Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft
File:                     gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft (raw, json)
Hash identifier:          QgFj7U7RF/lBP7oanPohGNFwn8I6h/acY+7GmAayGcg=
Subject key identifier:   C2:64:C8:32:59:FF:76:F3:DA:0B:B6:77:A7:54:75:35:7B:E6:9E:90
Authority key identifier: 82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24
Certificate issuer:       /CN=A91196F9/serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24
Certificate serial:       BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft
Manifest number:          BB
Signing time:             Mon 09 Jun 2025 04:53:36 +0000
Manifest this update:     Mon 09 Jun 2025 04:53:36 +0000
Manifest next update:     Mon 16 Jun 2025 04:53:36 +0000
Files and hashes:         1: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl (hash: eMwlYA6RCqXvEG8TA/Oh9hGyO5HfodMidOuUuXSCwbk=)
                          2: CFD2FAA62A2811EF8313971CC4F9AE02.roa (hash: jL8Qld1nGy1S0e00Jq1twluniIVDhFlf+t43ZdzL/60=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl
                          rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Jun 2025 04:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91196F9, serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24
        Validity
            Not Before: Jun  9 04:53:36 2025 GMT
            Not After : Jun 16 04:53:36 2025 GMT
        Subject: CN=684668d0-72c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:35:e9:5d:a8:64:ae:22:5c:f1:4b:83:a9:5c:
                    f3:d1:d2:66:c7:ad:e0:e2:75:e8:dd:6b:28:67:27:
                    a9:5f:6e:34:cb:4f:a0:e8:f1:f1:84:54:8a:d4:fc:
                    ae:b7:8f:8a:0f:64:eb:b1:f3:c6:85:a3:6c:d1:f6:
                    a1:95:28:6b:e0:a3:6b:8d:3a:28:6e:07:5c:88:20:
                    21:00:00:1a:fc:6f:0b:2e:08:1d:10:c8:73:b1:e7:
                    e9:58:17:fd:a1:1b:33:0b:c0:6b:7d:69:e2:ae:7e:
                    6b:45:aa:d8:7f:a1:54:64:c9:1b:bd:2a:7e:f3:d2:
                    1d:f0:e9:45:db:97:01:45:93:ad:af:9a:53:9c:b3:
                    0d:bd:61:1b:b3:a5:e8:0c:6d:74:f5:16:49:cd:db:
                    58:7a:07:f2:5c:89:29:5e:ee:3c:31:16:b2:ee:25:
                    ef:05:07:0e:f7:b6:82:e2:9b:87:23:89:3f:b3:5e:
                    fe:4e:f0:9d:43:b7:b9:43:fd:b9:33:1b:05:9d:14:
                    bd:8f:70:c3:e1:e3:66:c1:b5:77:63:50:31:12:79:
                    8a:49:f3:dc:01:e8:3d:e6:29:ea:0a:6c:56:69:30:
                    51:8b:45:53:32:9c:d3:0e:a0:3f:9b:10:c1:16:9c:
                    69:ca:12:e4:70:6e:ff:7c:e7:43:d5:9d:25:4f:eb:
                    c5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:64:C8:32:59:FF:76:F3:DA:0B:B6:77:A7:54:75:35:7B:E6:9E:90
            X509v3 Authority Key Identifier:
                keyid:82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:42:33:c6:7c:8b:ae:19:9a:62:60:f2:bb:f5:b3:fe:b2:69:
         ea:c9:f9:e2:52:0a:94:9a:6d:a6:81:d6:df:50:58:95:fb:62:
         a7:98:e9:ec:c5:d9:df:f3:f4:66:7c:e0:31:da:ad:57:e7:a0:
         21:2f:27:f3:33:b3:1a:de:54:e4:20:af:0e:d7:ff:1b:de:53:
         65:23:84:48:61:b6:c6:0e:d7:8d:9f:5f:0c:88:40:28:36:19:
         6b:15:13:d9:27:08:7d:a1:2b:26:39:28:69:bf:ed:01:e1:e8:
         92:4d:5c:8a:9c:9c:7e:16:e8:57:fa:aa:90:ed:3a:f0:1f:25:
         88:6d:80:70:17:72:91:01:30:86:d8:df:5f:cf:bd:27:22:de:
         af:36:17:10:8c:8b:14:1d:7c:e9:55:fa:14:89:0d:5b:60:fa:
         8d:01:61:7f:5a:a9:a4:e5:f8:e6:ff:e6:4b:d0:f1:93:a6:70:
         be:2d:50:da:1d:21:46:77:6a:e3:05:b8:5f:a4:55:a2:8c:e9:
         34:21:1d:81:01:25:37:d1:28:d6:16:19:2a:7b:1f:d9:1a:73:
         0f:1b:0b:4e:28:19:52:ad:91:1c:73:43:07:72:13:d6:1f:52:
         dd:ba:51:29:89:e0:c6:5c:58:84:ed:f3:c4:e8:5b:10:50:9e:
         e0:10:6b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:44:36 2025 by rpki-client