Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
File:                     G4GY4pfs-4-1GveWJNO2hKH5tR0.mft (raw, json)
Hash identifier:          in+oiipHLhDNbkjAGuxVS5Hcrx7y1MD6p8Hd1cBUUgg=
Subject key identifier:   73:32:72:47:94:5B:DB:CC:D7:F2:83:08:C0:E7:8E:ED:43:D3:14:F9
Authority key identifier: 1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D
Certificate issuer:       /CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
Certificate serial:       226F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
Manifest number:          2266
Signing time:             Sat 31 May 2025 15:49:56 +0000
Manifest this update:     Sat 31 May 2025 15:49:55 +0000
Manifest next update:     Sat 07 Jun 2025 15:49:55 +0000
Files and hashes:         1: G4GY4pfs-4-1GveWJNO2hKH5tR0.crl (hash: kT8XDzqqmD0zv0c29AcXDwuBnTiYLO7B7S90d5Ul1Hg=)
                          2: EBEA51DC4EE311EFA1615635C4F9AE02.roa (hash: Trb/xXQ89mwzGyAL+1mOumJDf5X3SVH7b+Li/DvO+lE=)
                          3: 27CF6BE84EED11EF8D4BE30CC4F9AE02.roa (hash: vUHNM7b/7rHUhQuKzV89H4uhi15N4fuBRHxCcyjL5as=)
                          4: EDB5F114A63711EF89F3B833C4F9AE02.roa (hash: yRPrheegIm3V93UgDt8N+OL/cPpnwv9rIo76kYVagnE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl
                          rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 15:49:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8815 (0x226f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E47C, serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
        Validity
            Not Before: May 31 15:49:55 2025 GMT
            Not After : Jun  7 15:49:55 2025 GMT
        Subject: CN=683b2524-a8bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:84:03:dd:ac:bf:67:c9:5b:74:56:ce:6e:bb:
                    00:ea:b4:ad:d3:9d:87:b4:33:73:d6:0d:30:e0:a3:
                    f6:d1:a0:8d:74:03:b9:a1:7f:5e:8e:94:f3:00:ad:
                    b7:fe:c0:e8:9c:2d:1f:5c:c2:ac:af:8a:8f:1f:97:
                    e5:64:d1:ea:25:4d:c9:8b:5e:e7:ad:ea:97:ee:8e:
                    0f:6e:0f:f6:6b:b9:56:5d:04:f2:b9:14:d6:c8:90:
                    dc:c3:5d:98:45:85:c9:7b:5e:07:7e:bc:c1:c7:9d:
                    6c:50:cd:a4:4e:41:14:cf:0b:58:15:d7:4c:cb:5e:
                    d7:8c:5e:b6:b8:01:8b:d7:0c:b8:5c:8a:75:d9:59:
                    fa:d3:73:fa:bf:41:7c:c1:ee:35:60:05:20:17:2a:
                    b4:b0:d4:17:3a:4d:ed:85:fd:ce:20:a5:47:10:8b:
                    ec:f9:3f:2f:e2:44:35:69:bb:af:31:cd:c8:16:fa:
                    99:11:c8:3c:76:d9:a5:5f:73:f1:fd:c1:3a:dd:f2:
                    14:bb:88:9e:38:1d:17:bf:96:85:53:a8:71:b3:2a:
                    53:c9:05:f8:0d:6a:58:ff:9e:9d:64:85:da:33:49:
                    8b:a2:a9:f8:d9:08:fd:81:77:53:39:d2:78:c6:a3:
                    70:6b:e5:23:22:20:84:7b:cd:f1:87:cf:9f:3c:14:
