Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
File:                     GO9DJ41GMx6arw_XcqcygNE6qlI.mft (raw, json)
Hash identifier:          kLk/UUhj6MnMbd/917IE3LraaaUSAXvrqfdIrwdeGXA=
Subject key identifier:   46:D4:64:4F:61:85:FA:A4:94:8F:5E:B3:BB:FD:3A:76:F1:A9:DD:C4
Authority key identifier: 18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52
Certificate issuer:       /CN=A91104D1/serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52
Certificate serial:       10CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
Manifest number:          1077
Signing time:             Sat 14 Jun 2025 17:21:57 +0000
Manifest this update:     Sat 14 Jun 2025 17:21:56 +0000
Manifest next update:     Sat 21 Jun 2025 17:21:56 +0000
Files and hashes:         1: GO9DJ41GMx6arw_XcqcygNE6qlI.crl (hash: c1GLWeeTZYgiMp/troX8f50PkGr7W4NotXow1bS/N7U=)
                          2: 87C9E3FE3F6D11F0951BB23CC4F9AE02.roa (hash: cZ6PZrYDDvwfg8CUMPN9ghZZSt3c2YnNiECXmtMGmPE=)
                          3: 446826648F3511EE8864C25EC4F9AE02.roa (hash: isUw4olTYLhmDXX2L/NMbXVs40srSiQ7QfOKuuisKvs=)
                          4: 381223E2E00711EE8E019E29C4F9AE02.roa (hash: T690o+zlmCjPk931+I/aCbChbJkL8SqS+o/0AQYcZ0c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl
                          rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 17:21:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4298 (0x10ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91104D1, serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52
        Validity
            Not Before: Jun 14 17:21:56 2025 GMT
            Not After : Jun 21 17:21:56 2025 GMT
        Subject: CN=684dafb5-2688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:60:f0:74:cd:66:26:97:ca:37:9d:48:96:92:
                    c0:a6:48:eb:e0:7e:e4:09:5f:1d:da:b1:0a:76:ed:
                    2e:c0:52:60:5b:b0:c6:bd:93:42:13:ba:19:ff:86:
                    a0:7e:f4:b8:e1:3f:07:e9:dd:91:b1:13:87:17:b7:
                    8a:35:d4:c3:ed:ba:ea:c8:1e:6c:a5:aa:e6:94:48:
                    df:4a:d8:01:7b:7f:19:9b:68:a1:11:79:dc:b6:68:
                    b6:37:8c:f3:0d:03:fc:cd:7b:b2:a6:01:08:38:8b:
                    52:bd:c0:74:86:34:93:55:16:c3:4d:f0:80:09:f3:
                    85:7a:12:aa:8d:20:03:a1:89:5d:2e:c7:3a:09:45:
                    0d:6c:5e:1b:9b:ca:85:92:30:d9:69:bd:70:92:cb:
                    86:81:68:da:d2:26:8f:97:05:b6:a8:c6:ee:5c:1a:
                    da:4c:bb:8d:61:a1:66:dc:27:39:b0:6b:60:6b:de:
                    2b:fd:1f:f7:ae:6f:c7:2c:73:f3:13:67:8c:c5:2e:
                    8d:26:77:e6:dd:cc:00:24:e7:47:81:78:35:20:eb:
                    88:6b:fa:e4:4f:33:42:82:52:c5:9a:96:d3:50:72:
                    60:5e:d7:63:c8:0b:a4:d8:47:39:a2:62:56:9c:19:
                    be:fd:7d:47:46:45:6c:24:d6:a9:e0:98:fb:55:07:
                    40:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D4:64:4F:61:85:FA:A4:94:8F:5E:B3:BB:FD:3A:76:F1:A9:DD:C4
            X509v3 Authority Key Identifier:
                keyid:18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:5f:05:fd:aa:b8:1d:e1:53:33:8b:9b:7d:23:47:c2:7e:c7:
         0a:33:60:17:6b:3b:a3:cd:e6:92:ba:27:a2:f1:c4:41:77:d8:
         e8:0e:ce:0c:20:e3:b4:f9:fa:2c:39:d8:d2:a9:d2:9b:dd:7f:
         65:41:fa:1d:d4:61:67:1b:89:4c:38:fe:45:e7:00:09:9c:62:
         14:68:c0:9b:c5:5e:68:a8:98:15:6d:10:03:e9:d1:87:f9:01:
         80:e7:fd:d8:e6:5b:9e:fd:0b:f0:3f:ba:92:00:bf:8b:e3:fb:
         9c:03:ba:63:e2:58:a4:99:dd:e1:1e:2a:e1:6b:0c:ed:f0:c3:
         f8:5c:79:ec:33:11:81:ba:05:41:7e:34:08:fc:4f:a2:df:bb:
         aa:f0:cd:22:6f:78:22:42:a2:a6:ac:c3:77:d8:52:d5:f5:8f:
         44:9b:02:61:9d:b1:64:72:11:75:60:4f:97:81:68:0a:81:17:
         28:d7:87:0f:61:1d:8f:cf:66:31:a5:7d:f9:6a:8e:83:c3:5f:
         be:a7:99:61:0c:8d:c8:fd:cf:16:d7:8d:01:ad:0c:b4:1b:48:
         04:fb:86:e7:b1:44:92:a1:1b:14:65:65:33:24:c3:a5:57:44:
         9c:0d:27:39:43:68:ce:b4:f3:71:1b:12:90:64:26:30:4c:d9:
         54:96:0c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:07:10 2025 by rpki-client