Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
File:                     G4GY4pfs-4-1GveWJNO2hKH5tR0.mft (raw, json)
Hash identifier:          Mu/y3fcyWOTkjVdIP9dg1S+V+06DGZUvifp+C6fNfCE=
Subject key identifier:   92:15:50:D2:9A:AF:61:15:3E:B2:94:0E:35:99:55:56:65:88:FA:F2
Authority key identifier: 1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D
Certificate issuer:       /CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
Certificate serial:       2288
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
Manifest number:          227F
Signing time:             Sun 20 Jul 2025 15:52:36 +0000
Manifest this update:     Sun 20 Jul 2025 15:52:36 +0000
Manifest next update:     Sun 27 Jul 2025 15:52:36 +0000
Files and hashes:         1: G4GY4pfs-4-1GveWJNO2hKH5tR0.crl (hash: nT3sJUqupXCY2PUEM8DZ9xWDwyn09AB2c7LD765oBes=)
                          2: EBEA51DC4EE311EFA1615635C4F9AE02.roa (hash: Trb/xXQ89mwzGyAL+1mOumJDf5X3SVH7b+Li/DvO+lE=)
                          3: 27CF6BE84EED11EF8D4BE30CC4F9AE02.roa (hash: vUHNM7b/7rHUhQuKzV89H4uhi15N4fuBRHxCcyjL5as=)
                          4: EDB5F114A63711EF89F3B833C4F9AE02.roa (hash: yRPrheegIm3V93UgDt8N+OL/cPpnwv9rIo76kYVagnE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl
                          rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 15:52:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8840 (0x2288)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E47C, serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
        Validity
            Not Before: Jul 20 15:52:36 2025 GMT
            Not After : Jul 27 15:52:36 2025 GMT
        Subject: CN=687d10c4-5692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:25:81:0c:cd:1f:40:ab:35:32:2f:26:76:15:
                    90:28:16:15:1c:dd:e4:a1:a1:ac:51:f3:4b:68:0a:
                    71:f6:04:55:79:d1:b0:b5:33:88:61:2c:2e:75:69:
                    2d:ec:92:23:43:81:6a:c0:36:e5:5e:e7:db:f6:05:
                    a4:63:61:ad:a2:55:ca:6d:3f:bf:94:ae:5d:44:be:
                    d7:09:3b:14:fb:c7:6a:ee:f8:11:11:0b:1a:70:cd:
                    42:1e:d5:28:43:f8:ff:5a:42:7f:17:87:0f:f8:79:
                    43:79:ac:dd:58:b2:e9:8d:6a:53:93:c6:fc:af:70:
                    23:88:d7:e9:4d:d3:57:ae:be:55:62:57:3a:6e:71:
                    e1:04:97:ff:bb:e1:7e:60:e1:c5:47:2a:fb:85:7f:
                    ac:81:88:c3:0e:89:d8:14:fb:37:f4:42:d1:fe:24:
                    2a:cd:37:c6:3f:84:8f:74:ad:e6:da:08:29:93:ec:
                    00:bd:06:0f:96:7d:14:27:a3:b6:53:37:87:f1:1a:
                    4b:c6:e0:2b:54:35:3f:0d:ea:8b:8b:70:2c:78:ae:
                    39:82:06:05:42:27:e2:70:92:c8:10:5d:d7:a9:f7:
                    85:7c:5b:f3:c6:d4:78:3c:5c:e4:56:ee:7f:39:7c:
                    ff:f6:a6:37:41:28:0f:22:68:74:bf:b8:d2:86:5b:
                    e7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:15:50:D2:9A:AF:61:15:3E:B2:94:0E:35:99:55:56:65:88:FA:F2
            X509v3 Authority Key Identifier:
                keyid:1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d4:31:b9:ce:89:a4:c3:e6:31:51:dd:a2:f4:15:8b:a6:55:
         a1:22:8a:03:bf:f0:30:7b:13:03:63:31:67:3f:46:2c:f8:c0:
         2b:d9:53:86:5f:11:06:87:eb:f3:95:33:08:5f:33:84:c8:10:
         c6:64:4d:15:91:15:bf:8d:66:13:45:46:2d:d5:ae:a7:46:66:
         54:0f:54:46:49:e3:c5:ac:d5:f9:75:e6:39:ef:77:a0:69:c6:
         fa:cc:fb:79:65:d4:f5:b6:08:51:93:ff:3e:a1:c5:24:52:0e:
         b1:97:c5:a2:69:59:b5:8a:4f:49:87:b6:a2:0e:34:6f:90:58:
         3d:b7:46:ba:d6:81:84:46:f3:61:ba:cc:fd:09:c7:79:cd:df:
         d8:f6:fe:d1:06:bb:12:f1:c9:a8:29:7c:8a:b7:d8:1d:52:19:
         aa:36:54:83:b3:11:42:8a:23:4f:f5:32:29:e1:14:38:28:be:
         a5:9d:39:89:c0:ab:ac:49:44:c0:40:cc:35:42:40:31:08:e3:
         9c:c6:cb:16:d7:21:e8:76:4a:0a:4e:86:1f:db:9d:76:ae:73:
         7b:5d:ea:ab:24:51:3c:59:35:ed:84:b7:08:d9:66:15:11:41:
         d9:bd:d8:ea:1d:40:f4:f8:b3:18:78:4c:f2:b2:0b:f4:44:7f:
         62:be:55:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 06:52:33 2025 by rpki-client