Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.mft
File:                     Gns-z0RjPh6iTJBhetOXRV505rI.mft (raw, json)
Hash identifier:          A5UvfWF5d7wfRtFV+NurYmrKnsXdArtQpICkanjBAh0=
Subject key identifier:   A7:52:52:75:14:1E:9E:6E:42:6A:83:66:95:F7:19:77:A9:60:77:0A
Authority key identifier: 1A:7B:3E:CF:44:63:3E:1E:A2:4C:90:61:7A:D3:97:45:5E:74:E6:B2
Certificate issuer:       /CN=A91CE9F1/serialNumber=1A7B3ECF44633E1EA24C90617AD397455E74E6B2
Certificate serial:       0109
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gns-z0RjPh6iTJBhetOXRV505rI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.mft
Manifest number:          0106
Signing time:             Wed 09 Apr 2025 03:57:36 +0000
Manifest this update:     Wed 09 Apr 2025 03:57:36 +0000
Manifest next update:     Wed 16 Apr 2025 03:57:36 +0000
Files and hashes:         1: Gns-z0RjPh6iTJBhetOXRV505rI.crl (hash: jU2I0hExYmltt9TEAaUtA7RFMTKWKtTRFp4jOmlY9Bk=)
                          2: 398B4EEE875E11EEBCAB2514C4F9AE02.roa (hash: uXbJ5eievhRi1JcELWkz+fcnXhb/y0aWhBNoVIZNw4s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.crl
                          rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gns-z0RjPh6iTJBhetOXRV505rI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Apr 2025 03:57:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE9F1
        Validity
            Not Before: Apr  9 03:57:36 2025 GMT
            Not After : Apr 16 03:57:36 2025 GMT
        Subject: CN=67f5f030-c0ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:69:d9:14:7e:fc:e8:07:cc:f4:5f:14:bf:29:
                    91:0e:30:7f:c3:dd:2f:99:41:02:c7:71:3a:82:2b:
                    84:00:01:f9:27:9c:8a:07:3f:9d:33:21:50:a0:c9:
                    e4:3a:e1:6f:ed:4e:f9:95:37:5b:12:2b:46:d7:54:
                    5c:d6:38:1a:49:4c:bc:99:8c:0e:2d:97:4d:f7:4d:
                    07:c1:8e:07:cc:72:de:0a:ae:e0:c4:7c:0d:2f:9c:
                    a2:40:75:3f:84:18:98:97:74:dd:b6:b0:eb:8a:80:
                    1e:b7:3d:41:6a:76:46:2d:c0:e3:be:14:53:8f:87:
                    0c:fb:26:c0:95:a5:a8:13:83:e4:a9:3c:60:83:6a:
                    12:19:b5:01:66:1a:b0:8c:4f:cb:c4:ea:3d:18:8a:
                    96:58:76:4c:aa:af:0e:80:4e:91:0e:d5:54:d8:43:
                    a5:60:0b:6f:de:37:7e:91:9a:79:3c:6b:51:29:e0:
                    3f:6a:f6:88:99:26:a1:be:e3:94:9e:3d:eb:df:71:
                    e2:75:88:46:26:26:b9:d4:3e:c9:69:cd:cc:eb:17:
                    db:bc:f6:32:54:69:53:99:64:d4:f6:18:4b:38:0c:
                    9c:59:a0:48:6f:0d:64:9a:40:4e:de:38:d0:b1:fd:
                    4a:be:d3:4c:bc:23:32:53:9f:50:01:56:46:a1:86:
                    5f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:52:52:75:14:1E:9E:6E:42:6A:83:66:95:F7:19:77:A9:60:77:0A
            X509v3 Authority Key Identifier:
                keyid:1A:7B:3E:CF:44:63:3E:1E:A2:4C:90:61:7A:D3:97:45:5E:74:E6:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gns-z0RjPh6iTJBhetOXRV505rI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE9F1/EE695FE6875D11EE8F489913C4F9AE02/Gns-z0RjPh6iTJBhetOXRV505rI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:58:c3:56:e1:80:ce:41:63:00:34:a8:2d:f6:e8:9f:60:6b:
         8e:80:aa:ee:e3:f3:a6:3f:da:30:a3:ea:85:f0:cb:7f:51:2a:
         bc:65:82:69:51:97:52:b7:bf:a2:06:31:aa:45:32:4e:7f:f2:
         c2:25:9a:4b:87:2f:0e:eb:92:0f:52:83:7f:13:ba:19:45:72:
         8e:e0:e8:5f:06:ef:87:0d:06:c5:ce:66:26:9e:a7:12:f8:d9:
         9e:60:63:04:46:13:e4:5f:0f:1a:f6:11:06:76:0c:94:e5:fa:
         e4:da:05:e3:3a:fa:26:6e:88:be:07:7c:0b:e6:b6:28:71:c3:
         ae:39:b9:59:4d:21:a2:f3:0f:ba:9e:05:0b:d2:40:75:e3:0e:
         c8:c7:16:fd:c9:63:3b:d8:d2:a3:90:83:1a:f6:6c:33:6c:6d:
         1b:f5:c3:e2:9a:a7:cb:d9:6b:b7:8f:8f:c8:91:34:57:4f:76:
         63:68:49:e7:7d:11:0d:d8:ef:6c:94:ae:f2:a3:94:53:49:6b:
         9a:b9:ab:24:37:39:b5:88:2b:fc:fb:43:b6:46:97:3f:7e:ba:
         40:13:2b:df:fe:3e:3c:39:1a:99:c3:2f:8d:78:79:08:82:54:
         96:ab:51:21:44:a6:14:bb:57:be:bc:0d:f1:1f:50:f7:10:f8:
         87:4c:86:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:25:02 2025 by rpki-client