Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft
File:                     GWzuJffRt-pwjOGIczcUM5LORxw.mft (raw, json)
Hash identifier:          FvCWoMtKiZ/TPcFw+7Uu1vd5gKaJFCsbudLHC6bqzMI=
Subject key identifier:   D4:60:B4:67:17:0A:68:61:00:B3:D7:85:EA:6E:B9:CE:1A:73:0E:6E
Authority key identifier: 19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C
Certificate issuer:       /CN=A9154340/serialNumber=196CEE25F7D1B7EA708CE1887337143392CE471C
Certificate serial:       062B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft
Manifest number:          0625
Signing time:             Sun 20 Jul 2025 22:44:25 +0000
Manifest this update:     Sun 20 Jul 2025 22:44:24 +0000
Manifest next update:     Sun 27 Jul 2025 22:44:24 +0000
Files and hashes:         1: GWzuJffRt-pwjOGIczcUM5LORxw.crl (hash: /JnNPCYBHZ770ULeCAl7R4DRDDwvD4J0XALQSkqehVQ=)
                          2: 8BF559B2A70111EBBAA7C612C4F9AE02.roa (hash: f8Wgv+IoxprOJRGqIQDg8nNXDjXWODO4WSnYU8FiMVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.crl
                          rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 22:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1579 (0x62b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154340, serialNumber=196CEE25F7D1B7EA708CE1887337143392CE471C
        Validity
            Not Before: Jul 20 22:44:24 2025 GMT
            Not After : Jul 27 22:44:24 2025 GMT
        Subject: CN=687d7148-295d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d2:7e:a2:4f:56:b0:58:a2:1b:bd:d2:17:57:
                    bd:23:73:e2:ab:ed:63:e4:79:66:0e:78:e7:e5:dc:
                    3a:01:58:3e:e7:66:67:a9:20:b6:62:e4:41:3f:f0:
                    11:03:9c:ae:de:8a:70:56:42:cf:7e:38:52:70:ce:
                    27:b4:3e:f5:5f:57:a0:18:3f:66:8f:62:77:ca:a3:
                    89:03:31:58:7c:3f:26:7b:70:5e:6d:a4:e6:d8:f6:
                    7c:70:22:98:eb:cc:15:05:e2:ff:c0:65:ed:34:12:
                    c3:03:9e:d3:5e:6b:82:25:90:f7:0f:aa:4d:a5:d6:
                    46:1f:58:2a:fa:58:35:34:f2:60:b9:24:80:49:69:
                    6c:66:89:10:31:25:22:26:f9:db:ce:d6:c0:d7:a4:
                    f1:29:9b:24:01:9b:bb:2a:e6:0b:8d:4c:b6:e8:66:
                    c1:0a:df:4d:65:c0:e5:6a:a1:40:53:14:77:f8:ba:
                    9c:fc:19:7a:23:ae:80:e3:46:fc:4c:52:b1:b2:cc:
                    08:ff:36:fc:6e:f7:95:49:45:4e:3f:bf:f7:24:04:
                    48:f2:09:92:d2:9c:68:34:18:e0:dc:d2:ac:bd:89:
                    50:67:40:61:ff:bc:b4:1c:72:de:63:4b:e1:14:60:
                    d2:c6:53:2c:24:cb:38:0b:96:23:0d:eb:4c:3c:5d:
                    e0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:60:B4:67:17:0A:68:61:00:B3:D7:85:EA:6E:B9:CE:1A:73:0E:6E
            X509v3 Authority Key Identifier:
                keyid:19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:15:86:fd:3c:88:26:3f:68:15:74:7a:eb:4e:87:df:48:b3:
         91:ee:e6:0b:34:d5:d5:56:0b:9a:98:14:bf:14:68:e6:ca:5d:
         57:3a:58:96:6f:c7:2a:94:47:49:de:7a:54:48:27:29:83:db:
         c2:f0:d7:cb:24:a3:8e:c6:c4:fd:0d:fb:62:44:2e:16:44:4e:
         94:b0:69:34:93:5f:95:cc:8a:5d:70:8a:08:d9:d8:17:24:02:
         b1:86:ae:cf:10:5b:18:19:25:b5:31:03:83:45:06:a2:44:ab:
         f9:2a:d5:7e:69:0f:00:25:f8:fa:e3:d4:20:61:76:37:c6:14:
         7d:14:15:03:fe:8f:7e:ad:74:a5:ce:a7:18:02:e6:16:5c:d4:
         8b:7d:e4:0c:9c:a7:6a:f8:70:ec:23:e9:57:46:59:cd:f7:08:
         e5:bf:06:c4:89:91:3b:30:ea:a7:2b:58:4b:06:45:d5:7b:99:
         a9:5e:90:41:62:41:e3:0f:11:f0:fe:53:37:80:cc:dd:b7:06:
         b9:ab:8a:11:a1:b8:c8:5e:1f:28:7a:a4:7d:d0:45:1e:ef:2c:
         09:69:af:dc:69:22:c7:ed:85:6d:2f:05:75:2e:b3:63:a4:c3:
         57:a1:29:c2:f1:8d:8d:70:47:50:7f:fc:84:55:1f:61:94:b3:
         f7:88:62:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 20:30:54 2025 by rpki-client