Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
File:                     GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft (raw, json)
Hash identifier:          z1lzPjDDUM7iQQzpI3/7pBgSwW2QKCTupiafXRGBFu0=
Subject key identifier:   28:3B:CD:A0:17:E5:9E:65:D2:7A:B8:00:29:F8:5B:C6:EF:83:C5:AF
Authority key identifier: 18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77
Certificate issuer:       /CN=A912A5D4/serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877
Certificate serial:       4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
Manifest number:          4E
Signing time:             Wed 23 Jul 2025 07:39:35 +0000
Manifest this update:     Wed 23 Jul 2025 07:39:35 +0000
Manifest next update:     Wed 30 Jul 2025 07:39:35 +0000
Files and hashes:         1: GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl (hash: hKs1KrgCCtlSrsK4cYxDjrS/l3rzM1+2qQbnKvK4RA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl
                          rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 07:39:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A5D4, serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877
        Validity
            Not Before: Jul 23 07:39:35 2025 GMT
            Not After : Jul 30 07:39:35 2025 GMT
        Subject: CN=688091b7-8301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8a:2b:96:6e:7e:23:64:df:07:2f:43:0e:f8:
                    ce:f9:ad:7b:7d:3a:d3:da:45:30:ef:f3:ed:06:1f:
                    27:2a:5c:dc:e5:02:22:23:cc:eb:20:5e:e4:3c:5b:
                    31:45:37:e1:b6:48:5d:5d:78:58:01:47:60:5a:70:
                    62:06:7c:ad:34:d8:b8:aa:d0:6e:fd:38:a0:76:5c:
                    d3:62:b0:fe:37:46:e6:6f:23:09:53:29:dd:ae:3b:
                    33:05:f3:98:17:af:a9:d4:62:14:88:09:33:fa:45:
                    0c:ac:70:97:b7:eb:3b:39:3c:d0:54:a6:c6:65:2c:
                    0d:24:88:19:26:bd:80:d0:fb:bf:e1:81:e1:5e:ea:
                    89:46:d9:61:01:e9:17:03:c5:56:c3:ea:a8:04:5b:
                    72:5a:d6:0c:9e:4f:12:8e:0b:66:46:a1:18:05:06:
                    31:79:df:72:8d:11:c9:50:03:19:34:ae:cf:ee:3b:
                    fb:75:a3:9e:ac:60:77:16:e4:75:97:ed:13:e2:69:
                    51:1c:7a:5b:e7:31:e1:dd:5d:44:12:f9:2e:a0:ad:
                    70:83:42:cf:36:df:45:ab:2e:43:6e:a2:54:17:68:
                    83:19:7d:d9:25:96:ba:ab:2e:c1:e3:c5:76:37:db:
                    d1:a5:7a:32:53:e1:7c:45:ef:cb:2f:09:6f:a2:b7:
                    95:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3B:CD:A0:17:E5:9E:65:D2:7A:B8:00:29:F8:5B:C6:EF:83:C5:AF
            X509v3 Authority Key Identifier:
                keyid:18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:fd:5b:9d:1e:0a:d3:f0:12:ec:45:a7:c9:79:c9:ac:db:9e:
         56:8c:fc:4e:0e:58:a7:78:a0:74:66:24:2d:4c:69:30:80:a8:
         31:51:26:96:db:b6:05:90:03:4b:67:a1:57:23:99:03:61:11:
         8f:50:fc:f9:c1:d8:14:e2:ea:01:4a:90:d1:2c:47:31:df:d5:
         57:ac:4c:88:8e:bc:e3:61:35:fa:8b:12:b4:d0:f1:bd:eb:4a:
         4c:df:8a:62:23:c6:1f:ac:29:ea:4a:88:90:c1:16:6b:62:dd:
         81:5f:da:ca:36:0d:c6:60:46:96:ce:cc:8f:9d:ff:64:8b:51:
         08:be:34:6d:cb:4b:1f:8f:17:43:ba:29:a3:06:06:08:a7:33:
         bb:fe:0b:d3:25:52:24:de:2f:85:81:3d:35:c0:a6:5b:40:71:
         76:47:14:5c:09:7c:5d:3c:1b:35:18:b0:0c:49:83:d3:74:39:
         a0:df:05:8e:bd:17:7d:d6:5c:a2:de:94:ff:97:18:97:a6:cb:
         9a:42:23:a1:70:1a:d9:05:80:12:4b:cd:c8:90:6b:16:39:38:
         b8:79:6d:2e:48:61:c1:4f:7b:de:31:54:76:cd:4f:18:3a:a7:
         20:4a:7c:d1:ac:8d:bd:35:de:92:97:9d:64:63:14:db:77:89:
         33:d0:b4:af
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
QTVENDExMC8GA1UEBRMoMTgzQTk4NjdGMkUzQjM3MzE2MkJFRkE2Qjg2RTgxQkQ4
Qzg2ODg3NzAeFw0yNTA3MjMwNzM5MzVaFw0yNTA3MzAwNzM5MzVaMBgxFjAUBgNV
BAMTDTY4ODA5MWI3LTgzMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDDiiuWbn4jZN8HL0MO+M75rXt9OtPaRTDv8+0GHycqXNzlAiIjzOsgXuQ8WzFF
N+G2SF1deFgBR2BacGIGfK002Liq0G79OKB2XNNisP43RuZvIwlTKd2uOzMF85gX
r6nUYhSICTP6RQyscJe36zs5PNBUpsZlLA0kiBkmvYDQ+7/hgeFe6olG2WEB6RcD
xVbD6qgEW3Ja1gyeTxKOC2ZGoRgFBjF533KNEclQAxk0rs/uO/t1o56sYHcW5HWX
7RPiaVEcelvnMeHdXUQS+S6grXCDQs8230WrLkNuolQXaIMZfdkllrqrLsHjxXY3
29GlejJT4XxF78svCW+it5VFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKDvNoBfl
nmXSergAKfhbxu+Dxa8wHwYDVR0jBBgwFoAUGDqYZ/Ljs3MWK++muG6BvYyGiHcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBNUQ0LzZFMEYyRUEwRjND
RTExRUY5MTRFRjY0NEM0RjlBRTAyL0dEcVlaX0xqczNNV0stLW11RzZCdll5R2lI
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvR0RxWVpfTGpzM01XSy0tbXVHNkJ2WXlHaUhjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB
NUQ0LzZFMEYyRUEwRjNDRTExRUY5MTRFRjY0NEM0RjlBRTAyL0dEcVlaX0xqczNN
V0stLW11RzZCdll5R2lIYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAIv9W50eCtPwEuxFp8l5yazbnlaM/E4OWKd4oHRmJC1MaTCAqDFRJpbb
tgWQA0tnoVcjmQNhEY9Q/PnB2BTi6gFKkNEsRzHf1VesTIiOvONhNfqLErTQ8b3r
SkzfimIjxh+sKepKiJDBFmti3YFf2so2DcZgRpbOzI+d/2SLUQi+NG3LSx+PF0O6
KaMGBginM7v+C9MlUiTeL4WBPTXApltAcXZHFFwJfF08GzUYsAxJg9N0OaDfBY69
F33WXKLelP+XGJemy5pCI6FwGtkFgBJLzciQaxY5OLh5bS5IYcFPe94xVHbNTxg6
pyBKfNGsjb013pKXnWRjFNt3iTPQtK8=
-----END CERTIFICATE-----
Generated at Thu Jul 24 04:01:11 2025 by rpki-client