:43:a2:8d:58:6b:
         17:4a:c7:87:19:b8:10:16:dc:25:1e:77:85:8e:16:1b:4b:ac:
         4e:06:e2:f8:ec:5d:1b:f5:56:14:a1:2e:9f:2f:8b:76:68:93:
         79:f8:81:6c:d8:55:81:c3:f4:97:67:5c:b2:63:1f:8c:22:13:
         a5:9c:25:11:7b:fe:e8:e7:37:c6:3d:4a:c8:ad:b6:4b:4a:e4:
         61:dc:1c:e5:65:9a:65:b1:d8:b5:84:48:78:8e:ef:c0:ae:9a:
         e2:ac:76:c9:e3:bd:4e:84:b1:03:33:9a:71:6a:a8:6d:2c:42:
         c2:69:ab:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:28:43 2025 by rpki-client