Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C6A1/7119C5EAD7C811EB8406244EC4F9AE02/gb_ekWnVwsDrRRdiB1NzdpnfFqw.mft
File:                     gb_ekWnVwsDrRRdiB1NzdpnfFqw.mft (raw, json)
Hash identifier:          HvZDP8UhxhSJG6qvO+FvwvfeWe9dD78UywGy56sfITY=
Subject key identifier:   12:8E:AC:23:29:9A:62:33:A1:9E:AC:08:5C:A4:76:1D:1D:37:2B:7A
Authority key identifier: 81:BF:DE:91:69:D5:C2:C0:EB:45:17:62:07:53:73:76:99:DF:16:AC
Certificate issuer:       /CN=A916C6A1/serialNumber=81BFDE9169D5C2C0EB4517620753737699DF16AC
Certificate serial:       056B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gb_ekWnVwsDrRRdiB1NzdpnfFqw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C6A1/7119C5EAD7C811EB8406244EC4F9AE02/gb_ekWnVwsDrRRdiB1NzdpnfFqw.mft
Manifest number:          0567
Signing time:             Fri 28 Mar 2025 23:36:13 +0000
Manifest this update:     Fri 28 Mar 2025 23:36:12 +0000
Manifest next update:     Fri 04 Apr 2025 23:36:12 +0000
Files and hashes:         1: gb_ekWnVwsDrRRdiB1NzdpnfFqw.crl (hash: c5c8ZfhZaYquf2+VFtz4UuTPjFHaJGb32SIjCsEKEWg=)
                          2: 72AA1A38D7CB11EBB8307453C4F9AE02.roa (hash: 80C8kkeWhjJMm/bDl1BH7p52+xZp3ros5mN2WiCpBqk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C6A1/7119C5EAD7C811EB8406244EC4F9AE02/gb_ekWnVwsDrRRdiB1NzdpnfFqw.crl
                          rsync://rpki.apnic.net/member_repository/A916C6A1/7119C5EAD7C811EB8406244EC4F9AE02/gb_ekWnVwsDrRRdiB1NzdpnfFqw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gb_ekWnVwsDrRRdiB1NzdpnfFqw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Apr 2025 23:36:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1387 (0x56b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C6A1
        Validity
            Not Before: Mar 28 23:36:12 2025 GMT
            Not After : Apr  4 23:36:12 2025 GMT
        Subject: CN=67e7326d-8e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b2:ee:40:68:71:f5:32:80:e8:d3:dd:b5:9a:
                    66:d1:e4:37:2a:3f:7f:8a:df:34:7c:a2:f0:2d:b9:
                    00:49:64:81:9e:0d:9f:bf:5c:48:6b:16:b5:9b:fb:
                    e0:22:db:80:e1:2f:b6:66:3c:7e:33:b2:6e:c4:cc:
                    07:13:0b:78:e1:c5:68:df:ce:04:44:9f:1e:ba:46:
                    c8:7f:76:c1:f9:4a:52:9e:9b:03:ff:a5:2e:1a:fc:
                    20:8a:d4:b5:93:2c:02:b6:c4:42:e1:82:e2:ae:bf:
                    c0:45:93:08:ad:60:92:9e:fc:49:da:ae:71:51:60:
                    c4:19:94:86:37:d5:cd:0a:c4:d2:07:04:4b:cd:2b:
                    24:8f:40:48:83:39:1c:a5:53:91:21:b3:74:0e:41:
                    8b:d2:f9:f3:31:26:b2:f0:44:2b:f6:ff:13:71:14:
                    1b:fd:fe:59:9a:88:48:3a:86:5e:9b:ec:11:d4:14:
                    c3:58:52:ab:5f:09:e1:44:5e:84:85:39:38:64:1f:
                    10:eb:1d:00:13:43:a0:01:2a:eb:ee:be:6f:da:09:
                    49:89:62:5c:db:53:a8:13:18:fa:40:46:0b:a2:2f:
                    93:60:2d:de:79:6d:e7:bb:42:4b:4e:e3:22:8c:05:
                    fc:2e:62:9d:4e:05:da:86:13:90:ec:3f:6d:ab:33:
                    41:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8E:AC:23:29:9A:62:33:A1:9E:AC:08:5C:A4:76:1D:1D:37:2B:7A
            X509v3 Authority Key Identifier:
                keyid:81:BF:DE:91:69:D5:C2:C0:EB:45:17:62:07:53:73:76:99:DF:16:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C6A1/7119C5EAD7C811EB8406244EC4F9AE02/gb_ekWnVwsDrRRdiB1NzdpnfFqw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gb_ekWnVwsDrRRdiB1NzdpnfFqw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C6A1/7119C5EAD7C811EB8406244EC4F9AE02/gb_ekWnVwsDrRRdiB1NzdpnfFqw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:e7:3f:1f:3a:a2:9e:56:b5:23:69:da:74:79:f4:dc:70:9d:
         54:48:0b:a1:3e:7a:6b:04:90:aa:28:71:ec:17:c7:6a:c3:ce:
         57:86:e6:6c:e8:48:2e:b2:f5:64:f2:88:e7:9b:a7:56:b1:14:
         89:40:b6:f5:18:5e:9a:06:e8:de:84:57:06:cf:73:fe:4a:0e:
         a8:66:1e:0d:f5:38:57:6b:be:08:64:7a:eb:76:e6:26:23:3a:
         39:d3:d1:0a:91:69:e9:bb:bc:3b:e4:61:5b:b6:6c:e0:8b:41:
         c1:57:91:fe:f9:29:a6:d7:a2:54:8c:25:ba:c9:9d:75:72:9a:
         c0:24:58:9a:09:c3:70:12:e0:39:87:da:67:7e:f0:fa:e5:c6:
         fd:d7:2e:8f:17:e6:04:b6:21:e0:a8:53:df:bb:95:66:2f:91:
         70:08:51:b1:6b:9d:b2:34:ab:4a:b4:bc:a4:c3:0f:fe:78:75:
         6b:ec:e4:37:da:c7:03:d7:44:80:7e:c3:f2:9a:ea:fe:4c:6e:
         9a:04:96:4f:b1:83:30:63:97:08:f0:74:36:28:6f:8f:93:ed:
         5e:b8:bd:fc:97:63:e3:13:b1:51:0f:6b:6e:d8:18:93:a0:9a:
         4f:0c:65:44:fa:a3:c0:b5:8f:a5:75:32:d4:46:89:06:e5:77:
         75:d5:fd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:53:56 2025 by rpki-client