Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft
File:                     G4nCebixZmmNK-SGc-zMKwgTPjk.mft (raw, json)
Hash identifier:          0pjtxVS60t756xmAqkoNiJ30cbKcwaH5d6GF1e8C1Uw=
Subject key identifier:   C9:AB:C3:38:B6:6C:AE:FC:91:63:D7:CE:B0:76:82:23:B7:09:42:2F
Authority key identifier: 1B:89:C2:79:B8:B1:66:69:8D:2B:E4:86:73:EC:CC:2B:08:13:3E:39
Certificate issuer:       /CN=A91FCEB1/serialNumber=1B89C279B8B166698D2BE48673ECCC2B08133E39
Certificate serial:       06E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft
Manifest number:          2754
Signing time:             Fri 04 Apr 2025 16:01:20 +0000
Manifest this update:     Fri 04 Apr 2025 16:01:20 +0000
Manifest next update:     Fri 11 Apr 2025 16:01:20 +0000
Files and hashes:         1: G4nCebixZmmNK-SGc-zMKwgTPjk.crl (hash: YSALJ3jN44cTynVX+m0wMDwrVjV0GpnMoJFMObFRtDo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.crl
                          rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 16:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1766 (0x6e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCEB1
        Validity
            Not Before: Apr  4 16:01:20 2025 GMT
            Not After : Apr 11 16:01:20 2025 GMT
        Subject: CN=67f00250-d926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8d:bd:2a:3c:8c:f1:ee:42:83:a6:42:36:7b:
                    87:ad:a5:07:8c:d8:d9:24:47:7c:23:01:57:43:be:
                    8d:b7:44:e8:7f:b0:25:4f:d9:3b:5f:f6:e1:7b:fa:
                    c2:4b:46:63:79:1e:12:f4:76:74:95:0b:34:52:6b:
                    ce:b6:82:ca:05:bd:1e:fa:f3:55:73:86:9a:fa:33:
                    5d:46:7f:0b:e9:1b:05:ea:5f:f2:f0:64:7c:b8:bb:
                    da:97:ce:43:d9:92:57:e4:d5:d4:a9:76:f2:e4:27:
                    69:ad:3b:35:85:a8:e5:39:32:40:25:6e:38:61:57:
                    25:0b:e4:71:42:91:9a:e8:28:44:a6:20:ff:85:fe:
                    f6:e4:a5:44:bf:ae:72:c6:e4:0b:e2:60:51:e9:89:
                    07:e0:02:b1:a6:e7:9d:c3:10:5f:5e:20:56:f0:21:
                    f6:34:7d:a0:6b:04:5f:71:a8:ea:07:83:35:25:86:
                    16:83:42:af:cd:74:60:7d:9b:1a:4d:3f:ba:a2:2d:
                    e8:84:30:5e:08:90:65:56:c0:b9:c7:32:f1:28:2a:
                    f9:5e:ea:2b:6d:1a:43:da:5f:71:e2:2a:5b:e0:fc:
                    6a:03:64:10:15:c4:35:7e:df:78:5e:9a:53:15:5d:
                    62:fa:72:e1:87:ea:c0:e0:e7:10:9e:41:12:a3:64:
                    d7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AB:C3:38:B6:6C:AE:FC:91:63:D7:CE:B0:76:82:23:B7:09:42:2F
            X509v3 Authority Key Identifier:
