Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
File:                     ggZKEDz1DwHRlFMAajhs04c5G-Y.mft (raw, json)
Hash identifier:          PsF0QkMptq+Ev6avurkIxxNA3P0rIaJPNXvBY9owmYY=
Subject key identifier:   95:6B:63:CC:02:2A:59:47:7E:C1:F1:57:18:2D:04:47:36:FF:77:F3
Authority key identifier: 82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6
Certificate issuer:       /CN=A919CA1B/serialNumber=82064A103CF50F01D19453006A386CD387391BE6
Certificate serial:       01D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
Manifest number:          01CF
Signing time:             Sat 31 May 2025 02:35:37 +0000
Manifest this update:     Sat 31 May 2025 02:35:37 +0000
Manifest next update:     Sat 07 Jun 2025 02:35:37 +0000
Files and hashes:         1: ggZKEDz1DwHRlFMAajhs04c5G-Y.crl (hash: PuE5S9AICn1XvYC9HnhmhTeMCasyrjk0VujjmHClaGI=)
                          2: D3B49A1676CA11EDAA4FE042C4F9AE02.roa (hash: MMkdhzYrtB2EaUzaUeaUoWgtYA29GMYgRCaFiVCPSo0=)
                          3: D318E67076CA11EDAA4FE042C4F9AE02.roa (hash: dCssZ98YqQlWBb/mCVwsQnrI9ONxqFmsNypt7KWWLSU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl
                          rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 02:35:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 469 (0x1d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CA1B, serialNumber=82064A103CF50F01D19453006A386CD387391BE6
        Validity
            Not Before: May 31 02:35:37 2025 GMT
            Not After : Jun  7 02:35:37 2025 GMT
        Subject: CN=683a6af9-d839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ab:d6:85:10:4d:06:c9:f9:e9:95:a0:2b:d3:
                    00:c6:7f:d2:66:0e:6c:66:91:ca:2a:2b:18:0a:6e:
                    f7:21:9f:d5:ab:7d:4e:10:c2:72:05:13:e0:05:e4:
                    bf:3e:ca:ca:b8:ad:19:78:14:93:87:34:5a:c1:64:
                    93:ad:c6:81:6c:e9:fd:14:c3:33:03:48:4e:cf:d5:
                    a1:e7:65:b0:15:c0:79:eb:36:a0:da:30:f0:2b:bc:
                    40:13:e7:7b:2c:f4:85:09:42:c0:cb:24:ab:ff:e8:
                    56:2f:83:6a:57:98:cc:77:06:bd:16:43:4d:7a:33:
                    a3:19:6e:c1:f5:26:f8:d3:94:f0:6d:d1:93:ef:5d:
                    e8:59:16:58:f0:f8:49:88:a2:6a:86:ef:1f:ca:ed:
                    13:9e:2e:ed:12:0e:65:c8:9b:75:64:a2:b4:82:97:
                    b8:52:56:f0:b6:83:bd:05:85:55:44:7e:55:8b:f9:
                    25:38:ab:44:a4:24:9b:b8:4a:0b:14:b8:7a:72:4b:
                    ee:d9:23:d3:bd:19:e4:36:1d:8a:fd:f2:4c:54:a7:
                    22:c1:cc:03:ec:cc:3e:aa:11:36:ba:0d:ac:f4:79:
                    f9:ad:b5:6e:8b:7c:40:37:82:95:14:23:49:87:97:
                    b0:02:e9:33:55:9e:50:63:c6:d4:a3:cc:fc:1a:01:
                    8c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6B:63:CC:02:2A:59:47:7E:C1:F1:57:18:2D:04:47:36:FF:77:F3
            X509v3 Authority Key Identifier:
                keyid:82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:16:c5:dc:a2:c3:e7:f3:ab:76:aa:14:b2:81:5f:17:dd:99:
         45:63:41:57:48:e5:1e:7b:6a:52:46:a6:07:ae:3d:20:36:db:
         f4:d6:39:97:25:96:33:6c:b0:85:6e:e4:f6:d4:10:a8:51:c8:
         8f:01:26:72:05:45:3d:6f:d3:5a:5f:5c:12:c4:a2:b4:40:87:
         64:6c:a1:c7:e3:96:f6:b8:7d:77:18:ff:66:b5:b8:81:8a:40:
         ad:9f:b3:f3:4e:44:59:84:f2:31:d3:cb:a3:f0:92:f4:68:83:
         7c:2e:04:07:15:33:ca:78:e2:de:03:da:c1:85:62:34:8d:08:
         1f:2e:99:cb:6f:10:35:e5:34:15:03:74:c3:f9:88:c5:73:12:
         45:a9:ab:f8:ab:09:a3:a0:f2:e9:a6:31:56:ca:75:3d:ec:6d:
         d9:68:3d:6a:20:b0:8c:8b:6e:04:65:6a:05:dc:4a:b5:58:fe:
         b6:69:50:a8:ad:66:af:41:3e:36:ae:6b:85:39:7b:0c:bc:c4:
         69:cb:a4:ea:80:86:04:62:a2:4e:e3:31:e6:fe:f8:dc:36:4c:
         6b:67:f9:50:1f:5c:e4:83:c4:6c:1f:01:57:c3:6a:be:66:d4:
         d0:20:ea:b0:0c:91:7c:94:6e:64:7b:62:68:ef:b1:2c:3f:e1:
         84:10:09:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:51:37 2025 by rpki-client