Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft
File:                     GySJViTA9S0agjsvKdrcCOKmJmE.mft (raw, json)
Hash identifier:          qR0q4YWGosxEYIs/I4dhSL3mnYXJJtTwhUKlUAEJxwU=
Subject key identifier:   51:0C:E9:91:A5:35:29:6F:04:4E:84:06:00:DD:A1:F8:74:18:8E:53
Authority key identifier: 1B:24:89:56:24:C0:F5:2D:1A:82:3B:2F:29:DA:DC:08:E2:A6:26:61
Certificate issuer:       /CN=A9136385/serialNumber=1B24895624C0F52D1A823B2F29DADC08E2A62661
Certificate serial:       014D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft
Manifest number:          014B
Signing time:             Fri 13 Jun 2025 03:10:53 +0000
Manifest this update:     Fri 13 Jun 2025 03:10:52 +0000
Manifest next update:     Fri 20 Jun 2025 03:10:52 +0000
Files and hashes:         1: GySJViTA9S0agjsvKdrcCOKmJmE.crl (hash: 4nbZU/hzAAtpKDBvyItLa9FlhZ5J2AXLKTsMHShW3SI=)
                          2: 557745EE4E1B11EEBA53316CC4F9AE02.roa (hash: kc35Syn08c4EtuwoQYpFr9xOBj5+HU59IWuBenhwr1A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.crl
                          rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 03:10:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136385, serialNumber=1B24895624C0F52D1A823B2F29DADC08E2A62661
        Validity
            Not Before: Jun 13 03:10:52 2025 GMT
            Not After : Jun 20 03:10:52 2025 GMT
        Subject: CN=684b96bd-efeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:de:f9:d0:20:1b:19:d8:a6:bb:4c:4f:b4:ac:
                    8a:ab:99:64:39:e4:64:a2:18:49:16:81:f7:f6:3d:
                    72:55:b4:0d:7d:b6:41:43:49:61:12:c7:a4:f8:cf:
                    00:26:3e:4c:f8:4e:d6:2d:72:6f:ad:e2:67:24:58:
                    bf:43:17:b9:da:29:23:c7:65:99:6c:43:41:ae:f1:
                    bf:3b:2b:e7:ca:f7:44:34:af:4f:64:40:50:07:73:
                    34:9a:37:dd:34:c8:92:84:83:62:e9:39:28:df:43:
                    ec:70:37:c4:34:88:47:89:9e:09:35:ae:5f:6b:d8:
                    5e:51:71:db:f4:1c:53:52:b5:9d:76:84:2d:85:8e:
                    a5:ac:f5:65:92:b0:17:0b:c1:c3:0e:3a:fc:cf:ae:
                    a0:89:d0:29:92:0a:9f:57:6c:3d:71:65:c7:b3:de:
                    34:dd:58:cf:64:42:b2:2e:88:f3:13:12:ae:99:c8:
                    3c:ad:a5:3b:21:f5:9c:73:f8:bb:59:b9:9e:cc:56:
                    7f:0c:32:c4:f4:26:27:30:5c:08:46:ec:11:22:b7:
                    b7:3f:6d:1f:59:94:cb:c3:78:ed:86:d1:63:0c:6b:
                    98:82:65:3b:f5:a7:9b:66:b3:2b:3a:6a:48:58:3c:
                    ce:d3:90:99:bd:24:6f:a2:00:50:75:65:74:11:8a:
                    b0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0C:E9:91:A5:35:29:6F:04:4E:84:06:00:DD:A1:F8:74:18:8E:53
            X509v3 Authority Key Identifier:
                keyid:1B:24:89:56:24:C0:F5:2D:1A:82:3B:2F:29:DA:DC:08:E2:A6:26:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:b8:3e:64:91:a5:1f:c0:26:c8:19:54:57:03:fa:34:15:fd:
         7f:da:d1:06:d6:62:67:9f:35:39:e1:67:07:11:e9:d4:4e:fa:
         0b:3c:e5:a8:23:e1:70:37:14:91:a5:05:b0:bc:88:8d:dc:f2:
         be:6c:fe:15:9a:ea:fb:eb:71:46:31:8a:bd:ce:e6:ea:36:3b:
         9a:d0:4a:e8:88:fa:73:12:c0:3a:7e:bc:06:37:2b:7a:9f:8a:
         d8:9d:70:d7:f6:5d:22:6f:6f:51:a0:f1:0d:02:16:12:55:57:
         d1:a8:5c:f3:6a:38:0c:80:83:79:12:7f:be:9b:ee:5d:2f:f0:
         ca:9e:bb:88:c5:af:05:70:26:65:1d:e9:08:af:2e:6d:a2:86:
         77:bb:db:4e:ab:c0:11:e0:2f:2d:b2:b1:58:5e:dd:64:0d:0b:
         b3:50:56:42:7c:72:12:e9:38:58:96:78:00:90:b8:f3:c4:78:
         64:0a:d9:dc:c5:4f:53:2c:f2:70:cb:27:a7:a8:18:74:55:5c:
         ec:b5:8b:c3:ad:db:7c:0f:47:1b:e3:a1:5c:0a:24:68:77:0f:
         03:28:bd:ad:68:0e:fd:fd:86:95:18:e0:5d:a5:46:c2:bb:89:
         02:9f:75:13:5e:4f:98:03:8e:49:d1:3b:90:fd:0d:c9:13:2b:
         39:7e:31:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:31:38 2025 by rpki-client