Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AA66/53257002C90D11EC86B03A56C4F9AE02/GCeeGIouul_yo6QQrTod5NUfD-U.mft
File:                     GCeeGIouul_yo6QQrTod5NUfD-U.mft (raw, json)
Hash identifier:          9zQ2NSsotcFj9V4p7H1/3xBS40mV8Uh6+rX97edEEOk=
Subject key identifier:   7E:E9:1D:50:60:07:55:71:99:9E:36:FA:E2:46:5A:F0:CC:48:7B:BB
Authority key identifier: 18:27:9E:18:8A:2E:BA:5F:F2:A3:A4:10:AD:3A:1D:E4:D5:1F:0F:E5
Certificate issuer:       /CN=A919AA66/serialNumber=18279E188A2EBA5FF2A3A410AD3A1DE4D51F0FE5
Certificate serial:       0345
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GCeeGIouul_yo6QQrTod5NUfD-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AA66/53257002C90D11EC86B03A56C4F9AE02/GCeeGIouul_yo6QQrTod5NUfD-U.mft
Manifest number:          0340
Signing time:             Mon 21 Jul 2025 01:19:36 +0000
Manifest this update:     Mon 21 Jul 2025 01:19:35 +0000
Manifest next update:     Mon 28 Jul 2025 01:19:35 +0000
Files and hashes:         1: GCeeGIouul_yo6QQrTod5NUfD-U.crl (hash: cmWwkthiBttG+88nhoJbD5aW9O0ArqvdqlWLHG8GXw8=)
                          2: 46F5C9A0C91011ECAAEE7659C4F9AE02.roa (hash: +aZwpPqH9h+M+5PCraNJL4E3XYeoTeL9uYXhGFbxVXI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AA66/53257002C90D11EC86B03A56C4F9AE02/GCeeGIouul_yo6QQrTod5NUfD-U.crl
                          rsync://rpki.apnic.net/member_repository/A919AA66/53257002C90D11EC86B03A56C4F9AE02/GCeeGIouul_yo6QQrTod5NUfD-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GCeeGIouul_yo6QQrTod5NUfD-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 01:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 837 (0x345)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AA66, serialNumber=18279E188A2EBA5FF2A3A410AD3A1DE4D51F0FE5
        Validity
            Not Before: Jul 21 01:19:35 2025 GMT
            Not After : Jul 28 01:19:35 2025 GMT
        Subject: CN=687d95a8-8b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3d:29:3f:09:11:fc:d7:f8:20:39:23:3c:12:
                    f9:ec:f0:1d:9f:2c:07:b6:8e:70:39:7c:42:71:98:
                    dc:81:98:e1:ac:93:7d:3a:72:df:02:b0:bb:69:bf:
                    c2:89:72:39:3a:61:c3:2d:a1:9f:ba:2c:63:b9:b9:
                    ae:6f:53:55:65:e5:85:26:f4:cd:42:16:53:84:e4:
                    e2:da:66:45:a2:5a:a3:b1:29:95:43:8f:3e:34:a3:
                    97:ee:bb:43:16:38:87:dd:77:48:cf:22:a4:14:af:
                    f0:11:b9:0a:d1:c0:87:45:d3:8e:09:f7:fa:93:37:
                    ad:c5:53:34:a7:ea:8c:27:a9:29:09:40:93:3d:dd:
                    93:1d:57:b8:04:b3:49:d9:0f:82:2a:e0:0b:18:e5:
                    7d:1a:1d:28:a2:e9:11:bc:21:8f:1c:67:f4:17:d4:
                    a2:78:67:f1:24:a8:3d:9e:14:a5:63:75:03:0a:9b:
                    c3:40:27:6d:f4:bc:fe:e9:01:d6:2c:8f:69:80:75:
                    cf:34:f4:0e:f5:71:53:bf:0c:09:0e:c8:12:9f:10:
                    a1:04:81:f6:80:db:3b:37:04:38:c3:f0:57:76:fa:
                    94:c4:61:70:4f:07:af:61:6a:ec:18:72:59:8f:f1:
                    cf:ff:61:15:52:af:03:e6:d7:90:91:52:53:2f:9f:
                    2f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E9:1D:50:60:07:55:71:99:9E:36:FA:E2:46:5A:F0:CC:48:7B:BB
            X509v3 Authority Key Identifier:
                keyid:18:27:9E:18:8A:2E:BA:5F:F2:A3:A4:10:AD:3A:1D:E4:D5:1F:0F:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AA66/53257002C90D11EC86B03A56C4F9AE02/GCeeGIouul_yo6QQrTod5NUfD-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GCeeGIouul_yo6QQrTod5NUfD-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AA66/53257002C90D11EC86B03A56C4F9AE02/GCeeGIouul_yo6QQrTod5NUfD-U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:a1:9a:20:86:3f:91:82:e2:d7:4c:85:6d:5c:2c:c4:8e:08:
         35:f8:e8:84:27:ff:5b:55:00:40:ec:18:98:4f:c6:49:11:ac:
         69:7d:e4:c0:e5:32:3b:35:1b:af:e3:da:4e:1c:1b:9c:2c:ca:
         f7:2b:8f:2c:1c:4a:ee:20:43:75:96:28:77:5f:ff:da:c9:98:
         e7:b4:e3:99:c0:a0:ed:33:a8:29:21:c3:05:b6:4a:86:5d:cf:
         71:7c:b9:63:ef:c3:6a:24:b2:a8:1b:d5:eb:34:76:ea:f8:79:
         ce:0d:9a:ff:52:72:9a:eb:ba:ae:41:80:6e:80:21:76:f0:3a:
         77:a5:6b:54:52:73:51:93:68:85:f9:ac:94:a8:c7:b7:db:dc:
         dc:a4:71:07:70:57:d9:fc:04:77:4f:81:09:d5:2f:fb:95:4d:
         0d:b0:ee:61:b4:15:67:55:c1:72:4a:96:c8:3c:27:ba:95:92:
         6a:12:11:78:bb:b3:83:bd:17:fd:48:a2:d8:0a:dd:1d:8c:c9:
         d9:8f:99:60:cb:f6:90:a6:d0:33:d9:7e:ad:69:a0:ba:32:df:
         f2:09:14:29:2c:2a:2b:4d:88:66:ab:a5:eb:a6:23:32:5b:f7:
         39:32:e7:3e:89:1f:fe:e8:e9:d3:8d:bd:94:5a:fa:22:4c:a2:
         df:4c:0f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 20:28:26 2025 by rpki-client