Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
File:                     gSJD5rXQ3hGucMcns50fIeOurAM.mft (raw, json)
Hash identifier:          HWUWbWflHqwdpYJxhuhynVfsm0O9GCj+KQ117iw/cfw=
Subject key identifier:   BE:67:40:57:92:FE:11:CF:62:8F:67:8E:41:D6:2F:D1:29:73:19:65
Authority key identifier: 81:22:43:E6:B5:D0:DE:11:AE:70:C7:27:B3:9D:1F:21:E3:AE:AC:03
Certificate issuer:       /CN=A916E44B/serialNumber=812243E6B5D0DE11AE70C727B39D1F21E3AEAC03
Certificate serial:       91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
Manifest number:          8E
Signing time:             Fri 25 Apr 2025 05:29:08 +0000
Manifest this update:     Fri 25 Apr 2025 05:29:08 +0000
Manifest next update:     Fri 02 May 2025 05:29:08 +0000
Files and hashes:         1: gSJD5rXQ3hGucMcns50fIeOurAM.crl (hash: ehMCDWJwFAI7yrtOoDDETLTcwRz42lfR7eUmFKM9iVg=)
                          2: 546C4C7C4E1911EFA1FB9E57C4F9AE02.roa (hash: HfmavC5K7XmmBi7YqluoXVde8wlSngfJdddN9xmZWm4=)
                          3: B02CCB344E0C11EF9175067FC4F9AE02.roa (hash: cG4bHCwSBKH1chVLOqeULJS86kAJ2XDxlWDeiDKP3Os=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.crl
                          rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 05:29:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E44B, serialNumber=812243E6B5D0DE11AE70C727B39D1F21E3AEAC03
        Validity
            Not Before: Apr 25 05:29:08 2025 GMT
            Not After : May  2 05:29:08 2025 GMT
        Subject: CN=680b1da4-cc5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:06:d1:22:d4:be:f1:24:8d:83:e5:51:d0:
                    6e:ef:c7:b9:b4:24:91:81:52:a8:22:5b:c2:16:44:
                    45:78:0c:ff:5d:d6:84:bd:79:6d:86:c1:6f:b0:e1:
                    ee:d4:17:35:49:02:b0:22:45:07:ef:0b:72:8d:d9:
                    9b:60:29:1a:56:11:f8:0f:19:1c:14:66:33:bf:00:
                    24:dd:27:04:62:7f:7d:ba:97:52:f1:bf:00:69:f3:
                    12:ae:08:c4:c6:6b:52:2b:37:73:f9:15:54:ec:42:
                    46:8a:09:35:73:c6:5d:85:84:c4:9e:47:8f:57:f2:
                    4a:ea:7b:b2:9a:f4:69:6e:33:ac:5b:08:07:1b:bf:
                    2e:2e:a5:a7:23:0f:20:55:c6:86:10:05:13:23:a7:
                    37:ec:97:6d:58:ff:ed:93:51:68:1a:54:d0:c8:90:
                    d0:cf:71:05:ab:1f:3a:63:8a:5d:c2:8d:39:5d:02:
                    c7:fa:9c:31:40:cc:38:fd:2f:3e:e1:66:9c:9e:fb:
                    0a:f2:1e:a5:3e:cc:56:eb:fb:4d:ee:ed:90:c5:b8:
                    28:58:13:bb:bb:94:8a:4c:06:02:3b:70:70:c8:91:
                    25:11:0a:63:bf:8e:4c:ad:a5:25:71:56:2d:05:9e:
                    2e:2b:0f:29:9f:b0:2c:09:b1:24:57:3d:d4:6c:58:
                    2f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:67:40:57:92:FE:11:CF:62:8F:67:8E:41:D6:2F:D1:29:73:19:65
            X509v3 Authority Key Identifier:
                keyid:81:22:43:E6:B5:D0:DE:11:AE:70:C7:27:B3:9D:1F:21:E3:AE:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ed:44:f9:5a:14:80:09:06:d9:49:8b:02:db:da:ae:11:88:
         f2:26:f3:85:a1:9e:a9:47:15:7e:aa:32:fc:6a:28:85:d9:ac:
         e6:30:bc:91:8e:d3:ce:b4:e8:15:e5:e6:83:b0:c9:87:0d:31:
         7c:87:bf:18:fb:33:06:c9:97:8d:44:e8:67:44:34:82:c1:70:
         07:83:2f:ea:78:c6:aa:76:80:a0:44:b0:a3:1c:96:17:c3:f8:
         03:c2:f1:80:64:4c:1c:f2:e4:ee:9a:37:7d:b6:13:49:52:8d:
         16:a1:c7:35:64:34:c2:72:1d:4f:a6:44:3d:93:00:be:b5:20:
         1f:3d:ed:be:7c:43:60:7b:5a:b1:7e:aa:7c:01:1a:7e:69:30:
         8b:c4:f6:80:f4:6e:e3:6b:42:31:be:66:bc:36:af:b9:74:63:
         11:f4:dd:34:de:35:7b:54:ad:26:82:52:0b:ea:73:e4:40:f0:
         c4:1a:c8:ed:6e:b0:01:47:d3:51:b2:38:50:11:3e:4d:d2:5d:
         92:f2:a0:e2:11:4d:cf:80:36:ce:ab:46:fa:74:13:c5:dd:83:
         26:51:e9:54:59:63:f2:e5:6b:f6:b1:79:5b:c9:da:59:d1:cd:
         2a:17:53:c4:75:ed:7f:5e:bb:a9:42:c0:d6:6c:3c:19:ab:9b:
         b0:f4:4a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:06:59 2025 by rpki-client