Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft
File:                     GKIzbZyhDwibn8urmxszkqIdId4.mft (raw, json)
Hash identifier:          3B9k+drnjMAWJTbK+bC8GKwi9iSedgTr8sGJstMMIpY=
Subject key identifier:   79:B9:74:2F:42:6E:A8:7E:D2:02:61:76:FA:9F:D9:46:1C:41:15:3C
Authority key identifier: 18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE
Certificate issuer:       /CN=A9199885/serialNumber=18A2336D9CA10F089B9FCBAB9B1B3392A21D21DE
Certificate serial:       34AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft
Manifest number:          5581
Signing time:             Sun 24 Aug 2025 14:53:01 +0000
Manifest this update:     Sun 24 Aug 2025 14:53:00 +0000
Manifest next update:     Sun 31 Aug 2025 14:53:00 +0000
Files and hashes:         1: GKIzbZyhDwibn8urmxszkqIdId4.crl (hash: hrhkJkThdsXfGk1sOcUgJYAChABEjFoB4MA0N29Qd0A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.crl
                          rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Aug 2025 14:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13482 (0x34aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199885, serialNumber=18A2336D9CA10F089B9FCBAB9B1B3392A21D21DE
        Validity
            Not Before: Aug 24 14:53:00 2025 GMT
            Not After : Aug 31 14:53:00 2025 GMT
        Subject: CN=68ab274c-d8e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:35:30:6f:79:ad:9d:0b:7b:82:99:40:b0:6e:
                    51:2f:ff:ba:25:14:86:09:9c:63:8b:81:16:43:00:
                    4b:90:cf:6c:9f:57:da:52:aa:a1:4a:cc:06:f8:a9:
                    02:8b:f7:de:32:bc:22:15:9e:4b:90:68:2f:57:90:
                    c4:b3:f6:83:90:84:df:8f:df:c3:c7:e1:02:fc:bd:
                    99:32:2c:02:31:b5:c2:be:32:08:60:4f:da:ce:ac:
                    1d:32:bd:71:ef:41:6f:c9:45:d1:87:88:d5:5b:4d:
                    00:fc:b2:ca:6e:a5:84:af:36:38:3d:e4:b0:60:40:
                    aa:57:e7:1a:03:15:fc:35:e6:fb:54:0a:8b:40:70:
                    db:be:03:d1:7a:62:40:b7:f6:35:bb:fd:9d:42:d2:
                    bf:22:4e:32:f6:d8:a3:89:16:2a:12:be:b1:11:b0:
                    46:26:42:17:b9:56:af:89:1e:74:4c:92:05:7f:2f:
                    4f:0b:a0:86:30:67:a8:7d:bb:90:a7:ca:50:87:55:
                    14:bf:57:15:79:8b:19:45:ef:fb:b3:6e:be:e4:1e:
                    be:3a:a5:8f:82:ad:e5:9b:52:15:79:e4:7f:78:58:
                    ce:ad:52:40:96:b1:28:c8:12:29:b3:a5:fa:28:a7:
                    41:77:a3:c7:20:4a:82:25:80:9c:dd:18:ef:0c:f7:
                    cf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B9:74:2F:42:6E:A8:7E:D2:02:61:76:FA:9F:D9:46:1C:41:15:3C
            X509v3 Authority Key Identifier:
                keyid:18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ab:3a:4e:fc:69:8e:8b:26:6a:69:c2:a7:e1:ad:99:f0:3a:
         9c:77:12:69:03:a7:96:da:c6:ff:42:1a:45:03:34:b4:4f:49:
         99:3b:88:fb:16:dc:2b:1a:c9:98:1e:e6:88:12:eb:95:a6:e2:
         76:43:a6:a2:96:1b:b4:55:82:43:00:f4:71:8e:1e:6b:ac:70:
         12:35:fc:59:8c:a9:2e:21:5c:f4:e6:2d:f6:7a:39:4f:65:4e:
         e7:9d:6a:01:4c:d4:10:e1:24:08:6f:34:2c:ca:f4:c8:05:29:
         01:8f:66:ca:fd:e2:40:20:e7:9e:02:56:5e:b2:1e:f0:79:ae:
         d9:00:00:aa:da:32:35:de:22:71:ed:57:28:55:ca:05:fe:f2:
         c7:ca:e3:5d:a7:be:56:d3:3c:5a:81:7e:5c:13:6a:fe:49:28:
         4b:d0:f3:84:ab:d3:55:bf:37:13:12:88:77:f7:90:6b:8d:cd:
         7e:06:44:fd:48:fa:99:10:2a:bc:a5:74:18:4f:70:19:ff:72:
         ef:5f:5a:bf:ae:eb:f8:cd:12:6b:f1:47:3e:db:71:18:f6:40:
         0e:cb:ef:66:5e:42:07:12:c3:d8:b7:48:1e:e2:bc:b3:1c:e3:
         f0:b2:75:cb:74:e9:e3:98:be:cf:c3:25:50:5d:fc:8e:95:e1:
         61:4a:2e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 21:46:26 2025 by rpki-client