Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft
File:                     gm447HHypIW0sk7-zoRjJQqEoLw.mft (raw, json)
Hash identifier:          BnYGIrxe+T9YBFbVvC1DDGJ8YHBiqfQvq0EofgeMY8E=
Subject key identifier:   3C:22:AA:42:BF:2B:E9:83:12:57:5A:8A:67:D5:28:4C:A1:30:C6:B6
Authority key identifier: 82:6E:38:EC:71:F2:A4:85:B4:B2:4E:FE:CE:84:63:25:0A:84:A0:BC
Certificate issuer:       /CN=A915A0EE/serialNumber=826E38EC71F2A485B4B24EFECE8463250A84A0BC
Certificate serial:       015E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gm447HHypIW0sk7-zoRjJQqEoLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft
Manifest number:          015E
Signing time:             Fri 25 Apr 2025 03:07:59 +0000
Manifest this update:     Fri 25 Apr 2025 03:07:58 +0000
Manifest next update:     Fri 02 May 2025 03:07:58 +0000
Files and hashes:         1: gm447HHypIW0sk7-zoRjJQqEoLw.crl (hash: TGv++mEM7TKF3/pbowHA0ETvuUzTASszNse0+YhR//E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.crl
                          rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gm447HHypIW0sk7-zoRjJQqEoLw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 03:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0EE, serialNumber=826E38EC71F2A485B4B24EFECE8463250A84A0BC
        Validity
            Not Before: Apr 25 03:07:58 2025 GMT
            Not After : May  2 03:07:58 2025 GMT
        Subject: CN=680afc8e-ec21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5e:11:05:37:ce:9c:b9:60:ea:de:58:2a:6c:
                    d2:9d:b8:6d:e3:ec:a6:a6:b1:5b:53:ba:5d:55:c9:
                    32:c5:f2:8d:0d:aa:22:e7:6f:dd:ce:f2:f7:2d:ed:
                    62:d4:6d:20:48:48:f1:f3:8b:6e:17:22:bf:25:d4:
                    30:ae:e8:4c:13:a2:01:6d:8e:34:61:cc:fa:f3:ce:
                    9e:5e:74:0c:3e:0c:99:e9:56:9f:6f:7e:ed:48:55:
                    4f:82:95:7d:8f:13:27:fb:b7:30:46:c1:7b:fc:a0:
                    f6:f1:bb:5a:92:17:36:80:99:6c:6e:ce:1b:39:cc:
                    03:a2:f0:71:52:09:17:0c:56:a1:bf:df:e8:e3:16:
                    c1:ab:40:ef:de:62:e9:78:c2:47:96:1a:23:39:bd:
                    f4:a2:71:d7:92:27:3c:0f:25:fb:20:f5:1c:c1:2e:
                    60:92:98:26:dc:d4:29:e4:42:b2:8b:11:88:89:35:
                    21:7b:46:46:88:a2:ff:53:c7:78:3c:ba:7a:65:b6:
                    87:7e:64:25:1d:8e:be:51:ee:84:cd:70:70:be:c8:
                    ab:14:cc:ed:e2:46:c7:63:0b:b8:2f:06:d5:5f:05:
                    2a:2b:c0:0b:6e:da:f1:47:60:06:0b:f7:c9:38:ae:
                    01:76:d5:24:34:21:0a:e4:23:4b:7d:cd:d6:f0:b0:
                    53:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:22:AA:42:BF:2B:E9:83:12:57:5A:8A:67:D5:28:4C:A1:30:C6:B6
            X509v3 Authority Key Identifier:
                keyid:82:6E:38:EC:71:F2:A4:85:B4:B2:4E:FE:CE:84:63:25:0A:84:A0:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gm447HHypIW0sk7-zoRjJQqEoLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:e9:25:54:d9:6e:8e:09:5e:5a:c1:16:a4:37:3d:09:d7:e7:
         e7:04:93:1d:fd:25:83:1f:7f:66:0d:62:ba:e7:18:bb:62:ab:
         ea:69:cb:90:36:54:06:b2:4b:cc:4f:87:ab:44:82:4e:57:f2:
         f3:ff:b4:f4:5c:78:c6:ed:ae:46:28:43:a2:e0:f5:fc:76:2a:
         27:79:ba:30:0b:ae:a6:cf:74:94:93:86:47:f4:2b:32:4b:a0:
         a5:8f:02:0c:8c:d3:2d:b9:d9:7c:36:f1:32:e9:b6:37:40:ad:
         0b:d2:f5:44:53:0f:df:cb:dd:9b:5a:d1:b9:6e:03:b9:ce:1f:
         ca:47:8a:bd:61:5b:ce:4d:bc:2e:5d:76:bd:74:fb:b9:25:06:
         0a:3a:a9:68:3f:6e:0a:7f:44:13:fc:50:81:a7:06:94:2e:74:
         c2:4b:21:5e:d9:64:0d:55:a0:e0:45:27:b2:35:50:fe:81:02:
         51:f6:e4:d6:32:30:87:5c:c3:be:62:2c:02:11:0b:78:8e:a7:
         c0:df:23:b0:4a:64:33:2b:e0:85:2b:73:e3:3c:a8:52:ec:1f:
         de:fc:0d:58:fc:92:d6:aa:c8:93:e7:44:15:de:cd:77:eb:8f:
         3c:7b:dc:70:3e:e9:f4:26:47:f4:bb:bb:0c:a3:c4:d5:02:d8:
         ad:13:19:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:18:57 2025 by rpki-client