Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
File:                     Gra655Oriqyjv9ZsbCmwrVED8JA.mft (raw, json)
Hash identifier:          mDDJ6gmA64L1A5ifo+y1t1WZd9ZMVv6bkZz84Qc7h+w=
Subject key identifier:   40:20:EC:5F:76:3E:FC:4F:4D:4C:03:14:88:FA:D1:0E:B4:66:7C:7C
Authority key identifier: 1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90
Certificate issuer:       /CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090
Certificate serial:       0178
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
Manifest number:          0171
Signing time:             Fri 25 Apr 2025 03:00:45 +0000
Manifest this update:     Fri 25 Apr 2025 03:00:45 +0000
Manifest next update:     Fri 02 May 2025 03:00:45 +0000
Files and hashes:         1: Gra655Oriqyjv9ZsbCmwrVED8JA.crl (hash: 9TotBKSjiJnKEut8Fob9Nfx0+fTMGWvHqbHkC0J2w0E=)
                          2: 1C46B158029711EEB8410455C4F9AE02.roa (hash: F7gDTN0o2wOD506HIpMLfgl8UeSu5eT6/M2YdzZQ6qI=)
                          3: 760E95F6C6AA11EFAAE05A0EC4F9AE02.roa (hash: LuIHHuX142jXKv6AN/EbnGBFnLwj6AprExe3Q9LB8Kc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl
                          rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185896, serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090
        Validity
            Not Before: Apr 25 03:00:45 2025 GMT
            Not After : May  2 03:00:45 2025 GMT
        Subject: CN=680afadd-6ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e7:d0:20:ed:e7:2f:c0:c6:51:92:8b:eb:3b:
                    39:c2:15:80:51:64:80:00:c1:f9:46:2a:f6:d5:33:
                    fd:c0:11:5d:74:44:6e:d6:b3:1a:50:9c:d4:11:68:
                    06:69:b3:55:06:e4:75:ac:a6:52:07:b7:81:3b:a3:
                    d7:48:5e:76:1c:32:81:56:1a:eb:42:17:e0:9d:fe:
                    e6:93:1e:b7:4e:bc:a4:96:bb:ea:e0:dd:1b:2a:15:
                    ca:81:e0:bd:4d:61:a1:4b:7a:38:48:73:91:f4:19:
                    ec:90:8c:9b:5e:02:ef:9b:66:8f:25:24:0e:b9:02:
                    7e:01:36:84:d2:b2:fc:27:57:a9:92:11:74:c1:66:
                    45:0d:6e:f4:6c:15:d3:c7:b7:c3:04:a7:9d:51:49:
                    2f:33:86:a4:5c:6b:c4:dc:b9:f2:64:1f:a3:e5:21:
                    ba:7c:30:d9:00:08:81:7b:a5:69:17:00:51:08:b3:
                    20:ec:2a:02:d4:3b:b6:64:2a:21:27:ed:ae:f8:14:
                    f5:f5:9d:13:b4:7b:dd:98:85:63:ad:11:57:01:fe:
                    c8:2d:ed:55:af:ae:6d:0d:30:17:be:87:de:2c:35:
                    c1:86:4e:6e:62:74:0c:72:fa:1f:09:ef:48:ff:dd:
                    c8:77:5a:92:f2:8b:92:15:3e:5a:00:b6:cc:44:4b:
                    ae:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:20:EC:5F:76:3E:FC:4F:4D:4C:03:14:88:FA:D1:0E:B4:66:7C:7C
            X509v3 Authority Key Identifier:
                keyid:1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:6e:af:c3:be:9f:7d:54:6e:12:1e:24:39:a9:4c:7d:99:a8:
         75:22:b7:f4:ec:23:84:9e:9a:84:b1:cb:0c:f4:e6:fe:05:e9:
         10:6c:7d:97:f1:d1:1e:cd:72:c0:38:54:fb:9b:26:b0:01:24:
         a8:9e:b6:d8:00:b7:51:60:6b:7f:7f:d0:2a:73:47:7b:69:41:
         c9:9b:db:2b:8d:57:62:46:44:63:c5:e1:cb:8f:8d:ea:00:23:
         a1:e1:9d:c4:4d:0e:4a:35:f3:a5:ee:18:2c:c1:94:b0:b6:e3:
         56:b6:f7:36:c0:c0:5f:e4:2f:66:68:95:6d:29:e3:e3:21:4d:
         8f:ea:da:82:28:bc:47:5f:0f:9b:94:34:1f:76:72:82:e0:20:
         34:fa:3a:c9:b3:58:14:18:db:a2:7c:fd:66:4b:35:9d:28:4e:
         0f:c1:32:8b:32:8e:59:d1:ca:b3:20:39:97:d7:cc:f2:89:2e:
         85:22:1a:95:a1:9f:93:4d:2e:d8:e4:9a:1b:e2:99:b8:18:41:
         33:40:f7:23:5e:d3:81:8a:23:d3:4b:19:4a:c7:a9:a0:85:e4:
         90:35:e7:a9:07:0d:5c:b5:27:bd:f4:ac:86:f7:51:f5:ad:79:
         a7:43:c3:87:cf:33:b4:9f:e3:47:e3:49:bb:dd:23:c9:5d:dd:
         50:33:50:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:28:11 2025 by rpki-client