Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft
File:                     GJHVTO9qkMIy_KiR45n5eDhnEe4.mft (raw, json)
Hash identifier:          NgZJGN6dHc+8Fs9W8a+vebCSSJPZvZmYgGR3Fe5AlLg=
Subject key identifier:   1D:54:AC:95:5A:80:2F:D1:38:37:75:82:7F:C9:7D:6E:B6:41:B6:79
Authority key identifier: 18:91:D5:4C:EF:6A:90:C2:32:FC:A8:91:E3:99:F9:78:38:67:11:EE
Certificate issuer:       /CN=A9128576/serialNumber=1891D54CEF6A90C232FCA891E399F978386711EE
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft
Manifest number:          54
Signing time:             Thu 03 Jul 2025 07:27:40 +0000
Manifest this update:     Thu 03 Jul 2025 07:27:40 +0000
Manifest next update:     Thu 10 Jul 2025 07:27:40 +0000
Files and hashes:         1: GJHVTO9qkMIy_KiR45n5eDhnEe4.crl (hash: hBkedbe2qIGfL4HQYuezKmQhhHdnOYpP7gs2SKvIX5Y=)
                          2: C8BFCD96D7A411EF9AB81933C4F9AE02.roa (hash: Fo5VkT431J+zLy9igbQ3SFfIsb+FgMetIU9BycrAICA=)
                          3: C9B06ECCD7A411EF9AB81933C4F9AE02.roa (hash: ftkSUsDxtIg6s2jX13CXTFZ0keaCV5YjPDUyQbqNBxE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.crl
                          rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128576, serialNumber=1891D54CEF6A90C232FCA891E399F978386711EE
        Validity
            Not Before: Jul  3 07:27:40 2025 GMT
            Not After : Jul 10 07:27:40 2025 GMT
        Subject: CN=686630ec-d0c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0e:0d:ad:fb:95:27:b8:99:84:c6:c3:2d:4c:
                    19:06:3f:16:56:47:5e:02:32:43:fa:eb:51:f8:51:
                    d0:c8:4c:33:95:b9:e1:9e:ab:3d:8f:41:26:71:e4:
                    58:fb:4d:f7:73:85:62:37:89:70:1b:ae:ca:5e:f0:
                    e8:e1:fa:97:0c:7b:5d:a9:7b:7b:a3:26:7c:80:68:
                    b7:11:ee:0b:e6:34:dc:42:4e:a8:93:86:a8:ca:a3:
                    d2:cd:8c:d5:00:a8:25:73:e1:b7:39:50:f3:6e:1b:
                    c0:69:0c:89:57:6e:cf:f5:24:97:9a:a9:5c:ac:80:
                    2a:14:0d:55:2b:63:32:a5:62:94:81:d6:4a:b7:03:
                    e2:b8:64:ff:60:57:e4:fd:41:dc:6f:11:4c:f2:00:
                    f1:0a:66:80:2a:83:21:33:a1:dc:40:c9:10:a2:78:
                    4b:9a:f8:89:75:ce:76:f1:62:2a:01:8f:fa:1f:a3:
                    2f:58:f4:8c:7b:3a:38:38:0a:38:54:11:08:99:cd:
                    92:27:f3:22:e5:b6:2b:9e:f2:cf:8f:d9:3d:d2:5a:
                    86:e8:fe:89:1b:c3:a3:0c:d0:c5:26:27:61:62:74:
                    29:9b:02:84:13:f1:2a:be:e1:cf:c3:00:5e:f2:b9:
                    04:04:7d:e2:7a:4d:c5:eb:d7:ce:16:ea:c0:46:b7:
                    32:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:54:AC:95:5A:80:2F:D1:38:37:75:82:7F:C9:7D:6E:B6:41:B6:79
