Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft
File:                     G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft (raw, json)
Hash identifier:          377wg/ZPzWYlG99g3ibGWmRxpiu2kQzl8fLp0zPxKdo=
Subject key identifier:   23:2B:3E:AD:95:D4:3E:C7:36:90:40:9F:CC:78:E0:51:8B:83:18:25
Authority key identifier: 1B:A0:51:DA:19:3C:01:31:B6:1A:0A:78:80:6E:2F:37:86:CE:D0:C1
Certificate issuer:       /CN=A9188811/serialNumber=1BA051DA193C0131B61A0A78806E2F3786CED0C1
Certificate serial:       E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft
Manifest number:          E2
Signing time:             Sat 31 May 2025 05:07:21 +0000
Manifest this update:     Sat 31 May 2025 05:07:21 +0000
Manifest next update:     Sat 07 Jun 2025 05:07:21 +0000
Files and hashes:         1: G6BR2hk8ATG2Ggp4gG4vN4bO0ME.crl (hash: opCymLv557+aezLwnUHJux6qzLgprJEAPsIXwYR9+1E=)
                          2: B51FD00AE82711EEB8A9D24FC4F9AE02.roa (hash: VsEm8vkeUxVmjFaDf2wLiIOtj6XxGobBBThvNJ5OEPw=)
                          3: 9E132FF6E82711EEA7DD994FC4F9AE02.roa (hash: pBY1RBpmPShywgSF0cFV/FNZ8xmqm9DQJLZjg8FKxQs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.crl
                          rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 05:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188811, serialNumber=1BA051DA193C0131B61A0A78806E2F3786CED0C1
        Validity
            Not Before: May 31 05:07:21 2025 GMT
            Not After : Jun  7 05:07:21 2025 GMT
        Subject: CN=683a8e89-33ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0c:90:a0:67:e5:a1:6f:48:34:e7:90:1d:0e:
                    2f:51:1e:7e:05:66:44:c4:d7:23:3d:da:c4:35:9a:
                    f2:80:33:02:08:8b:c3:7d:c8:0c:3a:c2:86:cf:ea:
                    70:ff:84:29:84:37:4f:7b:0d:4d:86:1d:ad:67:33:
                    57:30:0f:63:be:88:24:f8:a7:05:08:34:82:10:30:
                    42:43:a1:d9:50:ca:78:83:b7:63:c2:3a:11:50:37:
                    45:1d:4d:fd:02:4e:d2:0e:2c:3f:0f:68:35:c4:12:
                    c2:c9:38:8c:75:1d:0c:c0:f3:4b:8f:53:eb:4d:bf:
                    7a:67:e6:8c:8d:aa:7f:ef:f3:1a:ec:d5:41:66:55:
                    4a:ea:c9:d2:66:eb:9d:88:64:c7:a2:ca:f8:a0:d1:
                    db:26:95:75:f5:4d:e8:ee:6e:d1:17:6a:06:71:2f:
                    e8:ea:15:9a:a9:04:23:2b:ce:ae:61:e4:7d:58:6e:
                    41:75:59:9c:8d:58:c9:00:fb:47:61:fe:c0:15:e8:
                    4f:e9:49:d9:14:3f:8d:37:2b:c0:6d:de:fd:b7:54:
                    74:2e:f8:da:b3:4d:f7:9b:73:b7:b3:93:2e:a3:14:
                    8a:fa:24:86:62:39:65:08:fb:53:c7:17:f9:95:44:
                    a9:3e:e6:e7:fb:f2:2a:a0:a3:d2:03:97:09:5d:57:
                    62:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2B:3E:AD:95:D4:3E:C7:36:90:40:9F:CC:78:E0:51:8B:83:18:25
            X509v3 Authority Key Identifier:
                keyid:1B:A0:51:DA:19:3C:01:31:B6:1A:0A:78:80:6E:2F:37:86:CE:D0:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:f4:93:8b:ad:94:50:18:0b:45:bb:e3:cd:9d:5d:17:70:2e:
         f5:52:4e:26:32:51:a9:22:37:a1:f4:f1:59:ba:a3:d6:38:86:
         3b:2a:80:51:23:5b:f1:18:b7:20:6f:55:69:ed:be:7b:d6:31:
         5c:b6:e0:f9:ea:62:10:1f:eb:ae:75:db:92:bf:e7:e8:48:20:
         45:82:52:d7:73:b0:45:62:54:f0:b0:fc:0a:00:0a:58:0e:ca:
         40:54:03:26:c1:c1:98:6b:95:7e:f6:45:4c:13:dd:d2:4c:9a:
         b3:e5:d8:b3:9a:02:ef:cb:cd:63:70:d8:79:05:a2:c2:b5:b7:
         a8:e8:d6:03:ae:99:92:44:0c:80:c6:1c:08:fb:88:34:bb:de:
         a4:89:f0:c5:00:bf:3e:2c:ca:49:88:5a:7d:9d:f7:d5:fd:9b:
         f8:84:ef:9e:7d:58:0a:c4:59:a6:8a:98:c4:57:8b:be:db:80:
         e7:4b:b5:1a:04:4a:6a:46:b2:c1:35:65:db:5a:52:c3:b6:11:
         9a:6a:b6:f5:e8:c8:b1:e3:59:52:e7:68:fd:f5:34:45:ad:fd:
         85:57:da:2e:8f:cd:68:f1:7a:dc:d1:e6:c7:4c:15:d3:6c:24:
         2b:e5:4f:2c:e0:4e:e5:6b:84:7b:53:95:98:40:8a:0a:cb:60:
         ef:78:26:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:50:46 2025 by rpki-client