Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
File:                     Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft (raw, json)
Hash identifier:          a4iQAkxLxtfEFjZ5eWxdOCowOSbfwW3j5M5FYypTK28=
Subject key identifier:   6C:7B:AB:2E:E4:66:DE:2C:58:E5:34:82:C0:2E:52:39:37:ED:A2:18
Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99
Certificate issuer:       /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
Certificate serial:       0356
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
Manifest number:          0343
Signing time:             Thu 19 Jun 2025 00:52:53 +0000
Manifest this update:     Thu 19 Jun 2025 00:52:53 +0000
Manifest next update:     Thu 26 Jun 2025 00:52:53 +0000
Files and hashes:         1: Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl (hash: 5wvLZZL57Z8oTK3zI83KOKOXYmiFQIcydxwh+Vp1xY8=)
                          2: F6542C72C53511ECA64F3010C4F9AE02.roa (hash: p0+cMHyUatjT2WLso8zM+Qkj3qxalubJRFVPjXCEC7c=)
                          3: 6E32028AD48511EF8239D526C4F9AE02.roa (hash: AA5WeVvXVNFXQwzizIn+RSDzp541QHk6IiOY/0z6xeo=)
                          4: F6D63384C53511ECA64F3010C4F9AE02.roa (hash: OVxLUiCstDCJM1i8OMKxBPVWt9kugvVdd+GEnlwY4Bo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl
                          rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 00:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 854 (0x356)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FC2C, serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
        Validity
            Not Before: Jun 19 00:52:53 2025 GMT
            Not After : Jun 26 00:52:53 2025 GMT
        Subject: CN=68535f65-9225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5c:f0:38:96:cf:a6:ae:a2:35:af:55:35:b6:
                    6a:91:57:4d:64:9d:33:98:98:ba:96:c7:8c:63:13:
                    a2:29:32:fb:3e:48:8c:f0:46:79:07:e0:ed:35:09:
                    eb:3a:ea:3e:dd:17:8e:64:46:ed:78:f3:c8:bb:0f:
                    c9:70:61:73:72:ae:da:fc:c9:38:ed:ef:f1:3d:85:
                    d9:ed:c1:d1:0d:e9:66:c1:ea:5f:42:6b:06:50:1e:
                    5d:1a:58:5f:3a:07:d0:85:3c:8d:93:71:62:8d:06:
                    cf:21:98:e8:8f:0f:61:4a:16:71:40:e6:f3:ca:b6:
                    ce:d9:5e:a6:36:b0:32:69:7e:7c:22:aa:dc:11:06:
                    8b:d6:3b:56:61:e1:e7:28:fb:dd:0a:27:be:c6:6f:
                    80:43:ab:64:0b:26:27:e9:fd:24:25:7e:f3:da:31:
                    b0:ea:d2:f0:03:26:2b:33:d4:7c:1f:2b:f5:91:1f:
                    75:2a:e0:88:de:32:5a:6e:00:54:5f:66:87:8b:21:
                    89:6f:0d:98:61:7a:43:98:d3:c3:28:1a:c6:f6:5d:
                    95:c9:96:1d:b5:a9:ae:84:6e:0c:27:86:59:b1:ef:
                    00:17:3f:60:9f:d8:09:8b:14:93:5a:a7:ac:99:6b:
