Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
File:                     GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft (raw, json)
Hash identifier:          0jbHkvOM699emIgYSMgpldKcm+jTce4mtsdJXF0ao5w=
Subject key identifier:   9C:AA:D0:26:7C:6B:BA:CB:A1:40:CE:31:68:8F:3E:42:64:7C:FD:D3
Authority key identifier: 18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77
Certificate issuer:       /CN=A912A5D4/serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
Manifest number:          4D
Signing time:             Mon 21 Jul 2025 07:30:50 +0000
Manifest this update:     Mon 21 Jul 2025 07:30:49 +0000
Manifest next update:     Mon 28 Jul 2025 07:30:49 +0000
Files and hashes:         1: GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl (hash: dbjQ7EV9kbtR9fOPpNyktpzgXZDzunVjK6NP9wrQtog=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl
                          rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 07:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A5D4, serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877
        Validity
            Not Before: Jul 21 07:30:49 2025 GMT
            Not After : Jul 28 07:30:49 2025 GMT
        Subject: CN=687decaa-d902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:27:e6:fe:48:d2:54:2a:82:0a:cc:8d:57:ed:
                    0f:85:63:c5:27:41:69:ce:6f:fd:1e:22:b0:c2:47:
                    51:27:5e:01:80:0d:80:43:e3:4d:d8:d1:30:b7:bc:
                    a1:20:d0:2a:51:a0:a2:b3:16:1b:4a:3b:68:d1:da:
                    13:25:d3:1b:ec:e6:eb:98:fb:50:bb:0b:d2:d6:49:
                    da:90:cb:58:2c:23:61:3c:fb:b4:56:c5:17:9b:00:
                    b6:dd:e6:87:d0:81:0b:dd:7d:da:ca:d8:ff:4d:6a:
                    cb:9e:70:fe:20:73:6f:85:b0:2b:64:73:3d:3c:cf:
                    33:25:19:d4:33:f7:99:44:48:ea:b4:ce:52:a5:a1:
                    4c:90:34:00:13:de:c4:9c:c7:e3:45:87:20:47:64:
                    38:da:5f:01:3c:58:1a:33:fe:07:19:1d:41:3f:69:
                    c1:73:2a:57:26:3a:28:c0:8e:62:f7:90:e2:64:5a:
                    d1:1b:8b:57:76:32:4c:d2:a0:73:a5:7b:14:c9:6a:
                    28:6b:38:c8:c3:9b:60:50:49:bb:4c:f1:ed:a6:f2:
                    d7:91:1c:43:a3:60:1f:4a:c4:42:9d:df:bd:aa:e0:
                    0c:22:9d:c8:f3:e8:26:bb:6b:13:af:76:54:dc:dd:
                    a4:2f:81:f6:8f:1f:f3:21:0a:b7:7a:e8:ab:7a:c5:
                    ef:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AA:D0:26:7C:6B:BA:CB:A1:40:CE:31:68:8F:3E:42:64:7C:FD:D3
            X509v3 Authority Key Identifier:
                keyid:18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:9d:c8:be:fe:7f:df:83:35:e2:1b:05:5e:53:21:09:32:b0:
         e4:0e:ce:72:c5:bd:d3:d7:ca:5b:88:52:c3:81:ea:e4:f7:f0:
         42:57:e2:65:ef:4b:87:ec:94:48:b7:e5:71:a3:4a:4d:d4:cc:
         ee:89:c1:13:45:b7:0a:93:1f:14:5f:9f:8f:54:52:65:a9:bb:
         35:89:64:6c:6f:72:49:8a:6a:33:ab:14:de:55:ad:7a:a9:e1:
         6f:d2:77:10:67:c5:f9:89:83:00:44:d5:58:1c:52:10:a7:7d:
         95:28:db:9c:80:68:05:0a:35:34:c0:2e:ef:c2:92:43:05:96:
         44:8a:80:5a:56:67:4c:cf:30:a2:73:c4:b5:99:74:5b:a0:79:
         9c:3f:85:59:20:d7:24:38:dc:da:d1:48:d7:ad:27:ad:58:57:
         dc:cc:2c:c3:64:99:24:7e:eb:50:8c:70:e5:de:a8:df:24:10:
         61:2e:97:37:64:51:31:43:4e:6f:bf:76:0e:c0:f9:6b:9c:b2:
         35:fa:24:2e:c6:46:d4:86:eb:b7:c5:20:0d:24:93:e6:7e:0b:
         87:ca:a6:9e:f1:e8:1f:e1:02:df:fe:be:38:17:65:a0:05:e0:
         dc:5c:ec:bb:22:51:03:55:8b:ca:b8:7b:89:bf:6d:c7:6f:a5:
         9e:5f:1f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 05:59:19 2025 by rpki-client