                keyid:1B:89:C2:79:B8:B1:66:69:8D:2B:E4:86:73:EC:CC:2B:08:13:3E:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d1:71:e3:ef:3c:18:f1:32:e9:cf:66:bf:ea:27:35:b0:14:
         e5:38:d3:97:d3:54:af:3b:be:b2:1b:f9:a7:ea:d9:88:d8:e0:
         a2:51:df:e1:ad:b1:5c:78:4c:6c:aa:c5:38:83:34:cb:56:20:
         70:bb:af:1b:36:1e:b6:2a:79:de:89:ac:90:f8:2e:ae:f5:e6:
         02:63:ba:33:da:99:fe:f5:ea:a7:45:9b:f9:bc:14:dd:ad:dc:
         ed:6a:5e:09:e7:2f:a6:d9:42:dc:b4:b8:29:d1:13:88:b4:eb:
         e0:82:6b:00:93:38:de:fe:50:ce:61:99:5a:6f:37:55:5b:06:
         cf:b8:38:cf:36:37:b8:c7:f6:f5:46:f6:7d:b5:70:94:2c:bd:
         1c:36:03:ce:55:99:6d:6e:3d:b5:6b:53:ac:c2:c2:d2:0e:1c:
         54:75:ac:1d:d6:f4:05:4f:cf:50:16:1d:e8:66:cc:4b:7c:c4:
         cd:57:c1:27:65:5b:bd:f3:09:42:04:63:b5:94:c6:3a:df:6a:
         08:36:1d:ea:ac:b1:c6:e3:7e:b1:33:6f:dc:bc:e6:6a:f5:c0:
         14:0b:1d:1f:13:e3:53:57:fe:a6:41:75:05:d7:58:c8:ab:9c:
         ea:1b:83:85:b7:39:c7:82:c5:52:5a:ca:76:76:b2:32:32:f1:
         55:cb:17:be
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkNFQjExMTAvBgNVBAUTKDFCODlDMjc5QjhCMTY2Njk4RDJCRTQ4NjczRUNDQzJC
MDgxMzNFMzkwHhcNMjUwNDA0MTYwMTIwWhcNMjUwNDExMTYwMTIwWjAYMRYwFAYD
VQQDEw02N2YwMDI1MC1kOTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyo29KjyM8e5Cg6ZCNnuHraUHjNjZJEd8IwFXQ76Nt0Tof7AlT9k7X/bhe/rC
S0ZjeR4S9HZ0lQs0UmvOtoLKBb0e+vNVc4aa+jNdRn8L6RsF6l/y8GR8uLval85D
2ZJX5NXUqXby5CdprTs1hajlOTJAJW44YVclC+RxQpGa6ChEpiD/hf725KVEv65y
xuQL4mBR6YkH4AKxpuedwxBfXiBW8CH2NH2gawRfcajqB4M1JYYWg0KvzXRgfZsa
TT+6oi3ohDBeCJBlVsC5xzLxKCr5XuorbRpD2l9x4ipb4PxqA2QQFcQ1ft94XppT
FV1i+nLhh+rA4OcQnkESo2TX7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmrwzi2
bK78kWPXzrB2giO3CUIvMB8GA1UdIwQYMBaAFBuJwnm4sWZpjSvkhnPszCsIEz45
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4
QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9HNG5DZWJpeFptbU5LLVNHYy16TUt3Z1RQ
amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0c0bkNlYml4Wm1tTkstU0djLXpNS3dnVFBqay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9HNG5DZWJpeFpt
bU5LLVNHYy16TUt3Z1RQamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB70XHj7zwY8TLpz2a/6ic1sBTlONOX01SvO76yG/mn6tmI2OCiUd/h
rbFceExsqsU4gzTLViBwu68bNh62KnneiayQ+C6u9eYCY7oz2pn+9eqnRZv5vBTd
rdztal4J5y+m2ULctLgp0ROItOvggmsAkzje/lDOYZlabzdVWwbPuDjPNje4x/b1
RvZ9tXCULL0cNgPOVZltbj21a1OswsLSDhxUdawd1vQFT89QFh3oZsxLfMTNV8En
ZVu98wlCBGO1lMY632oINh3qrLHG436xM2/cvOZq9cAUCx0fE+NTV/6mQXUF11jI
q5zqG4OFtznHgsVSWsp2drIyMvFVyxe+
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:46:16 2025 by rpki-client