Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
File:                     gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft (raw, json)
Hash identifier:          H3i6jINDDRDOC5GWCAdACUptcfF3HTNKPhycOk9tMfE=
Subject key identifier:   82:FF:FE:8A:3A:60:05:CB:1E:88:67:2E:52:99:08:A8:C6:BB:DE:FD
Authority key identifier: 80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00
Certificate issuer:       /CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500
Certificate serial:       0638
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
Manifest number:          060E
Signing time:             Thu 12 Jun 2025 22:32:41 +0000
Manifest this update:     Thu 12 Jun 2025 22:32:41 +0000
Manifest next update:     Thu 19 Jun 2025 22:32:41 +0000
Files and hashes:         1: gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl (hash: edE9Gy5wOjUXAYN8lMOJSu61I/x2RE7ARI0dbbbePCk=)
                          2: A6C94076624711EC9B815772C4F9AE02.roa (hash: XosrUy+Xd/y9+zlNKWBW88xmxi0w+unp/BWLX4a8k/0=)
                          3: 86F4D41881C811ECB5F90D48C4F9AE02.roa (hash: jcE65YGPbY23C0JRfHdMvEfT+xppldiedci4zrgXKQc=)
                          4: 899A5138691611EFBED13942C4F9AE02.roa (hash: VYrhe6Mi0RTaO+P8HqkxU1Qva61wirf2XWWIcdNAN4k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl
                          rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 22:32:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1592 (0x638)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175155, serialNumber=80084A34FD4F3B932C092182407B8905D9406500
        Validity
            Not Before: Jun 12 22:32:41 2025 GMT
            Not After : Jun 19 22:32:41 2025 GMT
        Subject: CN=684b5589-da25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6e:15:6c:c1:20:69:1e:b7:4c:1f:24:71:c1:
                    41:1a:7c:68:be:b9:8b:9f:1f:e7:dc:c6:b6:70:aa:
                    16:ef:3e:c1:1b:97:7c:4b:73:66:be:2e:32:43:68:
                    cf:77:47:e5:5e:cd:18:1e:99:84:a4:28:cc:82:a6:
                    8e:2c:00:7e:52:4a:66:f3:ab:40:73:8a:a9:91:13:
                    48:d2:cc:ee:c4:9f:19:fd:0c:3e:75:6b:87:38:7c:
                    cf:56:79:e0:88:bf:3e:05:fe:98:09:1f:f7:7e:e2:
                    b8:9e:3c:10:ec:c6:f9:bb:78:06:94:dc:9b:87:55:
                    b7:b5:ac:61:ce:35:a7:01:a8:5e:18:eb:cf:10:0c:
                    fc:d4:f9:26:d9:c2:d7:b8:11:b8:81:7d:af:c5:14:
                    41:d8:7c:dd:8f:a3:c1:c8:bd:32:01:ba:14:09:7a:
                    0c:84:56:51:8d:aa:d6:0d:f6:66:ae:ed:9b:4f:97:
                    43:46:9c:61:c9:b3:f6:79:9c:9b:9b:b8:65:4a:55:
                    0e:d9:b0:3a:5c:42:35:7b:19:4d:58:46:b0:8a:9c:
                    b8:9c:36:48:79:b8:a4:3d:6a:2e:f1:ea:86:9d:51:
                    af:28:40:ec:66:8e:ba:e8:79:e1:88:84:c4:93:45:
