Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
File:                     G5AiZjIh2M567rA_P1eZ8NV-phY.mft (raw, json)
Hash identifier:          Sjm7WmKie+qbHadICgLn0wz6gbTU36KTrNxGU7Cicyk=
Subject key identifier:   D4:9F:0E:46:49:99:31:EE:CA:61:55:C9:82:A2:B2:07:82:62:FD:0B
Authority key identifier: 1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16
Certificate issuer:       /CN=A9133E16/serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616
Certificate serial:       08FF
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
Manifest number:          08FF
Signing time:             Fri 18 Jul 2025 20:34:43 +0000
Manifest this update:     Fri 18 Jul 2025 20:34:43 +0000
Manifest next update:     Fri 25 Jul 2025 20:34:43 +0000
Files and hashes:         1: G5AiZjIh2M567rA_P1eZ8NV-phY.crl (hash: V+4KLEoelo0ZTmfUY+9/IvyK0CzDlk3mKms/ulsnRGk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl
                          rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 20:34:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2303 (0x8ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133E16, serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616
        Validity
            Not Before: Jul 18 20:34:43 2025 GMT
            Not After : Jul 25 20:34:43 2025 GMT
        Subject: CN=687aafe3-c8de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:b4:43:c4:4e:68:65:ae:e0:24:e1:f6:3b:4d:
                    d5:33:1e:a9:9a:86:eb:d5:05:ff:7c:0d:c8:b9:64:
                    14:6f:75:06:9c:4c:b7:cb:81:a7:19:16:f5:ea:f2:
                    15:ad:da:18:08:89:dc:0c:f7:95:2b:79:53:db:77:
                    08:e4:a3:02:8a:b9:b4:49:68:41:dd:59:c2:8d:a2:
                    7a:e2:51:24:20:9a:3e:5a:6a:53:27:69:4a:d3:2e:
                    95:68:0c:d4:de:67:26:89:b8:1e:e5:b7:89:32:4b:
                    43:8d:19:5d:be:e6:2b:7d:a2:ce:68:ca:43:08:57:
                    f1:9c:63:76:7e:d5:f8:6d:c2:c3:1d:07:a3:da:b7:
                    99:08:27:eb:69:43:2d:83:e4:7a:d6:48:6d:7e:04:
                    cf:d2:f2:e0:93:7d:ca:5b:57:a9:6b:ff:a7:a4:a3:
                    ed:01:24:43:c1:1c:5c:f3:e1:fe:8a:93:7c:81:4a:
                    ce:5c:71:ab:c1:d6:1a:0f:83:92:75:6b:e3:1e:91:
                    3c:fb:5d:fe:11:34:27:1e:fb:56:98:d4:30:66:a8:
                    df:20:e5:26:3c:95:08:8b:3a:12:54:46:83:32:1b:
                    08:2b:90:53:d6:c5:b4:6a:ff:91:be:20:df:9d:1a:
                    95:d1:50:e0:98:75:15:f0:9b:bb:b1:c6:4e:4f:e0:
                    14:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9F:0E:46:49:99:31:EE:CA:61:55:C9:82:A2:B2:07:82:62:FD:0B
            X509v3 Authority Key Identifier:
                keyid:1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:2a:4e:80:47:13:21:13:a6:9f:38:17:4e:23:d4:d6:54:85:
         9a:1f:21:fc:db:73:3d:04:ba:d0:c2:d6:f0:21:e4:09:82:36:
         f3:d9:bc:db:a7:ac:29:d0:e7:af:79:c9:c2:25:1f:b5:94:dd:
         52:95:95:53:54:41:f6:ea:c4:bf:b1:38:bd:25:39:47:b3:1d:
         a9:05:bc:61:2b:43:07:e5:2e:bc:95:20:2a:27:ff:0d:ba:90:
         27:26:fe:89:68:99:30:37:6f:b2:d8:b5:02:5c:f9:df:4c:4a:
         9d:ab:14:f6:24:e1:14:4e:f3:c6:ec:60:ef:d4:8b:5b:64:67:
         25:78:0c:b6:bf:27:51:0b:d2:40:8a:2c:a9:39:36:50:bd:de:
         02:d0:29:ec:ea:cf:43:05:73:fb:06:3b:9c:c2:05:b4:39:20:
         91:16:20:fc:22:ad:ed:2f:5a:64:a2:18:98:15:be:17:0a:3f:
         0f:82:e5:50:83:df:36:26:91:10:fd:ed:97:4c:7d:60:44:0d:
         3c:e6:d2:1a:b3:a5:8d:42:12:13:a7:5c:aa:15:20:4c:d0:ae:
         7c:e5:66:0f:d2:f2:b8:84:46:1b:b0:d0:f4:0c:67:2c:55:76:
         7c:dd:48:0f:23:5c:4e:53:82:37:1e:62:6f:3c:61:c3:66:fd:
         b7:84:7d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 15:14:07 2025 by rpki-client