Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft
File:                     G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft (raw, json)
Hash identifier:          nzYJUSQNRENEAqipwPeiezf5ONV7oM64P1Oj/XpPa78=
Subject key identifier:   33:8B:CA:D4:7C:54:CE:9F:CC:DA:9D:76:02:26:89:30:8F:BD:97:2C
Authority key identifier: 1B:AF:82:51:D1:A1:3F:41:88:06:0A:B1:9A:03:0D:36:CA:A7:AB:D4
Certificate issuer:       /CN=A918770D/serialNumber=1BAF8251D1A13F4188060AB19A030D36CAA7ABD4
Certificate serial:       1C03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft
Manifest number:          1BF6
Signing time:             Fri 18 Apr 2025 16:19:45 +0000
Manifest this update:     Fri 18 Apr 2025 16:19:44 +0000
Manifest next update:     Fri 25 Apr 2025 16:19:44 +0000
Files and hashes:         1: G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl (hash: cXa8METqCgD6EJsiAwmfdPdJSwGBxew+2AM7h/FpVSY=)
                          2: 6C5A7912ED2311E680140D19C4F9AE02.roa (hash: eMi2yq9I2MPYaPzqg2XL7DC7JwJfMQi8ycwnLu24i5s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl
                          rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Apr 2025 16:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7171 (0x1c03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918770D, serialNumber=1BAF8251D1A13F4188060AB19A030D36CAA7ABD4
        Validity
            Not Before: Apr 18 16:19:44 2025 GMT
            Not After : Apr 25 16:19:44 2025 GMT
        Subject: CN=68027ba1-3ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:df:1c:ad:61:ee:00:44:a1:ad:6c:49:12:bc:
                    d1:ed:b8:8c:e8:c0:4b:9a:d9:64:69:77:62:13:13:
                    53:0c:be:8b:13:a2:1e:fe:c5:f9:be:8a:7b:e7:8a:
                    8f:2f:76:04:39:a7:20:95:b0:bb:17:c8:1c:95:9e:
                    11:fb:b8:a0:e8:86:89:11:c8:ba:f2:ed:40:9f:ee:
                    af:93:cf:9c:c5:3e:8a:4f:5e:93:49:97:cd:e2:b5:
                    cf:52:a0:59:87:ad:58:53:16:b5:ee:09:d9:6a:c9:
                    02:b9:d4:34:4b:80:d6:a9:dd:4a:36:24:eb:5f:aa:
                    06:7c:5a:58:b6:5a:25:b2:75:44:1e:df:d8:98:38:
                    aa:41:10:2f:13:d1:6b:66:c4:41:e6:c2:67:98:29:
                    ed:7a:80:90:80:be:e2:dd:30:df:27:26:f3:c4:97:
                    2c:bf:7b:6b:de:bd:ef:23:f0:c8:04:f6:41:40:6b:
                    b6:25:ed:4d:01:3d:14:6d:d6:4a:6b:29:29:aa:11:
                    ea:61:c5:22:00:75:13:dc:bc:cc:5f:8d:01:0c:f7:
                    dd:43:74:1f:23:74:88:71:39:a3:d8:53:51:7d:2d:
                    78:87:3e:5c:e5:10:64:6a:73:35:87:04:8e:7d:40:
                    90:47:c7:19:28:72:6e:6e:85:c1:94:89:5e:8a:cc:
                    97:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8B:CA:D4:7C:54:CE:9F:CC:DA:9D:76:02:26:89:30:8F:BD:97:2C
            X509v3 Authority Key Identifier:
                keyid:1B:AF:82:51:D1:A1:3F:41:88:06:0A:B1:9A:03:0D:36:CA:A7:AB:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:c8:1c:27:c3:2f:79:ff:f4:f4:43:a5:f6:cd:72:7a:a8:ae:
         97:95:8a:b3:67:a3:e9:0b:6a:7e:bb:fb:4c:dc:48:49:5b:39:
         ee:02:0c:86:66:ef:ab:49:db:2d:9c:42:6e:94:a8:14:45:a7:
         4a:47:c4:69:5b:43:d7:3b:8e:00:66:f5:b9:8b:2d:0e:28:88:
         1c:bf:4a:93:de:0f:dc:fc:08:35:00:17:dd:de:5f:ac:af:cc:
         0d:5f:32:c3:d0:8d:c1:a6:4c:29:e2:e3:ee:7d:2b:69:48:41:
         ce:f0:47:19:c5:9c:a3:81:e3:c2:f3:04:c5:75:61:b5:3a:d6:
         13:28:04:60:18:bd:bf:02:b6:31:a7:5f:a8:6c:5d:7b:8e:97:
         e6:64:86:8d:7b:66:68:63:09:0e:c7:b0:8b:02:e0:ed:bf:66:
         ee:65:fb:d5:f6:66:f4:d8:1e:18:b6:13:cd:08:af:3e:72:ba:
         21:fb:9a:75:ac:ce:ee:c4:5d:aa:71:99:bb:c7:05:a5:74:d2:
         96:e1:1b:ca:a0:bf:67:f8:fa:ab:a5:37:26:c2:43:ce:93:00:
         88:1a:b9:91:90:05:98:71:3b:18:04:33:6a:c1:7e:7c:4f:af:
         4d:c1:a8:db:30:6c:a0:4b:1c:bb:a7:46:4a:aa:69:8b:88:a1:
         82:c1:87:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:41:17 2025 by rpki-client