                    5c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:32:72:47:94:5B:DB:CC:D7:F2:83:08:C0:E7:8E:ED:43:D3:14:F9
            X509v3 Authority Key Identifier:
                keyid:1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:40:06:a3:c6:1d:5f:83:f3:a2:0c:9c:d8:09:d1:2c:24:a9:
         88:72:e6:89:64:58:57:32:62:81:a0:ce:5c:f6:f9:19:02:08:
         fb:3e:e1:48:ae:9e:00:98:3e:64:e5:16:6d:cc:0d:9b:c8:ed:
         13:06:17:c7:34:57:b0:06:b6:52:a3:f3:4b:9a:88:35:fe:3c:
         58:d2:aa:82:1e:1c:f0:ed:f9:c3:a5:40:6f:6d:9f:cb:f2:55:
         6d:59:d8:42:4a:0f:fe:c4:76:8e:b4:67:78:db:ca:86:7b:90:
         51:db:5e:28:78:d0:e2:94:17:8e:5e:b2:b5:e3:e7:24:e9:cd:
         09:bd:fe:38:65:7c:f4:ff:b4:9d:a2:16:33:79:12:4f:a4:82:
         e9:99:20:39:e6:9e:03:ac:50:d3:d2:1d:db:a7:7c:47:b7:3d:
         33:af:a9:30:1c:10:60:36:4a:a8:1d:7a:94:83:67:90:01:c2:
         c4:6b:f3:9b:d9:1b:aa:b9:35:54:fc:a3:e7:cb:35:6b:aa:c6:
         22:73:50:48:f5:59:42:f5:13:e8:0f:ba:1d:4e:d1:66:94:02:
         2b:9a:c7:35:fe:37:16:a0:9a:db:55:0f:95:66:b6:9e:d8:48:
         18:a5:52:1d:eb:d6:0b:ba:f3:78:c6:3d:da:d4:be:29:11:da:
         80:f5:ce:81
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICIm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUU0N0MxMTAvBgNVBAUTKDFCODE5OEUyOTdFQ0ZCOEZCNTFBRjc5NjI0RDNCNjg0
QTFGOUI1MUQwHhcNMjUwNTMxMTU0OTU1WhcNMjUwNjA3MTU0OTU1WjAYMRYwFAYD
VQQDEw02ODNiMjUyNC1hOGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz4QD3ay/Z8lbdFbObrsA6rSt052HtDNz1g0w4KP20aCNdAO5oX9ejpTzAK23
/sDonC0fXMKsr4qPH5flZNHqJU3Ji17nreqX7o4Pbg/2a7lWXQTyuRTWyJDcw12Y
RYXJe14HfrzBx51sUM2kTkEUzwtYFddMy17XjF62uAGL1wy4XIp12Vn603P6v0F8
we41YAUgFyq0sNQXOk3thf3OIKVHEIvs+T8v4kQ1abuvMc3IFvqZEcg8dtmlX3Px
/cE63fIUu4ieOB0Xv5aFU6hxsypTyQX4DWpY/56dZIXaM0mLoqn42Qj9gXdTOdJ4
xqNwa+UjIiCEe83xh8+fPBRccQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMyckeU
W9vM1/KDCMDnju1D0xT5MB8GA1UdIwQYMBaAFBuBmOKX7PuPtRr3liTTtoSh+bUd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTQ3Qy80N0I1NTk5MkFE
MEYxMUU1Qjk3OEZENTRDNEY5QUUwMi9HNEdZNHBmcy00LTFHdmVXSk5PMmhLSDV0
UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0c0R1k0cGZzLTQtMUd2ZVdKTk8yaEtINXRSMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RTQ3Qy80N0I1NTk5MkFEMEYxMUU1Qjk3OEZENTRDNEY5QUUwMi9HNEdZNHBmcy00
LTFHdmVXSk5PMmhLSDV0UjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDCQAajxh1fg/OiDJzYCdEsJKmIcuaJZFhXMmKBoM5c9vkZAgj7PuFI
rp4AmD5k5RZtzA2byO0TBhfHNFewBrZSo/NLmog1/jxY0qqCHhzw7fnDpUBvbZ/L
8lVtWdhCSg/+xHaOtGd428qGe5BR214oeNDilBeOXrK14+ck6c0Jvf44ZXz0/7Sd
ohYzeRJPpILpmSA55p4DrFDT0h3bp3xHtz0zr6kwHBBgNkqoHXqUg2eQAcLEa/Ob
2RuquTVU/KPnyzVrqsYic1BI9VlC9RPoD7odTtFmlAIrmsc1/jcWoJrbVQ+VZrae
2EgYpVId69YLuvN4xj3a1L4pEdqA9c6B
-----END CERTIFICATE-----
Generated at Mon Jun 2 06:35:23 2025 by rpki-client