Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
File:                     gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft (raw, json)
Hash identifier:          Eg8ldX50GiLl5eJj3x+3h8aJLlWKDBpLDwRj53+eyJY=
Subject key identifier:   36:1C:95:16:84:0F:22:0D:F9:F3:7E:B6:E4:5B:F4:54:C2:5A:69:07
Authority key identifier: 81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE
Certificate issuer:       /CN=A919D08A/serialNumber=816A478D86E7E21BF3178510B8585325583430EE
Certificate serial:       012D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
Manifest number:          012C
Signing time:             Sun 15 Jun 2025 03:44:18 +0000
Manifest this update:     Sun 15 Jun 2025 03:44:17 +0000
Manifest next update:     Sun 22 Jun 2025 03:44:17 +0000
Files and hashes:         1: gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl (hash: B3NBhgsCDZBO/WA5qVgo7bydRcOCU9H6sULDekQGvPU=)
                          2: 2DBBD9E2788D11EEA502B350C4F9AE02.roa (hash: OAmPRTah7XdC92cyaOL1VT2tDGpsaJQwQAJo+nqjJlo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl
                          rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D08A, serialNumber=816A478D86E7E21BF3178510B8585325583430EE
        Validity
            Not Before: Jun 15 03:44:17 2025 GMT
            Not After : Jun 22 03:44:17 2025 GMT
        Subject: CN=684e4191-960f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:03:20:50:ee:69:a1:05:b7:00:9d:36:0d:a2:
                    61:8a:de:35:46:60:22:96:1b:d0:89:27:27:83:25:
                    77:8f:f2:42:9c:7f:eb:e1:63:55:f8:1f:f8:91:8a:
                    0a:da:8e:7d:36:b5:fe:ff:43:a9:74:3d:8e:c0:16:
                    44:27:81:df:b8:c6:db:6a:11:86:61:58:6e:47:79:
                    cd:65:0d:c6:a0:4b:d6:8f:54:b9:a6:bb:65:55:90:
                    fd:90:5b:ea:7b:eb:c7:28:82:48:40:c6:d5:1b:0b:
                    e5:9d:b4:10:8e:d9:68:b2:d8:97:20:1b:c3:da:25:
                    20:2e:0d:3d:74:74:6c:ad:94:6d:51:98:f9:c5:5d:
                    fa:6d:b7:5a:94:8c:7f:d9:fd:7a:3d:06:7c:70:e7:
                    1c:49:fd:59:8d:48:90:e7:86:2f:46:78:4c:75:53:
                    9e:1d:05:10:0c:d2:4c:e0:16:ce:f5:e6:6f:35:32:
                    eb:29:72:5a:4a:71:97:6e:62:5a:e1:a6:3c:2e:75:
                    52:8e:86:4c:b7:51:ec:f9:7b:cc:c8:50:76:21:a0:
                    29:e1:8e:6a:3b:08:29:64:5d:68:64:b6:5e:9d:c8:
                    10:a4:24:eb:e5:f1:be:39:60:42:59:69:48:75:72:
                    0b:75:0a:c1:4e:ac:39:8c:15:40:e0:b1:ae:5d:78:
                    02:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1C:95:16:84:0F:22:0D:F9:F3:7E:B6:E4:5B:F4:54:C2:5A:69:07
            X509v3 Authority Key Identifier:
                keyid:81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:4b:63:fa:df:85:60:e2:bc:2d:b6:14:a0:fa:09:fa:92:9f:
         f0:fd:80:f0:3d:ac:19:b0:14:c1:f6:97:fc:1c:49:95:cb:6d:
         27:a5:1c:a5:11:49:a0:3b:14:ab:ce:cb:4d:2e:8a:24:c1:4a:
         2c:21:c7:37:70:c3:b8:30:f4:63:be:49:ff:7b:30:1c:53:64:
         8c:ed:58:f3:d8:23:d8:d2:a4:34:1e:d5:1c:22:67:97:07:e5:
         14:35:64:29:4c:f9:bb:26:98:02:91:d8:a7:32:40:23:ee:e2:
         11:9a:ab:f2:49:bd:b8:08:60:0a:21:8c:ef:b0:8d:ea:cd:22:
         93:a0:24:c0:ae:05:96:b0:37:b5:e2:d6:83:f9:6a:ff:59:7d:
         07:46:a7:14:68:cf:7f:f4:8b:e9:ce:a6:19:ff:6e:34:86:0b:
         fd:7d:7a:24:11:6b:75:8a:6d:6f:02:17:40:80:05:2d:62:20:
         e1:fe:6b:37:2d:c8:a9:58:a8:da:b6:0c:81:83:e1:35:90:93:
         4f:45:f5:1a:42:36:3d:db:89:0e:e4:ad:b5:a4:66:44:3c:34:
         93:b8:54:e0:ba:de:47:e8:78:a2:65:10:26:1d:53:28:d4:14:
         12:4b:04:74:76:1f:a6:9d:dd:97:be:8d:13:14:c7:69:d6:12:
         f3:ff:ce:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:07:33 2025 by rpki-client