Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
File:                     GW-SdzKT5JVLTZel03rIIKdFwuA.mft (raw, json)
Hash identifier:          ZB55jpiD7QgrOEhfYyRa7hf7UXP+DHAydVlK11hse0I=
Subject key identifier:   2D:35:78:53:EE:91:49:FC:4C:14:E4:63:EC:E4:FA:9A:EB:0A:FF:72
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Certificate issuer:       /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial:       0350
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
Manifest number:          0326
Signing time:             Mon 11 Aug 2025 01:29:56 +0000
Manifest this update:     Mon 11 Aug 2025 01:29:56 +0000
Manifest next update:     Mon 18 Aug 2025 01:29:56 +0000
Files and hashes:         1: GW-SdzKT5JVLTZel03rIIKdFwuA.crl (hash: S9nNQH+mjl5VspE8JleCI8ZV8ZtUft8y0IBq4eFuxEY=)
                          2: C44B775A34E311F082E88C1EC4F9AE02.roa (hash: dUBpS16NdHKDn/fnAodQThA6PhEIBxhk1Q4JKm4KPQc=)
                          3: EC6F91D234E111F0AC656B38C4F9AE02.roa (hash: wjeIwGtzinYej0T7YxQW1+hC3DUeNGDaisEjFRqBYo0=)
                          4: AEF7F896B23511EF99CCD73DC4F9AE02.roa (hash: zyZNP96AkvyazKN+7Z9uXIl84GYsJy6FhTmGH2JNTf4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
                          rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 848 (0x350)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917315B, serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
        Validity
            Not Before: Aug 11 01:29:56 2025 GMT
            Not After : Aug 18 01:29:56 2025 GMT
        Subject: CN=68994794-e966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:06:c7:3e:92:02:9a:8e:33:d1:de:5c:79:0b:
                    bb:d2:67:85:36:af:c2:4a:68:ad:1f:c3:8f:c0:43:
                    af:6c:8e:dc:90:89:58:35:10:48:bf:8d:0e:af:a5:
                    5d:c3:20:71:92:52:40:f2:74:2f:22:31:a6:4d:9b:
                    5f:66:47:fc:1e:2b:df:a2:39:21:87:b5:a3:a1:4f:
                    69:3c:d4:ac:53:38:09:af:f9:5a:89:71:47:e7:eb:
                    f6:14:df:a7:07:ea:ae:99:83:91:29:7f:16:2b:73:
                    90:b7:d0:45:b4:33:fc:db:32:f5:61:04:cb:e6:8d:
                    c0:98:98:38:eb:43:6f:33:42:7a:77:f8:17:55:c9:
                    39:89:de:02:1c:9c:74:2e:4c:fe:a6:5a:5c:ab:0d:
                    b5:7a:78:a2:18:e5:da:70:35:f1:57:e6:a7:91:37:
                    ac:9e:26:2b:f9:5c:c7:cb:15:ac:ce:73:d8:c9:3a:
                    02:33:9d:7b:08:c3:b8:11:c2:3c:35:ab:86:bc:46:
                    3f:2b:34:4f:a7:59:30:51:7d:d5:2a:93:ad:eb:1a:
                    82:73:b8:85:7c:d9:d3:e5:b5:1c:5c:c7:32:79:42:
                    58:32:09:14:17:6c:45:0f:87:06:d0:f6:b8:42:61:
                    20:06:11:50:7e:7b:a2:ec:d7:ee:ba:02:9e:c6:b8:
                    52:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:35:78:53:EE:91:49:FC:4C:14:E4:63:EC:E4:FA:9A:EB:0A:FF:72
            X509v3 Authority Key Identifier:
                keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:fe:5e:ff:6f:f1:49:e5:bf:26:58:88:0e:01:65:d2:49:e3:
         bc:f2:af:09:bb:2d:05:73:34:eb:58:0d:13:2d:68:4a:20:b9:
         5e:aa:b9:8a:1c:7a:72:0f:14:4d:31:fc:5d:6c:11:82:71:aa:
         6e:ca:36:d2:82:2a:0a:b3:a8:89:b7:a5:be:12:41:e6:cc:db:
         d7:a6:54:a9:22:76:53:61:67:53:7b:0e:f2:43:0a:9a:b5:5d:
         49:de:75:ba:24:56:e2:37:39:71:44:e8:a4:28:46:1b:54:cb:
         39:2d:d6:38:fe:97:a3:f1:e5:6b:6d:22:1a:d6:fe:9e:59:17:
         92:81:75:45:d1:5d:5b:d4:62:5d:70:a8:76:b4:56:e0:58:a2:
         7c:21:14:34:cc:2d:6d:d8:70:e0:f7:6b:33:71:41:e6:82:50:
         50:ef:43:d9:e2:52:3e:45:3e:da:fe:a8:9e:e4:6f:71:2c:3d:
         b3:d5:3d:85:05:0a:a5:63:07:2f:4d:5b:c1:90:1b:76:50:04:
         ae:9b:70:b1:d5:47:c6:7d:a4:92:54:aa:37:71:45:76:59:1d:
         ef:d0:0f:2e:c6:ea:15:2f:21:f5:0d:f8:34:8e:96:f9:f5:bd:
         27:a9:98:18:75:9c:9e:3c:87:d0:09:a9:a7:9b:6c:26:31:66:
         63:93:67:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:24:06 2025 by rpki-client