Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
File:                     GW-SdzKT5JVLTZel03rIIKdFwuA.mft (raw, json)
Hash identifier:          D+gC7RxTjXXoXirnrfWNogRDyNx85pouucWUFuDHino=
Subject key identifier:   42:12:5C:1A:A0:69:EE:6D:16:A6:C8:F3:30:93:A6:4A:5C:95:D5:76
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Certificate issuer:       /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial:       032D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
Manifest number:          0306
Signing time:             Fri 13 Jun 2025 00:53:56 +0000
Manifest this update:     Fri 13 Jun 2025 00:53:56 +0000
Manifest next update:     Fri 20 Jun 2025 00:53:55 +0000
Files and hashes:         1: GW-SdzKT5JVLTZel03rIIKdFwuA.crl (hash: vO+MSU/VY9ark14fgeTnauyEgAdf/828KmTkW57hc18=)
                          2: C44B775A34E311F082E88C1EC4F9AE02.roa (hash: z3VHP52aTGF4+pbHh2LbH0mUzaRtTHaDg3jhtgx8Sps=)
                          3: EC6F91D234E111F0AC656B38C4F9AE02.roa (hash: EAsZTbmjul19M3nCnjse3lLjxyXit2KRBEjP0/M4doE=)
                          4: AEF7F896B23511EF99CCD73DC4F9AE02.roa (hash: wSoOb2i11MD192v+PAQoqyp2HOpmx/3/4IA2POen7/s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
                          rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 00:53:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 813 (0x32d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917315B, serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
        Validity
            Not Before: Jun 13 00:53:56 2025 GMT
            Not After : Jun 20 00:53:55 2025 GMT
        Subject: CN=684b76a4-9b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d9:89:51:5b:3e:2c:1e:88:ad:7c:48:c0:22:
                    92:62:ef:dd:23:c2:e4:62:f8:96:fe:93:7c:4e:ec:
                    33:fa:1e:43:8b:ad:35:82:c0:91:33:ab:3f:2f:c5:
                    52:8c:f5:8d:4a:e4:45:26:12:6f:fd:41:cf:00:0c:
                    cb:00:42:40:4f:70:01:d8:5e:4d:f9:49:c8:ea:db:
                    a1:4e:16:91:d3:65:2e:bc:25:3c:fd:42:0b:76:42:
                    ee:d8:1e:f1:03:0d:d2:2c:ec:f0:46:c6:6b:f2:f7:
                    e6:06:c2:f3:ea:a7:7e:e3:51:83:c7:2b:85:e0:9b:
                    d2:c1:96:30:cb:9b:47:8c:df:bb:f4:78:74:1e:59:
                    c1:44:79:ea:63:ca:22:11:45:13:e6:d9:a6:5c:86:
                    78:bb:42:25:4f:38:12:52:27:d7:16:86:c6:62:39:
                    88:83:9b:cf:8a:8f:96:89:b3:2f:9d:c4:24:3c:83:
                    2d:93:3e:1a:d7:ae:3a:e7:b7:59:b0:a9:80:16:26:
                    10:ab:97:33:d5:6c:06:60:c2:41:3b:fe:fe:5f:ff:
                    e1:1c:7d:1d:21:96:e9:0f:2a:0b:4b:0a:66:7b:18:
                    a5:ee:83:c3:c6:6c:0f:90:2a:4a:ad:7b:a7:56:5f:
                    b9:bd:64:f6:c3:df:cf:ed:88:1a:67:1d:66:19:06:
                    23:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:12:5C:1A:A0:69:EE:6D:16:A6:C8:F3:30:93:A6:4A:5C:95:D5:76
            X509v3 Authority Key Identifier:
                keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:cc:29:d6:9c:b8:70:74:02:d3:1b:dc:39:b0:93:53:0e:84:
         9d:47:3d:37:ce:0a:95:20:52:6f:b6:a9:b4:68:6f:3d:35:0d:
         58:ba:c0:57:5d:52:9d:12:39:af:35:e8:ae:33:b5:bc:ce:a7:
         77:18:c4:63:ce:8c:4a:f2:65:a7:e3:bb:56:f7:af:58:0c:94:
         ca:a3:ae:02:ef:5f:0d:6d:0a:8e:18:f5:89:ba:c4:77:5a:79:
         7f:20:26:8a:42:0f:04:3d:92:58:76:96:33:06:27:8b:2d:a9:
         53:63:d6:34:5b:bb:37:ca:5e:ed:c4:22:0d:fb:79:4e:c6:86:
         6e:13:3e:4f:c0:86:38:11:af:62:8d:9e:51:bc:86:54:d3:8a:
         1c:81:b4:e0:3e:87:53:07:3b:22:94:79:99:d3:a6:c1:8e:ea:
         6c:c8:9f:2f:f5:9c:f5:42:5c:9a:16:33:96:43:71:5e:3f:68:
         2b:6d:c5:9f:fe:2c:cf:63:33:79:1d:ef:28:0b:47:96:3a:67:
         03:2f:07:9f:9d:4a:73:c2:f9:0e:b5:9c:0c:87:07:95:ab:c7:
         52:ce:ea:09:8a:91:9f:e3:00:7f:2b:1d:ed:73:02:06:66:8a:
         ff:fe:60:21:12:2e:6c:08:5a:49:b6:f8:e8:13:eb:d7:d1:9a:
         91:50:9b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:33:59 2025 by rpki-client