Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft
File:                     gopH06xuawNgEcIzIxcKlzG60iQ.mft (raw, json)
Hash identifier:          zc2rV0QIftep223x0YYGMu5nTJisCfJjAL+31G94YXY=
Subject key identifier:   BD:ED:95:8B:4E:B1:C0:CD:6F:C3:78:C5:0B:91:52:D9:9A:49:BB:F7
Authority key identifier: 82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24
Certificate issuer:       /CN=A91C55CE/serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
Certificate serial:       8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft
Manifest number:          7D
Signing time:             Fri 25 Apr 2025 05:59:30 +0000
Manifest this update:     Fri 25 Apr 2025 05:59:29 +0000
Manifest next update:     Fri 02 May 2025 05:59:29 +0000
Files and hashes:         1: gopH06xuawNgEcIzIxcKlzG60iQ.crl (hash: 9rWo1phUC70hzJ/IEILs8Ruc/lClZRtgXqgJUI01jo0=)
                          2: 18A198D6087811F0B8AC634AC4F9AE02.roa (hash: oqinOi8moaoFqyCfzBAbwlb1e686lLvKeGMVa6JkZPQ=)
                          3: D83A0A7E1DAF11F0B2131B09C4F9AE02.roa (hash: 919/QrkbKK7KbwR685ZBie0PZUotLL4IkEQTf5I8BR0=)
                          4: CA79E350BF6D11EF9730D429C4F9AE02.roa (hash: mcdJMOUjsrYKOdvCk8ygrPicEK3lHYQ2f0C8eBymCfE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 05:59:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C55CE, serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
        Validity
            Not Before: Apr 25 05:59:29 2025 GMT
            Not After : May  2 05:59:29 2025 GMT
        Subject: CN=680b24c2-c79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e7:45:3e:53:a7:01:2d:fe:ec:8e:a7:fd:f3:
                    f4:5d:8f:ea:f0:36:3a:49:eb:40:6b:a3:bb:e9:a3:
                    ff:51:38:91:8a:fd:5d:26:a9:b9:ce:24:66:ad:3b:
                    18:e7:a6:2b:47:a8:f1:34:47:6a:fa:21:98:f3:04:
                    8c:a2:63:60:68:85:d8:41:2b:fd:63:1b:f9:15:7d:
                    38:e8:8f:d2:f7:8c:4d:ed:cc:c3:95:09:8c:ea:d2:
                    1f:f0:41:0d:93:ac:1d:cb:7c:eb:b1:6a:6e:15:16:
                    ac:f2:7f:0b:03:1e:ca:fb:2b:17:1d:0c:00:40:11:
                    cf:f2:08:a3:be:c2:d9:1d:65:bd:ec:16:a4:3e:a4:
                    93:d9:78:02:52:70:df:00:91:10:8b:fa:d1:7f:77:
                    88:98:4d:04:61:ab:e0:0e:e0:68:2d:83:c6:9e:19:
                    71:24:47:df:97:b0:19:34:34:a3:71:d0:ea:d0:06:
                    44:4a:20:93:51:d4:ca:f0:d5:62:23:47:ca:5b:41:
                    78:ea:ae:d6:2c:ea:87:43:8d:64:9e:49:bc:b1:fe:
                    b2:85:fb:33:8e:33:c7:33:66:56:91:ff:f2:8f:fb:
                    39:66:1d:2c:97:b4:49:b7:2a:d8:85:c5:76:22:39:
                    60:1f:5f:79:5a:b9:2d:d8:f3:91:e6:57:1c:24:1d:
                    5b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:ED:95:8B:4E:B1:C0:CD:6F:C3:78:C5:0B:91:52:D9:9A:49:BB:F7
            X509v3 Authority Key Identifier:
                keyid:82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:30:f9:74:ff:7e:28:ba:a0:b2:48:45:0b:dd:df:45:e2:81:
         54:f3:21:19:d1:b5:02:36:09:0f:e7:38:b7:22:d9:f1:85:47:
         b7:eb:aa:a4:33:97:68:7b:a3:0f:ae:13:96:95:57:f3:c7:d4:
         42:c2:0f:c9:c1:47:16:e4:5c:aa:ed:b1:53:db:54:49:0c:fc:
         3b:c7:13:17:9b:67:39:24:f0:e3:3b:5d:b0:e9:e5:9d:99:71:
         40:ac:22:b5:05:fb:11:f4:1c:e6:77:79:09:be:70:9d:86:04:
         01:47:1a:bd:c7:f5:7e:d2:ad:e3:d1:7a:49:9d:a2:af:e2:d2:
         9b:e3:cb:e0:c1:9a:77:a5:a1:c5:15:47:92:ba:cd:84:bd:27:
         e0:0d:89:27:b7:7c:a9:c2:b6:ab:ef:4a:b6:f8:56:7d:d5:9c:
         2f:87:19:ee:cf:b4:0c:56:5d:6a:01:b3:4a:fb:d5:88:f6:87:
         38:83:90:96:3d:7d:16:67:3d:01:06:2f:a5:e4:ea:ec:a1:0e:
         ec:bb:9c:e8:82:96:99:9d:a1:f6:d5:60:d9:04:d2:9c:53:56:
         99:f2:98:26:11:d1:83:3d:c8:cb:75:ce:0c:a9:91:6f:bf:8a:
         6a:b7:7f:63:12:16:ea:6c:63:70:af:e2:83:ac:b8:fa:6d:0a:
         46:93:14:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:01:08 2025 by rpki-client