Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft
File:                     GBAcuEWHASNcPxMzmuWp2zx1skA.mft (raw, json)
Hash identifier:          bjHrytOKPW1zArg0MbJbnGAfm4M6pXoRPDqU+OAaUvA=
Subject key identifier:   74:4F:01:C2:1D:D7:02:4C:6C:BF:C4:B4:D8:D9:7F:ED:CE:88:D5:D1
Authority key identifier: 18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40
Certificate issuer:       /CN=A9144D58/serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240
Certificate serial:       5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft
Manifest number:          5E
Signing time:             Sat 09 Aug 2025 07:35:53 +0000
Manifest this update:     Sat 09 Aug 2025 07:35:52 +0000
Manifest next update:     Sat 16 Aug 2025 07:35:52 +0000
Files and hashes:         1: GBAcuEWHASNcPxMzmuWp2zx1skA.crl (hash: PvwXNT2n6YJSS22eTwnQ8HJM7YR5iOlLSNltqE7tjL4=)
                          2: 5BFE0C8AE83A11EFB30F7245C4F9AE02.roa (hash: /alBYOnMh059IKMZJi/2ekO+PLUQa0YwQIF0wpnJha8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl
                          rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144D58, serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240
        Validity
            Not Before: Aug  9 07:35:52 2025 GMT
            Not After : Aug 16 07:35:52 2025 GMT
        Subject: CN=6896fa58-9542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1a:36:e7:a1:5f:82:38:d1:5d:ce:96:65:49:
                    f4:40:1e:37:2c:70:f4:c9:41:e8:40:f2:e6:eb:fa:
                    08:2a:90:cf:4c:a9:9c:58:6c:e6:70:0a:c9:b1:55:
                    ec:27:8d:df:8f:7b:11:76:2d:3c:0c:29:07:ef:be:
                    81:b9:3f:67:4c:ca:9d:f1:22:d9:18:de:a6:a1:49:
                    19:be:2c:15:4e:36:60:86:d7:a2:8a:f5:24:1f:2a:
                    ba:cd:b2:61:99:8e:d3:6e:18:ec:ac:04:2c:0e:b8:
                    f2:c1:1a:b4:00:fe:e3:c9:55:06:41:a2:d5:a6:c8:
                    87:ef:af:a5:c8:05:06:22:1a:47:e6:9d:33:9a:5c:
                    8a:df:3e:51:98:d2:3b:93:1b:e8:58:46:1e:c7:0c:
                    0f:fc:77:16:54:75:af:62:c3:8b:e2:34:02:46:7d:
                    73:ba:4f:c9:f9:97:8a:c9:8e:c2:5d:47:dc:7e:58:
                    9b:04:62:c4:48:26:30:db:d2:e7:b4:24:4f:57:41:
                    ff:39:ca:6c:19:72:ea:87:c5:de:e0:ea:6d:c2:9f:
                    68:39:e1:ba:90:d3:fb:c1:05:e6:c4:c2:f1:0b:3e:
                    b8:0a:d6:04:87:03:68:2e:87:f9:5f:d0:a8:88:0d:
                    91:9b:c8:80:0d:59:45:b7:3d:aa:1e:44:00:a1:a1:
                    ac:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4F:01:C2:1D:D7:02:4C:6C:BF:C4:B4:D8:D9:7F:ED:CE:88:D5:D1
            X509v3 Authority Key Identifier:
                keyid:18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:f0:f7:44:11:04:43:fe:ff:e5:0a:a0:7b:e9:c2:06:6c:32:
         19:64:e3:33:1d:5d:57:4a:72:61:aa:9a:06:1a:64:4b:15:1d:
         0f:9a:55:cd:c6:c7:41:f9:b7:d1:59:be:1b:7a:b0:67:48:7a:
         ab:06:8a:a0:aa:33:68:69:7f:d9:e8:de:e0:c6:da:47:7a:36:
         7e:52:8d:f3:74:7a:f0:6a:ed:40:32:42:6b:9d:90:0f:39:a4:
         66:75:c2:50:f7:ec:94:4f:9d:d6:f2:9b:9c:7f:fa:7c:5a:68:
         05:77:c0:eb:31:22:ca:c4:e1:22:23:5e:33:7b:85:23:73:86:
         58:34:32:8c:8c:5e:83:24:ed:71:4b:ab:18:d3:eb:7a:23:ca:
         5f:3e:16:73:c5:12:66:04:c5:42:1b:47:7b:a6:67:dd:c8:0a:
         3b:b9:2e:63:6b:2f:17:14:04:a4:01:dc:c7:60:08:d4:92:97:
         83:e4:1d:5e:07:cb:6d:14:a0:61:5b:79:68:39:12:a0:fc:f0:
         10:6f:d7:0f:4a:68:0a:c3:99:f8:93:c3:f8:55:b2:05:99:9a:
         aa:e5:02:48:81:e6:7c:3a:fd:bd:4b:6f:79:2f:58:f4:69:63:
         a5:77:6c:3c:b5:9a:82:09:3e:b6:bc:b8:7b:98:73:4a:e5:0b:
         43:75:31:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:03:03 2025 by rpki-client