Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5ED4/2A15F24034DC11E98B67B85EC4F9AE02/gUHVSVFieGXQZezgAAkR-g6k_60.mft
File:                     gUHVSVFieGXQZezgAAkR-g6k_60.mft (raw, json)
Hash identifier:          kFsfGM5Vg5PO2ZZRl4bIqZXfvCYW85agfarirmCaNLo=
Subject key identifier:   DF:D4:E9:A2:AE:0C:19:30:4E:90:2E:28:98:C9:91:D6:94:DF:10:EC
Authority key identifier: 81:41:D5:49:51:62:78:65:D0:65:EC:E0:00:09:11:FA:0E:A4:FF:AD
Certificate issuer:       /CN=A91D5ED4/serialNumber=8141D54951627865D065ECE0000911FA0EA4FFAD
Certificate serial:       1064
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUHVSVFieGXQZezgAAkR-g6k_60.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5ED4/2A15F24034DC11E98B67B85EC4F9AE02/gUHVSVFieGXQZezgAAkR-g6k_60.mft
Manifest number:          1057
Signing time:             Thu 24 Apr 2025 17:22:52 +0000
Manifest this update:     Thu 24 Apr 2025 17:22:52 +0000
Manifest next update:     Thu 01 May 2025 17:22:52 +0000
Files and hashes:         1: gUHVSVFieGXQZezgAAkR-g6k_60.crl (hash: irw5WcBYkedNlf6+rK1vVVr0FcXjcMBDMrwj5/ebwDI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5ED4/2A15F24034DC11E98B67B85EC4F9AE02/gUHVSVFieGXQZezgAAkR-g6k_60.crl
                          rsync://rpki.apnic.net/member_repository/A91D5ED4/2A15F24034DC11E98B67B85EC4F9AE02/gUHVSVFieGXQZezgAAkR-g6k_60.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUHVSVFieGXQZezgAAkR-g6k_60.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 17:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4196 (0x1064)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5ED4, serialNumber=8141D54951627865D065ECE0000911FA0EA4FFAD
        Validity
            Not Before: Apr 24 17:22:52 2025 GMT
            Not After : May  1 17:22:52 2025 GMT
        Subject: CN=680a736c-aa8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:88:84:f6:bd:44:61:6b:bc:59:1a:c6:34:6e:
                    5c:c3:13:21:43:be:bc:0d:0e:43:1b:86:3b:42:d7:
                    15:31:09:8a:be:30:74:c9:2e:c4:35:1a:77:7c:75:
                    af:ac:40:e0:64:12:28:61:57:17:c2:ca:6f:50:77:
                    a1:9d:2c:80:35:a6:4a:1c:a2:c3:9f:1a:04:86:26:
                    92:0b:f0:bf:54:20:21:b9:29:1a:dc:20:21:5f:7c:
                    72:ec:4c:94:20:1e:55:16:ac:bf:90:bb:18:9f:be:
                    d2:86:9b:48:22:97:4b:d1:e5:90:e7:e9:13:37:b4:
                    99:a2:6d:c4:6d:d6:d3:ec:61:d5:a3:b9:0a:92:68:
                    09:7f:8c:1e:9e:80:a4:a8:03:16:6e:4b:db:1f:39:
                    ff:0b:1f:7c:0e:10:55:54:9e:81:7e:6a:6f:30:08:
                    17:d3:7a:1e:f5:75:e3:eb:9d:f0:94:4e:88:79:f4:
                    0c:24:0a:ce:2f:55:08:3d:43:85:1f:f6:7a:e0:07:
                    95:81:80:e1:38:52:c9:6c:37:64:cb:0c:17:57:1c:
                    d2:2f:48:4f:b8:da:f5:6b:79:c9:cf:30:c5:2a:d6:
                    d5:a5:63:ff:83:6e:cf:f7:75:15:f7:1b:30:16:f6:
                    7a:e9:e4:e2:7e:b1:9a:f2:88:59:f0:14:0d:bc:91:
                    26:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D4:E9:A2:AE:0C:19:30:4E:90:2E:28:98:C9:91:D6:94:DF:10:EC
            X509v3 Authority Key Identifier:
                keyid:81:41:D5:49:51:62:78:65:D0:65:EC:E0:00:09:11:FA:0E:A4:FF:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5ED4/2A15F24034DC11E98B67B85EC4F9AE02/gUHVSVFieGXQZezgAAkR-g6k_60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUHVSVFieGXQZezgAAkR-g6k_60.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5ED4/2A15F24034DC11E98B67B85EC4F9AE02/gUHVSVFieGXQZezgAAkR-g6k_60.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:2e:3a:83:66:67:0c:33:24:62:98:d9:18:e2:2f:33:9f:aa:
         b5:32:7f:59:43:db:69:c3:05:36:a2:8c:26:fc:b7:93:70:d4:
         6d:df:1f:92:c0:19:c2:63:00:99:f7:dc:24:e2:de:d4:53:41:
         25:a0:f5:e2:2a:64:15:78:7f:2e:be:5e:b0:22:1d:4c:72:4e:
         80:23:99:dc:0e:8b:95:87:ed:47:7e:49:be:cc:95:77:37:a5:
         a9:12:09:78:0a:8f:16:c8:95:8f:7f:5c:b4:8d:ef:a6:ca:01:
         96:ba:51:79:07:b0:be:71:29:d5:60:a8:67:a9:c2:60:cb:c7:
         07:ae:98:39:65:41:d3:e9:cc:e4:85:45:9a:9b:dc:ed:5d:b5:
         f4:fc:47:e6:7d:17:d8:4b:13:3b:b8:0d:d0:05:94:30:1d:14:
         2f:6f:54:23:7b:47:ed:ee:75:96:ad:a1:c6:84:de:96:d5:b3:
         5a:65:22:0a:69:40:a7:54:cf:81:75:2a:08:ed:87:77:57:95:
         00:29:14:82:5d:c8:c2:de:b8:51:13:75:f3:28:59:d3:62:cb:
         f1:e1:bb:85:1b:81:dc:7c:14:78:8a:a7:d8:91:40:13:9e:25:
         ee:23:49:09:6f:90:cb:df:3d:e2:89:89:14:69:d5:8e:6d:0f:
         41:dd:0a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:03:12 2025 by rpki-client