            X509v3 Authority Key Identifier:
                keyid:18:91:D5:4C:EF:6A:90:C2:32:FC:A8:91:E3:99:F9:78:38:67:11:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:30:ed:72:24:63:b0:b9:3a:49:11:e8:ed:22:86:d8:7e:34:
         44:af:ce:82:80:eb:0d:06:60:2f:c4:20:18:88:28:c3:40:5e:
         eb:cb:59:48:68:f5:b5:24:59:cf:cf:ad:21:9a:df:46:69:ac:
         13:e8:eb:10:c4:3d:33:7f:0d:7d:13:52:27:7e:b9:97:33:c1:
         89:48:ed:e4:c5:76:50:02:50:d0:d1:19:43:c5:9a:f0:41:74:
         d6:c3:e6:21:1d:f3:60:73:21:3d:fe:98:98:71:46:b7:d9:16:
         f7:2b:1d:fa:15:66:de:d6:7f:71:02:27:64:fd:bd:9b:44:0c:
         b7:48:8f:93:65:bd:3e:5e:4e:e5:60:fb:e9:b1:91:9d:d2:a0:
         c3:f9:0e:19:84:77:01:f9:3a:ec:02:fa:67:19:a6:92:c3:ac:
         d1:89:2e:1a:f0:38:bb:cc:cf:71:83:30:c4:1b:dd:69:d8:55:
         cd:c3:fa:d8:e6:8d:28:ee:2c:1e:98:8c:71:30:03:0e:23:e4:
         83:e7:a8:51:7b:33:82:c0:b2:f1:e3:73:1f:9c:8d:68:6b:77:
         b7:d9:cd:f0:0b:7d:60:f3:3d:be:85:fb:fc:af:e0:23:74:66:
         fd:56:b4:75:c4:32:04:5c:97:06:56:8b:4c:6a:52:b6:4e:8b:
         36:11:08:55
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
ODU3NjExMC8GA1UEBRMoMTg5MUQ1NENFRjZBOTBDMjMyRkNBODkxRTM5OUY5Nzgz
ODY3MTFFRTAeFw0yNTA3MDMwNzI3NDBaFw0yNTA3MTAwNzI3NDBaMBgxFjAUBgNV
BAMTDTY4NjYzMGVjLWQwYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCcDg2t+5UnuJmExsMtTBkGPxZWR14CMkP661H4UdDITDOVueGeqz2PQSZx5Fj7
TfdzhWI3iXAbrspe8Ojh+pcMe12pe3ujJnyAaLcR7gvmNNxCTqiThqjKo9LNjNUA
qCVz4bc5UPNuG8BpDIlXbs/1JJeaqVysgCoUDVUrYzKlYpSB1kq3A+K4ZP9gV+T9
QdxvEUzyAPEKZoAqgyEzodxAyRCieEua+Il1znbxYioBj/ofoy9Y9Ix7Ojg4CjhU
EQiZzZIn8yLltiue8s+P2T3SWobo/okbw6MM0MUmJ2FidCmbAoQT8Sq+4c/DAF7y
uQQEfeJ6TcXr184W6sBGtzJbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHVSslVqA
L9E4N3WCf8l9brZBtnkwHwYDVR0jBBgwFoAUGJHVTO9qkMIy/KiR45n5eDhnEe4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4NTc2LzJERTk0QTlBRDdB
NDExRUY5NjRENkQ3Q0M0RjlBRTAyL0dKSFZUTzlxa01JeV9LaVI0NW41ZURobkVl
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvR0pIVlRPOXFrTUl5X0tpUjQ1bjVlRGhuRWU0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4
NTc2LzJERTk0QTlBRDdBNDExRUY5NjRENkQ3Q0M0RjlBRTAyL0dKSFZUTzlxa01J
eV9LaVI0NW41ZURobkVlNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACIw7XIkY7C5OkkR6O0ihth+NESvzoKA6w0GYC/EIBiIKMNAXuvLWUho
9bUkWc/PrSGa30ZprBPo6xDEPTN/DX0TUid+uZczwYlI7eTFdlACUNDRGUPFmvBB
dNbD5iEd82BzIT3+mJhxRrfZFvcrHfoVZt7Wf3ECJ2T9vZtEDLdIj5NlvT5eTuVg
++mxkZ3SoMP5DhmEdwH5OuwC+mcZppLDrNGJLhrwOLvMz3GDMMQb3WnYVc3D+tjm
jSjuLB6YjHEwAw4j5IPnqFF7M4LAsvHjcx+cjWhrd7fZzfALfWDzPb6F+/yv4CN0
Zv1WtHXEMgRclwZWi0xqUrZOizYRCFU=
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:40:38 2025 by rpki-client