Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft
File:                     gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft (raw, json)
Hash identifier:          2kOzH6Vm7Bjsn54NNnWfOkCmYLb2Q3hkOYjglRG7GXw=
Subject key identifier:   4A:08:36:1A:D0:D2:47:9F:AC:52:A9:E2:16:93:5F:B8:49:93:2C:0B
Authority key identifier: 81:FF:85:EC:AE:CC:53:DB:74:53:08:60:71:45:59:B7:E5:18:45:41
Certificate issuer:       /CN=A9110724/serialNumber=81FF85ECAECC53DB74530860714559B7E5184541
Certificate serial:       0177
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft
Manifest number:          016F
Signing time:             Sat 19 Jul 2025 04:05:13 +0000
Manifest this update:     Sat 19 Jul 2025 04:05:13 +0000
Manifest next update:     Sat 26 Jul 2025 04:05:13 +0000
Files and hashes:         1: gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl (hash: gSskRS8fkGMbr0yfyRRtTMNble9Uwk0NVv46/mE+d2Y=)
                          2: A1861B9A998E11EEBD3C815CC4F9AE02.roa (hash: nHROj80zbbVn2fC+9G1lpLSWVwTbw64VZhVPZYK842c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl
                          rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 04:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110724, serialNumber=81FF85ECAECC53DB74530860714559B7E5184541
        Validity
            Not Before: Jul 19 04:05:13 2025 GMT
            Not After : Jul 26 04:05:13 2025 GMT
        Subject: CN=687b1979-cbb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:02:98:65:42:d2:48:1f:2a:74:11:b9:3e:75:
                    40:25:80:78:36:fc:6d:b4:b1:14:65:a2:28:8a:37:
                    1e:1f:df:0d:d8:55:08:64:1e:f8:94:08:81:0b:47:
                    c5:76:ac:da:c7:f5:85:75:b4:68:05:c6:49:a6:d0:
                    7a:b1:40:21:98:23:a7:5f:f2:b2:6f:59:90:10:a0:
                    7f:02:f5:e3:bb:86:f5:a6:31:58:68:50:f8:36:d3:
                    08:19:f3:05:49:ea:e7:d1:61:af:a9:79:09:ee:a6:
                    ab:2d:3d:4c:d7:8c:e1:fc:76:a9:06:a6:8c:35:09:
                    38:1e:6c:f4:44:b7:82:63:79:bc:8e:da:ef:e3:da:
                    36:47:7b:ad:09:9a:9f:77:23:fc:0e:48:a8:d1:02:
                    55:24:fb:4e:14:4c:5a:7c:f2:dc:79:64:74:a0:05:
                    7e:a2:cc:41:b0:cd:ef:50:b8:9b:d1:ed:39:d6:05:
                    b9:a3:d2:4b:0e:a3:e3:32:c1:f3:50:6a:3d:fb:32:
                    51:d7:68:2e:28:5a:40:82:c1:4e:39:1a:c7:4b:7c:
                    ba:1f:3f:b6:18:e6:4c:45:71:21:d7:30:7e:9b:88:
                    f8:b1:71:c8:ba:16:ff:1e:0d:ce:d4:bf:94:53:0c:
                    c5:11:35:fb:06:19:40:96:23:bf:1e:94:74:ba:07:
                    aa:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:08:36:1A:D0:D2:47:9F:AC:52:A9:E2:16:93:5F:B8:49:93:2C:0B
            X509v3 Authority Key Identifier:
                keyid:81:FF:85:EC:AE:CC:53:DB:74:53:08:60:71:45:59:B7:E5:18:45:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:d9:52:56:af:8f:5f:24:f2:4c:c3:2c:8b:61:62:8d:f8:63:
         5b:22:7a:41:e7:4c:ec:97:dd:b1:47:a4:13:44:1b:49:bd:4d:
         9a:33:86:d8:41:9d:ee:01:e7:e7:f5:7c:d4:21:94:c6:58:e0:
         8d:a0:70:38:71:19:88:47:a0:b9:a4:07:e2:73:92:c0:e7:89:
         ec:22:1d:62:14:f2:de:b4:de:8a:a4:e1:12:ba:82:10:42:df:
         3f:ec:81:d9:e0:1a:c9:f4:69:47:55:5b:5b:f4:7b:ca:09:26:
         c6:58:21:cb:04:0a:8c:5e:e8:c0:33:cc:0d:c9:32:bb:de:f2:
         bb:f7:aa:cf:e9:ee:c4:49:94:51:ff:d7:30:1a:b5:23:0d:cc:
         eb:fc:d0:2b:34:20:6e:2e:83:e5:51:cd:d2:00:12:2e:4a:cd:
         f4:5b:cd:cc:20:1f:53:1f:08:3a:7a:1a:77:8f:73:9b:04:60:
         2b:c3:52:2e:7a:79:47:f6:92:48:d2:28:56:45:83:0e:b4:e6:
         e8:63:ab:6e:35:7a:2d:35:e6:13:69:b2:32:e1:ef:ab:db:60:
         77:93:e5:c1:91:5e:ce:b1:f6:47:59:b9:19:a3:db:8e:9a:fd:
         6d:25:81:77:7e:1f:55:83:3d:dd:99:1c:9d:80:92:52:68:00:
         57:d7:b8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 06:24:39 2025 by rpki-client