Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
File:                     GWhCPtbSSViApWptsCvGcpjF5oY.mft (raw, json)
Hash identifier:          joNK+orpjncGurd7xJt0ZeOZGUoll1RJ8yGbZLJVU9A=
Subject key identifier:   14:86:70:05:B3:FD:14:04:B0:C8:9B:07:64:C3:F1:A9:E2:FE:DA:AA
Authority key identifier: 19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86
Certificate issuer:       /CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
Certificate serial:       107C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
Manifest number:          1062
Signing time:             Sat 14 Jun 2025 17:19:58 +0000
Manifest this update:     Sat 14 Jun 2025 17:19:58 +0000
Manifest next update:     Sat 21 Jun 2025 17:19:58 +0000
Files and hashes:         1: GWhCPtbSSViApWptsCvGcpjF5oY.crl (hash: Rq/gMXoWSdQKss4cWLJrtnMDJb+ktrXtZrNWEkUQ7yM=)
                          2: D4F3A2B4DBCD11EE9B6F4669C4F9AE02.roa (hash: EHJm/HiHyHS2wDLaVYk3k6uReoau+etZZWwlwm0AUaM=)
                          3: 2884888A717011E99BA2FB3DC4F9AE02.roa (hash: vyuDgVud8VeU+L1s3GBCpzmY/+n8YurORFgDE2x/P9Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl
                          rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 17:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4220 (0x107c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D3A9, serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
        Validity
            Not Before: Jun 14 17:19:58 2025 GMT
            Not After : Jun 21 17:19:58 2025 GMT
        Subject: CN=684daf3e-6732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6e:6f:61:e7:c4:53:7b:3e:7c:db:18:f6:44:
                    27:e9:1a:38:e0:f1:0b:f4:6e:af:6c:a8:36:04:b5:
                    88:75:84:a1:2c:14:ec:5e:fe:62:36:31:75:ed:fb:
                    f9:2f:e7:c8:ef:13:db:7b:c8:a6:c6:7f:42:af:0e:
                    97:95:f6:07:56:08:7d:21:07:4b:ba:c4:41:b5:19:
                    30:55:3f:96:a9:c0:56:69:ea:bf:59:c5:5a:8e:3f:
                    48:c3:ce:3b:18:b1:9b:0b:fb:e7:de:1d:80:16:6e:
                    01:95:d8:93:ac:04:f6:91:11:a8:53:24:47:01:9a:
                    6a:61:39:6f:a3:96:e6:4b:c5:c2:2c:1f:27:90:40:
                    14:e5:dc:ee:09:cf:88:ef:6c:29:0c:eb:ae:da:06:
                    72:a2:5c:46:15:db:a7:b4:ea:f1:5a:ae:bb:5b:a3:
                    56:2d:30:69:c2:6a:61:6f:96:6a:51:84:9e:22:2f:
                    a5:dd:9d:77:88:ef:1d:c5:56:ca:a1:06:aa:d4:1d:
                    41:8b:02:5c:78:99:87:ae:26:a3:1d:8f:52:1e:da:
                    29:7e:48:6a:25:84:1b:c8:36:ee:fe:f3:6d:dc:3d:
                    4e:22:7b:08:de:b3:c0:e9:1e:15:3a:fe:e9:97:ca:
                    25:e9:20:f0:38:af:61:c4:9b:1c:e5:73:2e:5e:a7:
                    63:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:86:70:05:B3:FD:14:04:B0:C8:9B:07:64:C3:F1:A9:E2:FE:DA:AA
            X509v3 Authority Key Identifier:
                keyid:19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:e5:de:dd:f1:97:71:a5:55:8d:5e:e2:2d:2f:47:4f:30:ca:
         d5:ac:6b:8c:30:a1:1b:af:8a:78:ca:46:8d:81:f8:18:95:08:
         22:bf:51:ed:0b:a4:13:24:e8:03:0b:86:4e:5e:be:78:ea:f6:
         b7:2e:54:f1:56:73:6b:f7:e9:5d:e0:ea:8b:b0:19:87:da:63:
         59:c7:81:19:83:9e:d9:3a:2f:69:c7:eb:2f:da:d0:0b:77:4a:
         a0:3a:42:9f:44:81:96:78:1e:7d:51:a6:34:b6:30:e6:22:12:
         4b:cd:fe:27:15:d1:64:38:b5:fc:28:22:ce:67:48:d3:7f:82:
         31:65:0e:80:45:90:88:12:a4:72:bd:07:cd:d7:26:4a:4f:d9:
         0d:76:cf:67:46:bc:fd:47:e6:f0:01:67:aa:8f:13:5e:ed:e9:
         91:b3:ca:13:3d:1f:f9:9c:5b:d8:ed:af:a2:55:29:04:67:d5:
         e2:9d:36:46:c5:35:b7:14:bc:a8:05:3d:61:42:54:67:88:7f:
         5f:e0:6e:82:fd:c2:21:69:c1:51:ed:59:01:e5:e5:39:7b:a3:
         02:2a:2d:42:3b:22:32:b7:3c:99:6d:a9:ed:c7:2c:05:87:45:
         9c:b6:77:67:17:e4:b9:48:27:4d:83:b2:1e:6f:fb:c3:04:0b:
         b4:53:b8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:36:53 2025 by rpki-client