Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917418A/0E090968E4A911EC93E50751C4F9AE02/GHJyN_a30WUlK_m9s4a24ergVXQ.mft
File:                     GHJyN_a30WUlK_m9s4a24ergVXQ.mft (raw, json)
Hash identifier:          m/a6/wDtelDNFxQR1j6I3e4+kqSZEa9YTq+AP9EhIgA=
Subject key identifier:   16:A1:43:49:51:63:EA:E6:17:E5:84:69:60:29:29:A5:B9:8A:62:E5
Authority key identifier: 18:72:72:37:F6:B7:D1:65:25:2B:F9:BD:B3:86:B6:E1:EA:E0:55:74
Certificate issuer:       /CN=A917418A/serialNumber=18727237F6B7D165252BF9BDB386B6E1EAE05574
Certificate serial:       02FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHJyN_a30WUlK_m9s4a24ergVXQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917418A/0E090968E4A911EC93E50751C4F9AE02/GHJyN_a30WUlK_m9s4a24ergVXQ.mft
Manifest number:          02FB
Signing time:             Wed 23 Jul 2025 01:42:57 +0000
Manifest this update:     Wed 23 Jul 2025 01:42:57 +0000
Manifest next update:     Wed 30 Jul 2025 01:42:57 +0000
Files and hashes:         1: GHJyN_a30WUlK_m9s4a24ergVXQ.crl (hash: pm1VA+tttfsKuaGQuYxZlgevYeq3erNenkrWFZBRWhs=)
                          2: FCA92EAAE4AD11EC839CED77C4F9AE02.roa (hash: wW4HCqhcoyo/dCvusJDIhbj+A+f9Rh4hUlMCJe2c3dY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917418A/0E090968E4A911EC93E50751C4F9AE02/GHJyN_a30WUlK_m9s4a24ergVXQ.crl
                          rsync://rpki.apnic.net/member_repository/A917418A/0E090968E4A911EC93E50751C4F9AE02/GHJyN_a30WUlK_m9s4a24ergVXQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHJyN_a30WUlK_m9s4a24ergVXQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 01:42:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 767 (0x2ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917418A, serialNumber=18727237F6B7D165252BF9BDB386B6E1EAE05574
        Validity
            Not Before: Jul 23 01:42:57 2025 GMT
            Not After : Jul 30 01:42:57 2025 GMT
        Subject: CN=68803e21-b69c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cc:41:57:a2:dc:ba:52:8f:a4:11:8d:75:87:
                    6f:97:75:a5:97:22:e1:a2:6a:a1:bb:79:ec:42:59:
                    14:60:76:0f:c0:90:0c:e2:bd:e7:4f:32:60:58:89:
                    3d:6f:ca:39:66:d9:2e:28:22:8e:70:ea:21:ef:c7:
                    b2:cf:7e:77:ac:0d:db:4e:b0:d5:35:7c:3d:e7:2e:
                    c4:93:4c:17:30:68:76:bc:65:01:fd:2b:22:f1:99:
                    f8:73:e4:a1:fa:59:6c:df:a6:ea:a7:d0:08:aa:c5:
                    50:e4:f5:a3:28:6b:f1:57:ad:a0:b6:aa:60:bd:79:
                    7b:51:78:62:43:3f:c8:5a:8e:08:53:9d:d8:80:81:
                    c8:fc:18:c4:c0:cc:16:84:76:dc:60:1f:b2:1a:7e:
                    cc:97:a1:2e:17:3b:5b:48:71:fc:eb:e0:9e:47:5f:
                    ae:da:66:d4:35:ca:f7:55:ca:35:c5:5c:c2:e3:df:
                    58:ea:12:de:18:73:aa:6e:88:7b:9e:4f:3e:c5:80:
                    b1:bf:78:42:63:2f:c2:29:ec:6b:91:db:a9:87:9d:
                    3a:b4:bc:38:5d:7d:63:77:35:49:23:97:bf:91:0c:
                    11:b1:7a:d9:48:a9:28:be:7c:70:37:a1:47:13:14:
                    db:a7:1d:97:80:d9:2c:7d:af:49:fe:cb:f8:fe:86:
                    5c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A1:43:49:51:63:EA:E6:17:E5:84:69:60:29:29:A5:B9:8A:62:E5
            X509v3 Authority Key Identifier:
                keyid:18:72:72:37:F6:B7:D1:65:25:2B:F9:BD:B3:86:B6:E1:EA:E0:55:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917418A/0E090968E4A911EC93E50751C4F9AE02/GHJyN_a30WUlK_m9s4a24ergVXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHJyN_a30WUlK_m9s4a24ergVXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917418A/0E090968E4A911EC93E50751C4F9AE02/GHJyN_a30WUlK_m9s4a24ergVXQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ca:1f:c0:bb:3b:7f:ef:08:f6:78:df:9b:25:15:38:ee:a9:
         14:bd:9c:c3:33:bf:a3:53:ba:56:15:2a:2c:dc:a0:b5:32:6b:
         ec:0b:76:fa:7e:29:0f:c9:d3:80:c5:33:33:70:a3:14:f0:c4:
         8d:1f:08:3d:11:9c:d5:d6:3c:62:e5:e8:d8:08:d7:47:77:97:
         f5:f5:9b:80:87:b5:3a:4d:ce:27:a5:e9:0f:15:94:8a:d4:56:
         96:c4:2f:14:61:fb:96:45:de:f2:56:36:4c:7b:7c:28:94:7e:
         68:ec:48:03:e5:de:f2:68:ae:d6:a9:dd:5d:f6:e4:a2:e3:23:
         6a:79:fb:a9:3c:83:ab:30:6b:2e:b0:48:7b:77:3e:4a:ef:5e:
         6d:09:90:88:d7:1d:41:38:15:0d:d8:d6:1e:0d:98:de:f2:ff:
         4b:a9:d4:c8:e8:83:6c:39:91:72:e3:a9:36:4d:f0:f8:6c:d4:
         6f:1a:f1:82:40:fb:bc:42:40:75:1b:97:0c:42:cf:ea:dc:de:
         4f:a3:c5:99:d2:68:ee:ab:4e:64:6b:fc:38:fd:23:57:31:cb:
         61:60:e8:87:c0:8d:d8:bf:99:1e:68:49:cb:05:bd:eb:e2:7c:
         1c:ad:67:39:77:e8:3e:28:41:24:30:4d:a4:ea:1f:c9:f2:c2:
         ab:9e:ac:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:56:51 2025 by rpki-client