Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft
File:                     gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft (raw, json)
Hash identifier:          Ojy2O1nLjA55Wywu9fmgZDad8MVXDm9ERkiWTKLrj0A=
Subject key identifier:   76:15:DC:C8:84:D6:98:40:EC:5B:3F:A8:C2:56:45:D8:4E:B2:D6:CE
Authority key identifier: 82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24
Certificate issuer:       /CN=A91196F9/serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24
Certificate serial:       BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft
Manifest number:          BC
Signing time:             Wed 11 Jun 2025 05:16:22 +0000
Manifest this update:     Wed 11 Jun 2025 05:16:22 +0000
Manifest next update:     Wed 18 Jun 2025 05:16:22 +0000
Files and hashes:         1: gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl (hash: fhYniAMKyj0ulfJJVebIgHNKPBICJ+TrcyAJmowxNEc=)
                          2: CFD2FAA62A2811EF8313971CC4F9AE02.roa (hash: jL8Qld1nGy1S0e00Jq1twluniIVDhFlf+t43ZdzL/60=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl
                          rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 05:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91196F9, serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24
        Validity
            Not Before: Jun 11 05:16:22 2025 GMT
            Not After : Jun 18 05:16:22 2025 GMT
        Subject: CN=68491126-6f41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0a:ec:76:8d:47:98:80:02:5b:08:3e:03:fb:
                    77:8d:df:fc:17:79:eb:41:14:7e:d5:2a:51:a8:5e:
                    81:f3:92:71:16:3a:b3:85:84:75:87:bc:40:8e:a1:
                    27:a4:75:10:27:4f:50:cd:74:ff:af:c1:3a:cb:4f:
                    7b:46:a3:57:9f:51:6d:03:f3:51:bb:68:5a:f7:53:
                    ee:30:50:94:44:ca:ce:95:98:ad:0d:61:ae:c4:2a:
                    12:93:43:f7:f4:e2:5c:f1:d9:ac:7d:e7:ce:99:e3:
                    d3:a8:71:d4:fd:a4:35:13:8c:b4:6d:69:f4:ea:3f:
                    7f:30:2c:99:e1:47:7e:f0:af:17:8c:4e:e6:80:9d:
                    20:e9:2e:15:4c:0c:62:c7:b9:9f:0e:64:42:0e:eb:
                    0c:ae:2a:e1:31:dd:05:38:30:9c:6b:e5:a1:38:85:
                    c2:10:75:54:49:1f:fd:c3:83:b0:9f:4e:4d:89:38:
                    7e:cd:0b:36:58:67:8e:a7:1e:a7:ec:31:c2:1b:6f:
                    15:bb:4e:5c:7f:14:5b:9e:22:a2:a8:ad:c6:82:84:
                    8d:a9:08:65:e0:0b:36:df:32:01:81:f6:1a:de:01:
                    f3:94:cb:3e:db:10:f5:70:44:99:cb:cb:b4:84:f1:
                    12:7d:b8:1f:29:44:71:c0:42:76:76:80:b5:c7:bd:
                    4a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:15:DC:C8:84:D6:98:40:EC:5B:3F:A8:C2:56:45:D8:4E:B2:D6:CE
            X509v3 Authority Key Identifier:
                keyid:82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:2b:18:ec:84:cd:f2:35:3e:64:75:ac:87:8b:30:b0:0c:25:
         3e:af:15:1c:95:d4:3b:46:2c:b8:1e:fe:2d:20:ac:75:1e:61:
         12:e6:61:55:a9:70:f1:4a:57:b1:dd:01:2f:70:c1:02:81:d8:
         e7:e5:3e:2a:01:a4:b5:90:83:8c:81:66:08:0a:05:4c:6f:d2:
         60:a7:61:a9:59:2b:86:03:7e:34:9b:c4:7d:20:d8:0e:8e:20:
         b3:50:f0:64:35:f1:dc:8d:a6:6f:b0:d9:14:0c:74:db:36:72:
         b4:ef:d1:9f:b5:24:a2:47:fa:94:d9:5f:ec:92:05:ed:ef:90:
         0f:10:18:06:30:51:a6:a9:be:5b:8e:4d:5d:8e:d9:a7:28:71:
         6b:85:50:6d:46:de:66:39:43:84:8e:aa:c1:18:2e:e4:53:18:
         27:ed:c1:0c:e0:f7:a2:28:c8:59:89:e0:09:fc:62:5c:b8:3c:
         48:a4:ba:62:2c:3d:f3:fb:72:44:de:75:fc:56:79:9d:5a:23:
         d8:40:9f:51:b5:e4:10:8b:98:1f:6b:b0:e5:3f:9d:83:45:83:
         76:56:1a:3a:8a:19:93:20:e6:b3:8f:d6:2f:8e:f3:60:8f:7d:
         fa:6f:93:b8:14:67:91:35:08:34:04:c8:2b:c8:12:76:25:70:
         39:d5:b7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:20:32 2025 by rpki-client