Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft
File:                     gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft (raw, json)
Hash identifier:          5Ks8SAjVlOF24qdJaUA3lM8a2XjAZCykTXw69yUr+ms=
Subject key identifier:   08:C6:B7:E7:89:14:A9:1A:04:40:EC:6C:15:46:F3:0B:A8:B8:4F:05
Authority key identifier: 81:FF:85:EC:AE:CC:53:DB:74:53:08:60:71:45:59:B7:E5:18:45:41
Certificate issuer:       /CN=A9110724/serialNumber=81FF85ECAECC53DB74530860714559B7E5184541
Certificate serial:       013F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft
Manifest number:          0137
Signing time:             Sat 29 Mar 2025 03:57:55 +0000
Manifest this update:     Sat 29 Mar 2025 03:57:55 +0000
Manifest next update:     Sat 05 Apr 2025 03:57:55 +0000
Files and hashes:         1: gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl (hash: dKIwTKafASuB6pDCPIGZQtB9edakyqIKkFunyDvcDnw=)
                          2: A1861B9A998E11EEBD3C815CC4F9AE02.roa (hash: nHROj80zbbVn2fC+9G1lpLSWVwTbw64VZhVPZYK842c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl
                          rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 03:57:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110724
        Validity
            Not Before: Mar 29 03:57:55 2025 GMT
            Not After : Apr  5 03:57:55 2025 GMT
        Subject: CN=67e76fc3-502e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f5:ee:d7:92:2b:65:6b:1b:d7:a4:3e:33:64:
                    f8:3b:68:2b:b1:37:1c:81:05:1f:76:c2:3e:37:72:
                    dd:d2:7a:33:0f:b8:f6:7e:31:30:d6:eb:ba:04:b3:
                    df:7a:d7:db:ef:80:2a:fd:5a:24:9f:1f:8e:66:6d:
                    41:45:7c:71:c4:8b:83:c3:3a:9f:7b:4c:0c:b2:c5:
                    42:f7:2c:45:6e:37:dd:ec:5d:cc:ae:54:9d:a0:69:
                    a2:7c:b9:31:eb:08:f1:34:cb:a2:f1:13:d6:09:dd:
                    18:72:5f:d0:10:f8:b0:f0:49:a5:f4:e3:7d:75:42:
                    a5:7d:67:a7:ba:ed:4b:d6:0d:1c:8a:ad:d5:67:df:
                    33:a4:49:fa:8c:50:7e:99:ff:27:06:b2:31:0e:dd:
                    36:3c:4e:2d:bc:19:f4:61:76:0a:07:4b:7d:be:43:
                    97:0f:48:98:a1:41:94:82:de:ce:a0:bd:a9:60:0f:
                    46:46:de:6a:f6:7c:0a:f5:cf:04:7d:90:0d:ce:65:
                    a1:12:9f:54:85:aa:c7:fc:28:08:4b:ce:8f:86:5a:
                    a0:bc:ae:74:51:23:5b:5d:ce:ad:af:f7:ee:02:d6:
                    d9:ae:42:a8:f5:5d:cf:21:00:48:de:71:e2:db:d8:
                    06:e6:29:da:ec:bb:93:02:27:0b:16:e2:7c:be:f4:
                    06:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C6:B7:E7:89:14:A9:1A:04:40:EC:6C:15:46:F3:0B:A8:B8:4F:05
            X509v3 Authority Key Identifier:
                keyid:81:FF:85:EC:AE:CC:53:DB:74:53:08:60:71:45:59:B7:E5:18:45:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ca:1a:58:09:84:07:b3:7c:a8:b4:d1:d8:44:fe:8f:03:e0:
         67:a3:9a:96:05:b6:81:2d:7f:a0:5a:dd:e3:81:90:8f:2b:10:
         b4:6b:6f:e8:44:15:52:d8:f0:4c:da:43:51:b9:fd:2b:7b:e1:
         f9:39:2d:31:34:a5:8d:70:5e:72:19:44:f9:91:6e:6e:dc:6f:
         0c:6a:f5:df:5d:61:b3:a5:ad:dc:e8:d8:48:9c:a7:b8:5e:0f:
         88:d2:10:66:ca:65:a3:18:32:96:ac:9b:14:6f:7d:41:84:61:
         8c:09:b9:6b:76:8e:72:cf:68:57:f0:98:8d:d5:2b:c3:fd:af:
         8a:09:d1:ed:ec:f4:74:9c:64:0b:62:32:30:d6:5f:5c:65:0d:
         a2:31:7b:71:b0:b2:c9:e0:99:f9:82:09:41:31:9b:52:10:f1:
         ac:c5:19:36:58:bd:52:5b:8a:70:90:4d:2a:70:ab:72:3d:5e:
         41:c7:b3:c2:51:a0:86:4b:72:b5:ad:d1:f6:2e:dc:28:56:62:
         5b:c8:75:13:05:57:a9:ac:b8:23:50:13:17:9a:54:6e:1c:70:
         30:11:21:c2:5b:97:00:82:6c:64:d1:b0:39:5e:09:09:e7:de:
         b8:8c:1b:a9:b8:f3:63:63:0c:04:10:4a:09:76:54:0e:a3:00:
         63:00:93:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:23 2025 by rpki-client