Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
File:                     GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft (raw, json)
Hash identifier:          v/lfGne4Ke6MiLMXsPjZTHvdX9MpDU1dDDBtDGe9vuM=
Subject key identifier:   04:06:DA:07:22:C4:5F:24:DF:29:03:7B:2D:82:46:41:DE:F9:FE:E6
Authority key identifier: 18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77
Certificate issuer:       /CN=A912A5D4/serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877
Certificate serial:       16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
Manifest number:          16
Signing time:             Thu 03 Apr 2025 07:14:59 +0000
Manifest this update:     Thu 03 Apr 2025 07:14:59 +0000
Manifest next update:     Thu 10 Apr 2025 07:14:59 +0000
Files and hashes:         1: GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl (hash: Ll+LHoz20Y+lPwHha+u9GhlW0D5QbD0EzS6BZCWYfis=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl
                          rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 07:14:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A5D4
        Validity
            Not Before: Apr  3 07:14:59 2025 GMT
            Not After : Apr 10 07:14:59 2025 GMT
        Subject: CN=67ee3573-6be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2c:2c:3d:c8:a0:63:39:29:85:9b:16:5c:02:
                    62:91:f8:25:b9:3c:20:a2:8d:11:9c:9c:94:98:03:
                    48:5e:1f:ce:77:01:c3:ac:91:03:51:bd:b4:5f:7e:
                    64:f5:88:de:84:4a:ee:ae:44:16:71:a1:05:ac:c8:
                    ea:92:b4:17:69:66:72:b8:4e:f4:3d:ae:2b:f0:a8:
                    62:a3:be:25:48:58:03:9e:a9:a5:75:8c:ef:22:40:
                    73:97:29:ec:43:3a:9b:b0:bc:51:d9:35:e7:c3:40:
                    3e:02:3e:f2:b7:96:06:cc:5b:1b:d3:f2:bb:83:c1:
                    84:f7:fa:be:c8:42:a0:5f:bd:50:ed:e4:21:e4:c8:
                    77:06:0b:e0:78:00:be:71:87:6c:5f:14:59:91:ae:
                    95:1d:0c:c0:20:b8:20:10:73:0e:df:40:03:76:5a:
                    33:a2:21:8b:0d:e5:6d:1a:f3:7b:e2:d3:e1:09:dc:
                    91:8c:1d:df:cd:61:a6:40:c6:08:d6:55:32:31:b3:
                    04:1d:6b:6a:24:51:26:63:1b:94:25:0c:59:c3:3f:
                    09:71:d8:c2:aa:70:54:b0:3d:3e:be:28:53:63:dd:
                    5d:ad:e9:ab:2f:52:1b:4a:ca:ec:3b:01:29:dd:b6:
                    ba:ce:92:ba:41:1f:1e:72:8c:e9:96:77:20:84:c9:
                    07:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:06:DA:07:22:C4:5F:24:DF:29:03:7B:2D:82:46:41:DE:F9:FE:E6
            X509v3 Authority Key Identifier:
                keyid:18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ea:36:ef:4b:73:98:b8:62:56:46:b9:0e:d7:b8:dc:26:f1:
         1e:26:8b:cd:e2:2d:17:8d:1a:12:9b:f2:6f:c0:a7:0c:8a:5a:
         21:95:34:93:f7:0f:6f:60:86:8c:79:d6:3b:01:5b:ba:45:44:
         71:ea:2c:d4:b7:2a:de:09:cc:52:98:4e:3c:d9:ed:4b:11:1f:
         c5:2c:b4:e8:fb:96:ba:f3:2f:70:cf:8b:07:70:73:31:1f:b1:
         dc:c3:94:61:f8:a8:7a:13:10:40:30:4f:c6:6e:8f:8c:0b:85:
         28:2d:4a:0e:83:13:98:71:9a:7f:09:04:7b:0a:f2:df:42:37:
         97:ac:c6:8f:a8:3f:39:7b:9c:69:23:c8:7a:85:8b:ed:c4:22:
         c9:bf:15:e0:40:9e:7d:0e:fb:cc:52:b0:33:6c:5e:4a:6b:28:
         65:4a:08:47:ad:07:1e:6a:15:7d:8b:8f:be:30:1a:e8:e9:be:
         12:26:70:33:b9:54:a1:65:6d:c5:d0:ca:e3:98:c3:ea:8e:a0:
         0d:af:96:73:0e:c2:dc:27:6f:ce:b5:b7:b3:27:60:46:46:f9:
         77:94:13:39:3f:fc:09:c4:94:94:14:47:6f:1b:d1:58:21:25:
         bf:77:b1:bb:69:71:8d:d6:5a:0d:2d:c4:30:3c:38:4c:5e:ad:
         24:4c:f0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:17 2025 by rpki-client