                    4f:aa:bc:1b:f2:99:7d:06:af:d1:99:f6:b3:f7:74:
                    d9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:FF:FE:8A:3A:60:05:CB:1E:88:67:2E:52:99:08:A8:C6:BB:DE:FD
            X509v3 Authority Key Identifier:
                keyid:80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:c7:24:1e:17:56:ae:5a:3d:e9:83:7c:53:84:f7:06:10:85:
         ab:f0:ab:7b:26:5c:75:db:8c:25:7f:00:bc:15:5d:b6:83:d2:
         37:c4:5a:25:44:cf:fe:83:4e:10:f5:a6:d9:5d:88:4f:38:c5:
         31:be:34:c1:a3:08:10:c0:de:2b:ae:46:a2:27:64:9b:ba:0f:
         1d:b4:58:30:8b:0c:d6:08:ff:ee:c1:28:95:c5:98:f7:b2:2e:
         65:8b:f8:d8:fe:95:4a:3e:94:5e:cc:49:89:8b:b2:53:3a:f0:
         10:50:c2:a1:73:f5:1a:e8:d2:d1:dd:4e:4a:25:f9:04:96:d9:
         e7:46:07:18:46:a7:bb:73:c3:30:fb:34:5c:41:6d:fc:2e:19:
         a8:8c:f0:97:9b:af:d0:95:e4:2e:f4:fa:7b:74:1a:02:a0:ee:
         0e:2d:12:d0:03:a5:f1:dc:62:23:75:d2:68:e7:c5:4e:29:38:
         a5:16:10:61:dd:b9:40:bb:9c:e9:c8:61:12:f2:59:ea:e6:50:
         15:c2:e2:9a:84:9e:ad:e3:f7:8c:1d:ac:97:56:4d:e1:e1:0c:
         05:a2:92:d2:44:c8:48:03:2c:0c:e1:33:dd:52:27:f9:2b:8a:
         9e:10:96:7d:68:a7:29:ee:bc:a8:b6:af:7b:ee:b5:be:89:9a:
         6b:e5:03:a3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzUxNTUxMTAvBgNVBAUTKDgwMDg0QTM0RkQ0RjNCOTMyQzA5MjE4MjQwN0I4OTA1
RDk0MDY1MDAwHhcNMjUwNjEyMjIzMjQxWhcNMjUwNjE5MjIzMjQxWjAYMRYwFAYD
VQQDEw02ODRiNTU4OS1kYTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxG4VbMEgaR63TB8kccFBGnxovrmLnx/n3Ma2cKoW7z7BG5d8S3Nmvi4yQ2jP
d0flXs0YHpmEpCjMgqaOLAB+Ukpm86tAc4qpkRNI0szuxJ8Z/Qw+dWuHOHzPVnng
iL8+Bf6YCR/3fuK4njwQ7Mb5u3gGlNybh1W3taxhzjWnAaheGOvPEAz81Pkm2cLX
uBG4gX2vxRRB2Hzdj6PByL0yAboUCXoMhFZRjarWDfZmru2bT5dDRpxhybP2eZyb
m7hlSlUO2bA6XEI1exlNWEawipy4nDZIebikPWou8eqGnVGvKEDsZo666HnhiITE
k0VPqrwb8pl9Bq/Rmfaz93TZLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIL//oo6
YAXLHohnLlKZCKjGu979MB8GA1UdIwQYMBaAFIAISjT9TzuTLAkhgkB7iQXZQGUA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE1NS8zNzQ0QjNDNEIw
MjgxMUVCOUQyNzg5MUFDNEY5QUUwMi9nQWhLTlAxUE81TXNDU0dDUUh1SkJkbEFa
UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dBaEtOUDFQTzVNc0NTR0NRSHVKQmRsQVpRQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTE1NS8zNzQ0QjNDNEIwMjgxMUVCOUQyNzg5MUFDNEY5QUUwMi9nQWhLTlAxUE81
TXNDU0dDUUh1SkJkbEFaUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCRxyQeF1auWj3pg3xThPcGEIWr8Kt7Jlx124wlfwC8FV22g9I3xFol
RM/+g04Q9abZXYhPOMUxvjTBowgQwN4rrkaiJ2Sbug8dtFgwiwzWCP/uwSiVxZj3
si5li/jY/pVKPpRezEmJi7JTOvAQUMKhc/Ua6NLR3U5KJfkEltnnRgcYRqe7c8Mw
+zRcQW38LhmojPCXm6/QleQu9Pp7dBoCoO4OLRLQA6Xx3GIjddJo58VOKTilFhBh
3blAu5zpyGES8lnq5lAVwuKahJ6t4/eMHayXVk3h4QwFopLSRMhIAywM4TPdUif5
K4qeEJZ9aKcp7ryotq977rW+iZpr5QOj
-----END CERTIFICATE-----
Generated at Sat Jun 14 18:19:10 2025 by rpki-client