                    16:b7:df:8e:96:ed:f8:15:cd:75:13:f7:5f:c5:a5:
                    7c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7B:AB:2E:E4:66:DE:2C:58:E5:34:82:C0:2E:52:39:37:ED:A2:18
            X509v3 Authority Key Identifier:
                keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:16:d3:60:1d:30:2c:31:f7:15:a8:45:d1:3d:b7:4e:3f:79:
         2c:44:dc:3c:47:21:18:71:24:a3:32:d0:57:79:4f:5a:e9:4a:
         4b:f4:df:dd:bf:4c:bf:5c:f4:bf:57:fc:1e:ef:9c:b4:4c:89:
         4e:32:6d:4f:e2:a0:12:1b:54:10:c6:3f:a6:1a:61:f9:6e:a8:
         6e:b9:df:5b:51:46:23:3c:9e:f4:84:d5:de:ec:cd:8a:05:aa:
         7c:be:98:81:f4:26:20:56:70:20:96:dd:4a:8f:88:2c:c6:e4:
         61:bb:17:8e:36:57:06:6a:ba:1d:67:d2:4c:4b:11:f0:8a:7a:
         59:ed:19:2e:87:f0:3d:68:4b:ee:93:78:2b:01:f4:86:82:24:
         ab:b9:7c:22:d1:f9:a1:b1:83:ab:40:48:c7:a7:4b:87:ca:01:
         91:6e:e7:12:ca:58:57:a3:b1:50:98:8a:d9:a5:88:7d:94:88:
         68:c4:2d:27:0b:78:a7:c8:22:9e:95:b1:d2:7a:87:2e:a5:b0:
         4a:63:67:19:19:e3:0b:53:b3:17:40:ae:d9:c8:8d:d2:25:ce:
         2e:e9:52:9a:5b:57:d8:20:97:d9:4a:cd:78:cd:0f:82:f6:32:
         2f:b1:3b:8f:a6:ed:71:40:7c:21:fc:dd:bd:18:7d:b1:b3:17:
         3f:7f:9a:7a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEZDMkMxMTAvBgNVBAUTKDFBRDlCRDlEQzc3MzE1QkQxMDJEQUY1QUE5RjkyNTY2
QjJDMkZCOTkwHhcNMjUwNjE5MDA1MjUzWhcNMjUwNjI2MDA1MjUzWjAYMRYwFAYD
VQQDEw02ODUzNWY2NS05MjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsFzwOJbPpq6iNa9VNbZqkVdNZJ0zmJi6lseMYxOiKTL7PkiM8EZ5B+DtNQnr
Ouo+3ReOZEbtePPIuw/JcGFzcq7a/Mk47e/xPYXZ7cHRDelmwepfQmsGUB5dGlhf
OgfQhTyNk3FijQbPIZjojw9hShZxQObzyrbO2V6mNrAyaX58IqrcEQaL1jtWYeHn
KPvdCie+xm+AQ6tkCyYn6f0kJX7z2jGw6tLwAyYrM9R8Hyv1kR91KuCI3jJabgBU
X2aHiyGJbw2YYXpDmNPDKBrG9l2VyZYdtamuhG4MJ4ZZse8AFz9gn9gJixSTWqes
mWsWt9+Olu34Fc11E/dfxaV8EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGx7qy7k
Zt4sWOU0gsAuUjk37aIYMB8GA1UdIwQYMBaAFBrZvZ3HcxW9EC2vWqn5JWaywvuZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkMyQy9CMDRFOTE5Q0M1
MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZiMFFMYTlhcWZrbFpyTEMt
NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d0bTluY2R6RmIwUUxhOWFxZmtsWnJMQy01ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RkMyQy9CMDRFOTE5Q0M1MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZi
MFFMYTlhcWZrbFpyTEMtNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAaFtNgHTAsMfcVqEXRPbdOP3ksRNw8RyEYcSSjMtBXeU9a6UpL9N/d
v0y/XPS/V/we75y0TIlOMm1P4qASG1QQxj+mGmH5bqhuud9bUUYjPJ70hNXe7M2K
Bap8vpiB9CYgVnAglt1Kj4gsxuRhuxeONlcGarodZ9JMSxHwinpZ7Rkuh/A9aEvu
k3grAfSGgiSruXwi0fmhsYOrQEjHp0uHygGRbucSylhXo7FQmIrZpYh9lIhoxC0n
C3inyCKelbHSeocupbBKY2cZGeMLU7MXQK7ZyI3SJc4u6VKaW1fYIJfZSs14zQ+C
9jIvsTuPpu1xQHwh/N29GH2xsxc/f5p6
-----END CERTIFICATE-----
Generated at Thu Jun 19 08:08:00 2025 by rpki-client