Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/gGBQVjOTTkrJBxeyMJTfmEVqvpU.mft
File:                     gGBQVjOTTkrJBxeyMJTfmEVqvpU.mft (raw, json)
Hash identifier:          jgtWnwwiM/fOT8IZd157VwW9m0ODL/LmpYutnV+Oakw=
Subject key identifier:   C2:73:1E:95:BF:CB:0E:98:AD:91:85:F2:D6:3A:7E:64:C0:08:37:3D
Authority key identifier: 80:60:50:56:33:93:4E:4A:C9:07:17:B2:30:94:DF:98:45:6A:BE:95
Certificate issuer:       /CN=A915D8E2/serialNumber=8060505633934E4AC90717B23094DF98456ABE95
Certificate serial:       0759
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGBQVjOTTkrJBxeyMJTfmEVqvpU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/gGBQVjOTTkrJBxeyMJTfmEVqvpU.mft
Manifest number:          0839
Signing time:             Fri 04 Apr 2025 21:49:54 +0000
Manifest this update:     Fri 04 Apr 2025 21:49:53 +0000
Manifest next update:     Fri 11 Apr 2025 21:49:53 +0000
Files and hashes:         1: gGBQVjOTTkrJBxeyMJTfmEVqvpU.crl (hash: d2Zm8l167xZeiEeLMSFc0UnL1zytgpMwM6Yqilzt8yE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/gGBQVjOTTkrJBxeyMJTfmEVqvpU.crl
                          rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/gGBQVjOTTkrJBxeyMJTfmEVqvpU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGBQVjOTTkrJBxeyMJTfmEVqvpU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 21:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1881 (0x759)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D8E2
        Validity
            Not Before: Apr  4 21:49:53 2025 GMT
            Not After : Apr 11 21:49:53 2025 GMT
        Subject: CN=67f05401-d479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7f:1b:ee:7e:35:78:88:ed:bb:7a:d9:27:3f:
                    65:4f:3c:c5:b3:50:e3:fa:14:52:db:12:8c:18:52:
                    02:3f:44:a9:e3:58:ca:78:ff:f1:18:aa:92:db:08:
                    a2:eb:6e:fa:a0:7c:64:a5:ef:68:b1:a2:4f:5e:87:
                    b6:96:db:72:13:6a:34:12:7a:be:18:c1:1a:c3:e1:
                    b2:58:fa:23:59:3a:11:fe:0e:e0:34:99:c8:15:b2:
                    84:2e:b6:1a:d3:17:af:8b:b4:05:d9:ca:1b:3d:ad:
                    b9:48:27:a6:d1:da:65:98:b5:f1:5c:aa:9c:02:ca:
                    be:aa:3a:12:b1:9c:59:82:59:f8:bd:ea:2c:7d:3f:
                    11:fd:51:bc:87:1f:37:6a:36:32:fc:b1:ec:7d:09:
                    8c:83:9d:d2:72:f2:e9:6d:d0:e7:06:f4:19:0e:ad:
                    2a:2e:57:84:12:f5:76:00:92:d7:34:4f:46:be:e2:
                    55:a2:a0:43:b2:a7:dd:df:ca:c0:1b:5a:f8:0c:ac:
                    f6:8f:4e:3b:b7:13:63:7c:b1:b6:82:81:b6:6c:ea:
                    22:a7:3c:dd:ed:9b:ef:b1:c3:44:28:a4:89:8d:fe:
                    eb:a8:9a:85:79:11:f7:3c:2f:80:39:21:0c:b2:b4:
                    b4:e5:39:3d:cb:10:a3:60:53:c4:eb:a2:a2:bb:6d:
                    64:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:73:1E:95:BF:CB:0E:98:AD:91:85:F2:D6:3A:7E:64:C0:08:37:3D
            X509v3 Authority Key Identifier:
                keyid:80:60:50:56:33:93:4E:4A:C9:07:17:B2:30:94:DF:98:45:6A:BE:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/gGBQVjOTTkrJBxeyMJTfmEVqvpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGBQVjOTTkrJBxeyMJTfmEVqvpU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/gGBQVjOTTkrJBxeyMJTfmEVqvpU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c0:34:6a:8b:6e:58:f8:08:93:e3:d7:33:d7:35:5f:05:73:
         17:34:0f:f4:cf:9e:97:d7:5f:e9:ba:74:79:a7:4a:5e:cb:83:
         28:ab:d4:15:db:3d:55:35:5c:55:67:65:f9:c4:5f:8e:47:8e:
         1d:9e:76:f1:f0:72:54:c4:f2:57:87:e7:8d:c2:c3:f7:c2:3a:
         86:1b:a3:dc:68:7e:6f:4b:ce:66:b6:80:8b:93:c6:60:7d:11:
         75:3a:b7:a5:49:25:2a:8c:ce:07:4a:8d:d1:dd:88:e7:a1:52:
         91:31:4f:2d:8a:59:94:13:52:0e:6f:d3:10:cb:ea:16:89:3b:
         ba:5a:d8:d3:ec:1c:56:d3:3b:50:76:63:14:f5:9a:0a:24:41:
         26:1f:90:b8:6f:f6:2b:4f:27:60:26:78:f1:97:89:5c:e6:c2:
         9e:19:ac:36:3a:1d:73:0e:5d:9d:e7:10:85:ed:4c:54:9f:45:
         a6:a2:fc:69:c8:a9:29:d5:b6:0a:04:52:23:b2:30:80:3a:86:
         ec:51:84:84:0d:38:70:6e:35:f2:40:23:c4:ee:a3:25:9f:63:
         5e:a0:31:7f:1f:01:30:7f:ce:b0:7f:f8:5f:ff:cf:bd:7e:fd:
         b7:3d:2d:b4:25:39:1d:05:53:f1:46:43:e4:c6:84:96:bc:70:
         15:59:26:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:00:46 2025 by rpki-client