Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
File:                     GXlPPKo3VSe6D9M0SAx-Azjnnio.mft (raw, json)
Hash identifier:          E3ZxTEpZkKmgSHB52kulV8Q3RuTuI1Vls7YHjdc/wtQ=
Subject key identifier:   81:AF:DC:0A:FD:30:C5:E5:43:29:4E:50:D1:A8:8F:04:FF:37:93:94
Authority key identifier: 19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A
Certificate issuer:       /CN=A914FA48/serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A
Certificate serial:       D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
Manifest number:          D6
Signing time:             Fri 13 Jun 2025 04:33:07 +0000
Manifest this update:     Fri 13 Jun 2025 04:33:07 +0000
Manifest next update:     Fri 20 Jun 2025 04:33:07 +0000
Files and hashes:         1: GXlPPKo3VSe6D9M0SAx-Azjnnio.crl (hash: 1VX0WggMQLKXVTTOojuTPSZqcJiQcbz7zwKrsT6wtBc=)
                          2: AB05727AFE8C11EE81FDAB6FC4F9AE02.roa (hash: ocKjbQ/3Baa9czIVFPuOiDN233xrblHduj0FuSh8Zac=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl
                          rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 04:33:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FA48, serialNumber=19794F3CAA375527BA0FD334480C7E0338E79E2A
        Validity
            Not Before: Jun 13 04:33:07 2025 GMT
            Not After : Jun 20 04:33:07 2025 GMT
        Subject: CN=684baa03-33b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e6:e7:43:95:59:da:e0:91:78:d9:32:73:55:
                    ef:c2:da:d2:22:23:06:dd:61:84:b4:e5:0b:11:2d:
                    0a:dd:9f:72:05:bf:88:84:9d:88:5d:2b:64:f7:47:
                    56:86:2b:d0:ee:a4:7f:68:28:0b:e0:c1:21:08:0f:
                    00:67:fc:85:c4:d3:6e:ab:ed:fe:b3:c2:ad:04:88:
                    b2:06:a6:5f:b0:61:3b:8d:84:dc:a7:dd:cf:82:5f:
                    fc:20:5c:20:0c:56:9e:e4:d1:7c:fe:8e:af:87:43:
                    84:05:7d:3f:87:dd:1e:c4:f3:b2:df:9c:e9:ee:6f:
                    e6:46:2d:8f:bb:07:04:bb:f3:a4:d8:34:d2:7c:3d:
                    cf:cd:ea:b8:09:47:54:b0:a3:ff:eb:29:ba:70:38:
                    3b:d7:ce:61:6b:b9:ef:a4:70:42:66:6e:8a:c7:58:
                    32:2f:73:94:27:20:e2:73:8f:42:a8:4a:45:39:21:
                    4a:01:e4:c2:f1:b2:d5:b0:39:a0:c1:c4:de:c8:cc:
                    7f:df:1c:ea:fa:e7:17:dc:05:ec:d4:1e:6a:c3:5f:
                    54:e1:98:25:32:5f:37:77:cd:3c:22:95:49:60:68:
                    04:b4:36:22:b6:a8:d8:87:60:04:bb:5e:3d:e2:89:
                    05:dd:e9:16:60:8a:c3:98:47:fa:ef:b7:56:d4:2b:
                    aa:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AF:DC:0A:FD:30:C5:E5:43:29:4E:50:D1:A8:8F:04:FF:37:93:94
            X509v3 Authority Key Identifier:
                keyid:19:79:4F:3C:AA:37:55:27:BA:0F:D3:34:48:0C:7E:03:38:E7:9E:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GXlPPKo3VSe6D9M0SAx-Azjnnio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA48/B9E2ACA0FE5411EE9619A314C4F9AE02/GXlPPKo3VSe6D9M0SAx-Azjnnio.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:14:67:d5:95:a4:7e:98:51:21:1b:64:ae:67:7c:4b:95:72:
         24:b0:71:9a:25:67:c6:4b:cc:6c:93:79:69:4d:00:71:08:38:
         26:d6:eb:1b:55:06:30:41:09:28:21:fe:f0:6d:6e:35:4c:a3:
         df:58:58:2b:2c:58:cf:94:20:9e:21:50:5a:41:67:53:34:e7:
         29:0d:3a:57:33:c5:84:60:d5:2b:1a:f8:6a:b3:b4:a3:5c:fa:
         0a:61:9c:58:94:87:5a:92:8b:bc:3f:7f:fa:0f:9b:3c:57:be:
         05:24:bd:71:16:ad:ae:53:1e:18:63:0b:63:9b:c0:ec:7d:34:
         4a:43:e7:3f:3c:46:8d:32:a4:c5:94:b3:c4:af:2d:99:b2:26:
         3b:37:e5:cd:83:aa:7b:83:93:ce:1e:de:bf:60:1d:31:88:3d:
         10:c9:9e:61:fb:1f:f7:67:3c:48:f8:42:84:90:81:dc:13:d1:
         6a:76:7c:59:77:29:12:b6:96:d5:22:c7:da:27:43:11:df:fa:
         98:92:85:7c:28:82:d6:c7:1c:18:e2:69:6b:93:37:ca:8e:86:
         0c:3e:53:0d:93:41:c7:d4:12:de:04:f9:0c:a4:ae:6e:0d:a0:
         c0:53:ad:69:50:b3:f2:d2:c9:21:16:cb:42:0e:92:1b:09:cc:
         dd:6f:ce:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:27:59 2025 by rpki-client