Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
File:                     G4GY4pfs-4-1GveWJNO2hKH5tR0.mft (raw, json)
Hash identifier:          dfH/IZ/FM/3Sb7RtRBy54UXHfzyH7GhI9T9GLQ/+vc8=
Subject key identifier:   0B:A0:4F:3A:C6:3A:0F:6E:19:04:F5:4E:D9:62:FC:DC:FE:16:EE:6B
Authority key identifier: 1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D
Certificate issuer:       /CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
Certificate serial:       2276
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
Manifest number:          226D
Signing time:             Sat 14 Jun 2025 15:50:08 +0000
Manifest this update:     Sat 14 Jun 2025 15:50:08 +0000
Manifest next update:     Sat 21 Jun 2025 15:50:08 +0000
Files and hashes:         1: G4GY4pfs-4-1GveWJNO2hKH5tR0.crl (hash: 79nBURPa/MOQQ7Vc0cKnpQGaJUiPcCrCgK0A0N7m0Ik=)
                          2: EBEA51DC4EE311EFA1615635C4F9AE02.roa (hash: Trb/xXQ89mwzGyAL+1mOumJDf5X3SVH7b+Li/DvO+lE=)
                          3: 27CF6BE84EED11EF8D4BE30CC4F9AE02.roa (hash: vUHNM7b/7rHUhQuKzV89H4uhi15N4fuBRHxCcyjL5as=)
                          4: EDB5F114A63711EF89F3B833C4F9AE02.roa (hash: yRPrheegIm3V93UgDt8N+OL/cPpnwv9rIo76kYVagnE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl
                          rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 15:50:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8822 (0x2276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E47C, serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
        Validity
            Not Before: Jun 14 15:50:08 2025 GMT
            Not After : Jun 21 15:50:08 2025 GMT
        Subject: CN=684d9a30-ee22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:42:8c:3f:d4:49:16:92:c0:1e:6b:e0:e0:43:
                    01:8d:f0:9c:a2:54:d5:04:80:a6:73:a0:5b:c7:98:
                    51:5e:17:c0:80:4e:e2:f8:f8:c2:5a:e2:61:81:f1:
                    26:01:f5:55:2b:1f:12:f0:99:23:69:98:5c:88:cb:
                    2f:04:ab:9f:31:e6:d5:a0:4f:1c:9d:3c:42:52:56:
                    e5:af:c9:5d:75:0e:c2:99:d0:1f:d4:bd:ab:10:62:
                    59:84:55:03:2c:96:49:a5:af:bc:1b:75:12:f7:e5:
                    85:24:be:40:52:6b:05:50:9b:f7:ea:e3:3b:5c:d9:
                    17:e7:76:24:1c:81:49:14:25:67:b6:d1:0b:66:7a:
                    19:46:2e:f7:08:25:93:e3:ee:29:0a:51:8d:01:4e:
                    a9:b4:3b:a7:f2:4c:6a:f8:59:ef:c9:12:9e:1c:8e:
                    28:58:49:4e:78:7c:b6:81:1c:ca:ed:05:79:99:37:
                    56:0e:63:15:7f:7d:4b:bc:5b:cf:2d:77:07:a3:03:
                    e2:aa:76:fb:46:18:3c:5d:35:5e:b1:1e:cc:77:a7:
                    eb:20:5e:87:cd:4a:b4:51:a9:d8:e8:09:20:f2:63:
                    b2:76:d3:20:5e:c4:df:1a:01:5c:11:f3:72:63:e2:
                    41:54:ba:52:45:fa:e1:e2:c2:21:3f:38:3c:a5:e0:
                    73:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A0:4F:3A:C6:3A:0F:6E:19:04:F5:4E:D9:62:FC:DC:FE:16:EE:6B
            X509v3 Authority Key Identifier:
                keyid:1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:5a:e6:97:52:91:4f:ed:e4:20:2e:a1:d4:38:50:4a:31:e1:
         96:04:79:cf:91:86:66:07:ce:62:15:58:c1:8d:1b:fc:b5:fe:
         b7:0a:88:70:98:f3:2e:0e:c0:b6:8d:84:13:97:70:ef:54:48:
         06:7c:1f:aa:98:f2:32:2b:1d:38:7b:37:90:0f:62:0a:3b:d1:
         62:ec:1c:9e:3b:39:56:29:34:50:05:1a:df:73:a0:95:7f:5b:
         58:60:e9:af:13:79:0b:2a:ba:05:aa:b1:91:36:36:ef:58:ed:
         f0:58:2f:9f:96:39:ea:ad:bb:b3:4c:66:22:9c:a4:43:ab:05:
         dd:1a:85:6c:96:7f:a5:d4:ca:40:55:f1:74:f6:13:e6:ee:dd:
         76:6d:fa:7e:85:32:fe:3e:13:02:7d:d9:5f:ea:11:40:a8:04:
         c6:ce:ea:fc:fb:c7:c7:3f:fe:e6:55:87:6e:6b:3a:a7:07:8e:
         11:a8:f9:c4:3c:f0:df:0d:53:57:50:e2:39:b8:dc:c9:bc:44:
         65:e6:78:3f:b4:03:e8:c6:b4:2b:1a:b1:6f:4a:ed:51:13:b7:
         97:71:93:87:69:dd:58:ce:75:33:ac:b2:19:55:fc:8d:87:31:
         e3:60:3b:46:c4:0b:0c:47:f8:2c:8f:92:91:67:f7:69:9d:61:
         84:62:3c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:54:38 2025 by rpki-client