Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
File:                     gyzAVuI-OIrjeBpSC92RFpY25Zs.mft (raw, json)
Hash identifier:          FpVfgi+IttJ0bUEHXV+6BWfCzxDeyeGFl0LzSwASmuE=
Subject key identifier:   87:A5:93:3D:9A:C3:FD:94:CA:E4:59:B3:D8:71:F4:A5:CB:CA:54:4E
Authority key identifier: 83:2C:C0:56:E2:3E:38:8A:E3:78:1A:52:0B:DD:91:16:96:36:E5:9B
Certificate issuer:       /CN=A91F1029/serialNumber=832CC056E23E388AE3781A520BDD91169636E59B
Certificate serial:       0737
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
Manifest number:          0731
Signing time:             Fri 30 May 2025 21:59:04 +0000
Manifest this update:     Fri 30 May 2025 21:59:04 +0000
Manifest next update:     Fri 06 Jun 2025 21:59:04 +0000
Files and hashes:         1: gyzAVuI-OIrjeBpSC92RFpY25Zs.crl (hash: d1wuYi0sSSIAOtXsjdKtvKZ+t7aYWnYwwue4AdEbcOc=)
                          2: B2790B3C2FB111EB89A04D37C4F9AE02.roa (hash: cbi8nIiFu7yZyu87usC4sqYN/jQpg6I6lG7FiVSdUVI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.crl
                          rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 21:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1847 (0x737)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1029, serialNumber=832CC056E23E388AE3781A520BDD91169636E59B
        Validity
            Not Before: May 30 21:59:04 2025 GMT
            Not After : Jun  6 21:59:04 2025 GMT
        Subject: CN=683a2a28-f9eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:88:59:c1:9f:92:c0:eb:2d:fe:5f:3c:f8:83:
                    42:8c:ba:c3:7b:d5:06:0c:bf:72:b9:e9:e5:df:00:
                    ed:97:46:6e:bf:5d:d0:76:8f:37:33:80:fd:d9:25:
                    21:ba:f7:02:ef:77:a0:f5:72:3b:53:73:f9:5c:0d:
                    bc:9e:81:a1:84:74:9c:56:6c:40:be:a6:c2:9c:e4:
                    d5:ee:a9:3e:71:8d:c6:f7:fc:35:c5:4a:c3:b5:e4:
                    26:ed:1f:1e:a2:73:37:51:4a:a7:38:8c:7c:87:29:
                    48:96:12:33:9a:be:2d:32:07:37:38:40:bf:26:6a:
                    a5:45:b5:db:6f:17:5c:74:8c:8b:a5:eb:59:c5:5f:
                    72:38:ec:b9:4a:c7:eb:0e:32:b9:47:73:34:33:99:
                    99:bf:b1:c7:3b:6d:f2:58:4d:ac:c4:85:66:b3:1f:
                    22:32:72:7a:81:85:fa:97:39:7f:61:fd:ed:c1:4b:
                    48:db:70:01:38:e8:99:3a:d5:c7:d7:30:79:ea:15:
                    b2:72:7d:72:b8:87:aa:4e:d6:02:8d:92:20:c8:76:
                    25:1e:8f:f0:2b:98:66:ba:85:8e:5f:96:fd:21:52:
                    a8:c9:23:ee:f9:b0:c3:08:a4:13:ab:45:ba:04:ee:
                    f5:6d:99:5f:05:50:66:cd:59:95:e5:68:3f:d7:14:
                    36:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A5:93:3D:9A:C3:FD:94:CA:E4:59:B3:D8:71:F4:A5:CB:CA:54:4E
            X509v3 Authority Key Identifier:
                keyid:83:2C:C0:56:E2:3E:38:8A:E3:78:1A:52:0B:DD:91:16:96:36:E5:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:b5:38:33:bc:50:23:a0:8e:82:69:8d:b3:57:78:4f:af:63:
         24:9e:ef:4b:3d:01:ab:a1:40:be:f5:57:29:83:73:17:dd:b2:
         55:53:8f:d2:52:7e:44:b3:2f:ee:66:a3:13:76:61:9b:4b:de:
         8e:ab:ea:7f:73:1e:18:2a:7f:3a:80:60:c9:70:d2:cd:c0:b6:
         7e:fa:62:bc:a5:22:e4:99:f1:47:24:ff:3d:18:59:ee:29:4d:
         31:17:42:6a:b9:90:83:8d:eb:9d:b6:20:50:6e:94:c5:9c:84:
         9c:e6:95:c4:37:46:c2:c6:9b:c3:f6:27:98:0a:00:18:66:cd:
         8a:80:f4:2c:de:b4:54:13:79:95:fd:3b:e5:29:93:f4:f5:09:
         dc:2d:40:3b:a2:09:25:6f:0c:4a:22:ed:fd:ac:98:cd:55:6f:
         9b:c4:4c:f5:59:6e:d3:e5:e7:a9:e0:0c:5f:ea:ff:04:f7:88:
         61:d5:9a:4e:ad:e0:72:6f:90:54:95:d7:48:18:0d:1d:a4:51:
         8e:1e:cd:b6:2b:b6:72:cf:3f:c2:c7:5c:ca:5c:6a:ef:b9:dc:
         58:88:81:92:36:27:58:b1:bd:46:09:2e:4e:cc:26:16:85:86:
         59:a0:9f:72:a6:7c:3b:07:4d:5b:68:26:96:71:69:6a:3a:2e:
         50:fe:bb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:20:33 2025 by rpki-client