Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft
File:                     G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft (raw, json)
Hash identifier:          IKyF9EEcDW5HgB5gqdyX/TmgpBk2GV4JH7lt5GLnFvs=
Subject key identifier:   3A:0B:4C:A4:47:15:95:63:F8:E5:D9:5B:F4:9F:A0:2B:27:EB:24:7D
Authority key identifier: 1B:A0:51:DA:19:3C:01:31:B6:1A:0A:78:80:6E:2F:37:86:CE:D0:C1
Certificate issuer:       /CN=A9188811/serialNumber=1BA051DA193C0131B61A0A78806E2F3786CED0C1
Certificate serial:       D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft
Manifest number:          D1
Signing time:             Fri 25 Apr 2025 04:45:42 +0000
Manifest this update:     Fri 25 Apr 2025 04:45:41 +0000
Manifest next update:     Fri 02 May 2025 04:45:41 +0000
Files and hashes:         1: G6BR2hk8ATG2Ggp4gG4vN4bO0ME.crl (hash: FSwtDhar6fErRHEU9is4X2uqahiAVq41vlXFgNcHW9o=)
                          2: B51FD00AE82711EEB8A9D24FC4F9AE02.roa (hash: VsEm8vkeUxVmjFaDf2wLiIOtj6XxGobBBThvNJ5OEPw=)
                          3: 9E132FF6E82711EEA7DD994FC4F9AE02.roa (hash: pBY1RBpmPShywgSF0cFV/FNZ8xmqm9DQJLZjg8FKxQs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.crl
                          rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 04:45:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188811, serialNumber=1BA051DA193C0131B61A0A78806E2F3786CED0C1
        Validity
            Not Before: Apr 25 04:45:41 2025 GMT
            Not After : May  2 04:45:41 2025 GMT
        Subject: CN=680b1376-ffec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:54:c3:fa:47:37:7a:1f:a4:8e:33:0f:a1:bb:
                    4e:93:a4:a3:b8:19:4e:a2:ea:33:17:8b:88:31:bf:
                    2f:7c:8d:37:42:36:7c:44:5c:04:03:94:b4:30:2e:
                    42:79:6f:5a:42:21:ad:e5:e1:02:07:bb:d8:b1:62:
                    d4:57:5f:f0:25:c7:ab:0a:41:45:60:d2:21:a3:bc:
                    27:2f:af:71:78:14:c6:59:4b:78:96:69:c1:3b:9f:
                    e7:71:06:6b:3e:a8:0b:18:df:e9:cc:e0:52:84:4d:
                    82:ff:87:f8:62:b9:e6:1d:67:21:2f:b6:f1:74:b6:
                    12:15:11:48:54:5b:5e:68:b4:a9:e5:06:5e:53:49:
                    37:32:2d:5e:bc:22:b1:1a:55:8c:d7:fe:98:bb:d6:
                    89:68:b4:af:83:04:be:c2:56:52:56:2e:1b:5d:6c:
                    d2:d4:f6:e8:64:df:23:05:78:33:95:f9:b9:6b:3d:
                    bd:20:82:77:d8:c5:3f:51:e7:c2:1f:04:e3:22:08:
                    7f:5b:e2:eb:b2:46:35:91:48:db:4b:9b:c5:0e:79:
                    e1:81:ad:56:63:f3:b5:ac:56:f5:6b:c1:20:ca:7f:
                    e1:82:c8:0e:8b:bd:f5:db:b5:a3:a4:5c:ff:8d:07:
                    8f:9c:22:14:40:19:a9:6b:74:07:41:8c:e9:b3:ca:
                    58:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0B:4C:A4:47:15:95:63:F8:E5:D9:5B:F4:9F:A0:2B:27:EB:24:7D
            X509v3 Authority Key Identifier:
                keyid:1B:A0:51:DA:19:3C:01:31:B6:1A:0A:78:80:6E:2F:37:86:CE:D0:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:4d:a6:a9:ff:54:14:37:16:99:b1:eb:cb:87:e4:a2:76:1a:
         8f:36:61:0a:21:ee:9d:8d:15:41:c6:11:46:61:fe:d2:a1:34:
         82:c6:d7:8b:0f:37:9c:10:77:ea:96:d9:9e:07:c6:e0:89:82:
         f7:d8:43:e6:b1:8c:3e:38:d7:4d:6a:f7:22:aa:35:b4:d0:11:
         49:94:37:9f:00:9e:00:64:cd:25:62:56:8f:fd:ba:c8:11:fe:
         43:6b:2a:ae:09:64:55:12:e9:5b:c1:92:66:3b:0e:10:fd:d3:
         13:78:14:b4:28:8f:c2:86:47:67:78:7b:57:f9:33:6c:22:0c:
         d6:c8:ff:b3:a7:a4:3e:93:66:46:83:7e:16:60:a4:54:5a:1a:
         e3:96:65:04:e6:be:4e:22:c4:f0:1b:1a:1d:c2:65:e5:c7:67:
         1d:68:28:63:71:ab:76:5a:9f:53:a7:18:2c:90:41:7a:78:ec:
         47:22:5a:2c:7b:d2:7d:80:37:94:0f:59:ba:86:d0:ee:f2:8d:
         6b:d3:f1:ac:9f:32:7a:21:9d:59:30:43:f3:0a:57:2a:59:97:
         ae:d7:ed:28:38:6c:eb:8d:ed:f9:dd:6a:e3:d5:ee:d3:53:00:
         6f:96:48:0c:dc:07:cc:47:56:34:b6:b3:82:9f:5d:bd:0a:b0:
         98:a9:7c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:02:34 2025 by rpki-client