Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft
File:                     GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft (raw, json)
Hash identifier:          ULeOoo1Pme2Uj7t6TGUjLnS7PmUoj/ZYDIf0XfF/omE=
Subject key identifier:   44:05:8B:EB:19:68:31:48:07:C1:9E:80:44:90:6D:97:B3:0C:80:79
Authority key identifier: 19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9
Certificate issuer:       /CN=A91DC931/serialNumber=198C4364CF032C730D9585834982096D50A752C9
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft
Manifest number:          F2
Signing time:             Sat 19 Jul 2025 05:30:45 +0000
Manifest this update:     Sat 19 Jul 2025 05:30:44 +0000
Manifest next update:     Sat 26 Jul 2025 05:30:44 +0000
Files and hashes:         1: GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl (hash: 3/7fz/cCG7Tg3dSxW3FeGRtP4iJriolJ/KA0kzBqI7c=)
                          2: 24EF88B8F56011EEACB7CB3CC4F9AE02.roa (hash: lDcIajuaLqzNHKrvaw5xtEMBD4ZDOs+n5ffXRVCGNBU=)
                          3: 2575F02EF56011EEACB7CB3CC4F9AE02.roa (hash: KFC3fNOGbggZ+0GBW6U9NwCDNNl5aIjRFI0d9Wv5l3w=)
                          4: BBE9AEC0F55F11EEB6F1153CC4F9AE02.roa (hash: FpsujdeSIYLDxosFYlUPrmKqSq5TJ8BXCM8BjJrvMC0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl
                          rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 05:30:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC931, serialNumber=198C4364CF032C730D9585834982096D50A752C9
        Validity
            Not Before: Jul 19 05:30:44 2025 GMT
            Not After : Jul 26 05:30:44 2025 GMT
        Subject: CN=687b2d85-d5c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a0:2a:29:04:6c:75:99:01:6e:27:91:bb:df:
                    c2:66:46:6b:16:10:d5:8f:a3:5a:4c:ac:a7:c6:ba:
                    0e:a6:4f:50:82:32:fa:c6:56:d5:64:66:cd:f3:ad:
                    8d:3e:dc:8f:27:4a:6e:24:af:91:2e:ee:0f:7b:79:
                    db:c6:82:78:22:90:53:ed:fd:c3:df:7e:49:d1:a9:
                    ff:ac:bf:65:f7:a6:3d:cb:0f:94:dd:4b:e5:d7:e1:
                    15:0e:9c:7a:f9:aa:83:ea:94:71:73:80:fa:04:3e:
                    16:ae:a9:f3:49:0e:8b:d7:13:63:2b:07:3a:fa:09:
                    d5:cb:91:23:51:42:95:d0:de:ff:6c:1c:ef:c3:f7:
                    f0:7f:a8:fc:b8:27:14:1c:e9:85:be:2f:38:ec:61:
                    83:dc:69:39:53:4c:37:53:c8:ee:59:25:f5:7b:b0:
                    fa:37:8d:31:e5:cf:fd:20:fe:a0:9f:03:c1:33:ec:
                    fc:1b:54:81:e1:d3:a6:07:d3:23:23:4d:ae:2c:c9:
                    fc:61:83:2e:30:57:c1:3f:aa:f1:86:e4:73:f9:8e:
                    78:f7:c2:18:a8:e4:f2:71:5f:23:b6:13:0c:4f:13:
                    2b:81:70:32:de:77:cb:24:ae:12:dc:ef:73:63:8e:
                    fe:55:41:c4:6f:7a:f9:92:07:cb:d8:b6:10:51:85:
                    33:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:05:8B:EB:19:68:31:48:07:C1:9E:80:44:90:6D:97:B3:0C:80:79
            X509v3 Authority Key Identifier:
                keyid:19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:83:cc:c4:b9:ae:a0:6b:6c:89:42:bd:44:6f:c8:58:12:dc:
         98:a2:93:19:f5:1a:08:09:5d:4c:18:5c:1b:8d:91:7c:a7:f9:
         fb:54:44:3c:9d:fa:e6:d3:cd:a9:57:87:0d:d7:f8:94:1a:a1:
         e9:2f:0e:79:68:39:c0:e0:a0:01:57:65:3b:b0:cc:62:4f:47:
         d0:a7:4d:84:76:aa:d4:12:d1:32:ae:29:14:7c:0d:5e:45:3e:
         30:e3:18:85:af:68:d4:92:15:b5:be:f2:b2:13:b0:7f:7d:ea:
         53:a4:09:cd:af:a4:1f:8b:e4:6a:20:38:6b:74:22:01:b6:65:
         6b:f2:93:66:ef:32:99:57:39:6d:db:4a:b8:16:50:64:94:ac:
         23:8f:a5:bb:46:31:78:a3:be:65:05:02:dc:57:b6:d0:56:c9:
         3d:27:df:9b:16:92:ed:ef:ae:ec:66:63:62:2c:04:91:05:8b:
         cb:e4:17:60:a9:7f:da:e4:92:96:b9:6c:e2:91:86:0a:6b:15:
         5e:d9:a9:71:49:8f:70:5b:59:d9:5d:18:c0:6b:a0:74:bc:2d:
         0f:10:8f:09:ff:16:28:8f:85:8e:79:f0:e2:2c:10:79:21:68:
         fe:81:c7:5b:e4:42:67:63:cb:c2:a4:df:aa:6f:65:f5:94:98:
         56:9f:2c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:32:20 2025 by rpki-client