Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
File:                     GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft (raw, json)
Hash identifier:          CdjtbCRRFgunFtzXL5wp13eY6ZT5D97UucQDJdL5Mdc=
Subject key identifier:   5D:55:9D:DE:45:EA:99:B8:BC:AA:EC:39:75:18:24:97:BA:84:54:BB
Authority key identifier: 18:ED:AB:B2:82:0C:E2:5F:90:E8:63:5C:13:B7:F0:D4:5F:04:63:76
Certificate issuer:       /CN=A9155810/serialNumber=18EDABB2820CE25F90E8635C13B7F0D45F046376
Certificate serial:       72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
Manifest number:          6F
Signing time:             Mon 21 Jul 2025 07:08:25 +0000
Manifest this update:     Mon 21 Jul 2025 07:08:24 +0000
Manifest next update:     Mon 28 Jul 2025 07:08:24 +0000
Files and hashes:         1: GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl (hash: wg5hdc9+To0gYF1r+YL7iO199XKAySvs3hD7WRB9Qew=)
                          2: 1BC9B310C88E11EF8E789228C4F9AE02.roa (hash: S0OXmYbNImJgx4uOC0U7mhQnmuYrYNwVWM5SzyT3w3g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl
                          rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 07:08:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155810, serialNumber=18EDABB2820CE25F90E8635C13B7F0D45F046376
        Validity
            Not Before: Jul 21 07:08:24 2025 GMT
            Not After : Jul 28 07:08:24 2025 GMT
        Subject: CN=687de769-ba59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:60:3c:67:c4:62:15:4a:d8:0a:6e:e1:eb:6c:
                    00:ce:64:14:82:8e:77:b1:7a:c5:5d:29:6c:71:fa:
                    57:61:19:67:b1:da:ca:91:97:01:ed:ea:95:0c:23:
                    fd:3b:68:18:0e:14:3d:b1:bc:1c:e0:4e:50:2f:80:
                    ea:90:54:ce:6f:62:f5:e0:c3:68:2c:86:0b:a2:12:
                    b3:b5:e9:c8:f9:86:bf:3c:90:f6:bb:7e:56:99:b9:
                    93:56:26:14:a9:be:67:e6:91:0e:4e:26:c1:c2:5f:
                    b7:fe:9f:92:4e:3c:49:fc:36:44:fd:db:26:2a:d0:
                    64:71:ec:3f:a8:21:8a:77:bf:f3:b0:64:f2:01:db:
                    75:40:ff:99:ad:4c:05:c5:83:48:6d:6e:82:75:81:
                    9c:bf:16:a8:08:f3:af:c3:0b:48:62:2c:32:45:90:
                    b7:61:c3:4f:a6:34:ac:03:a5:7c:50:46:9f:ed:c5:
                    33:cf:64:6a:6d:e2:50:63:02:03:95:95:77:5b:ad:
                    5d:39:9f:f7:d8:6e:05:d2:d4:4d:c4:8d:98:49:e5:
                    b8:53:92:2f:4d:5d:17:8c:66:83:da:a0:4c:a5:60:
                    a3:e2:3c:44:53:b8:a2:5d:c6:b8:ee:d7:2f:5f:9c:
                    eb:ca:5f:e8:30:8b:fe:a0:0c:35:80:9c:c1:25:0e:
                    98:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:55:9D:DE:45:EA:99:B8:BC:AA:EC:39:75:18:24:97:BA:84:54:BB
            X509v3 Authority Key Identifier:
                keyid:18:ED:AB:B2:82:0C:E2:5F:90:E8:63:5C:13:B7:F0:D4:5F:04:63:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:39:11:20:e1:66:8d:c7:c8:bc:0b:b8:1d:ce:9c:60:dc:c1:
         42:15:c6:7a:04:a1:a7:a9:3b:23:cb:0a:7e:ec:a2:99:87:11:
         22:da:78:31:52:c2:2d:76:c5:54:c0:6c:eb:cb:23:38:ee:df:
         62:db:a8:64:d3:a9:74:ac:61:79:41:31:e1:d0:4f:90:a8:d2:
         a0:5d:c3:aa:53:54:58:46:8e:70:d0:92:ba:4c:c9:24:d2:3d:
         b2:ed:5f:eb:7b:9f:bb:c8:e7:89:1e:9a:ab:bf:63:93:e8:ca:
         bc:0a:c8:2b:26:51:bb:6b:93:ea:c3:0b:49:09:ce:81:0b:8d:
         cd:fd:f7:d1:f7:42:12:74:f5:c2:06:70:4b:f9:98:ef:02:2c:
         7c:18:d2:ae:c2:ca:14:b6:03:d2:d8:9c:a5:01:da:c0:1f:eb:
         18:90:55:52:12:06:89:35:72:11:b4:31:01:bf:fc:a3:10:f2:
         0f:bd:0d:91:b4:46:90:3b:4d:f3:32:e2:bd:29:a4:16:e0:d1:
         61:b7:7b:62:a3:d2:89:b3:ef:7b:ea:7b:fe:ae:d3:e6:21:64:
         f6:05:b0:9b:d4:a0:c8:b0:ff:06:c8:1e:80:95:97:05:15:85:
         a1:40:29:33:ea:58:49:b0:b9:2f:a0:92:73:97:cb:53:d8:23:
         71:36:2c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:28:37 2025 by rpki-client