Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
File:                     GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft (raw, json)
Hash identifier:          vXqbkRcms3/5bG2ER6fn2aN9neIE7+V61jk7Ai/nK5M=
Subject key identifier:   F1:15:F5:A6:6A:F3:EE:59:B7:F3:56:61:6D:DC:E4:4E:F1:27:52:DF
Authority key identifier: 18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77
Certificate issuer:       /CN=A912A5D4/serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877
Certificate serial:       44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
Manifest number:          44
Signing time:             Thu 03 Jul 2025 07:40:12 +0000
Manifest this update:     Thu 03 Jul 2025 07:40:12 +0000
Manifest next update:     Thu 10 Jul 2025 07:40:12 +0000
Files and hashes:         1: GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl (hash: 5YBtlpMxVz892vrGvNOrKOdW4/eQoS1q3KBekpYCVDY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl
                          rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A5D4, serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877
        Validity
            Not Before: Jul  3 07:40:12 2025 GMT
            Not After : Jul 10 07:40:12 2025 GMT
        Subject: CN=686633dc-d242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fe:e8:7e:c5:55:ae:94:ca:78:a1:c5:82:c6:
                    06:91:36:f6:44:28:8a:b2:e9:82:43:1b:e8:97:54:
                    72:67:47:f8:73:5e:30:04:5b:c3:ea:0a:3a:f2:de:
                    00:0b:70:34:38:51:38:44:1b:c7:d4:51:d1:22:b8:
                    00:af:91:35:2a:4b:8e:be:d9:5d:4f:f1:93:86:0a:
                    e3:18:75:cf:65:a2:d6:2a:25:c3:e4:99:61:8b:88:
                    7a:db:a4:83:a4:38:e9:01:9e:d4:23:37:95:30:40:
                    44:13:92:20:8e:db:da:a4:c4:10:f6:fd:52:d1:32:
                    ec:39:41:9d:5d:6e:16:73:0f:fe:fe:bb:c8:4a:52:
                    ac:89:59:13:5a:8b:c3:61:fc:8f:87:88:f4:6b:ab:
                    a1:aa:3d:48:86:be:ff:c7:60:9d:4f:08:ce:b0:4c:
                    14:3f:f6:2e:40:93:4c:87:cb:a3:37:d3:d6:68:92:
                    31:66:dd:2c:ce:d1:88:2c:60:0d:eb:7b:ad:cd:f8:
                    99:23:7c:fd:70:71:4e:00:03:06:ee:06:13:ad:04:
                    d4:cd:68:a6:7f:fe:e0:4a:6a:b0:c5:36:a1:8a:66:
                    4d:9a:02:77:3e:03:07:02:d4:64:76:bc:81:82:e5:
                    e8:b2:7f:53:07:fd:9c:65:bb:76:33:98:8f:e1:11:
                    a8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:15:F5:A6:6A:F3:EE:59:B7:F3:56:61:6D:DC:E4:4E:F1:27:52:DF
            X509v3 Authority Key Identifier:
                keyid:18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:2d:d4:49:d6:86:90:fd:1b:02:92:8b:27:af:2a:71:3e:5b:
         a8:3e:e7:74:0c:8c:c4:3b:a4:01:bc:72:d3:51:37:c3:01:7b:
         89:e5:27:7f:6f:30:ca:6a:45:2a:d6:fd:5d:1a:bd:d8:96:4c:
         7d:36:af:5f:3b:f5:7b:4c:e4:5b:a1:db:aa:4d:92:90:13:96:
         dc:5f:28:d2:12:0c:0b:cf:77:3d:85:4f:e2:19:8f:8a:ae:dd:
         8c:e9:36:66:16:6b:aa:ec:9b:b8:1a:14:a7:9b:4d:88:64:68:
         62:f9:20:b7:32:c4:86:86:a9:04:54:0d:1a:59:83:b1:a7:51:
         04:3a:f4:3f:dc:80:f5:00:df:4d:21:0e:7e:63:84:e6:af:8b:
         28:65:6c:d2:1a:55:a5:48:a7:41:ee:5e:e1:c2:96:ff:97:71:
         cd:c8:d0:f9:a6:f9:32:d9:64:67:e1:2b:3b:a6:0b:d0:df:0c:
         f4:25:37:0b:34:d4:e9:d3:8b:37:30:07:10:84:07:e7:72:e0:
         9d:8b:f9:21:e7:4e:32:a5:6c:ef:e7:6f:8d:dc:e8:c1:6d:d3:
         48:47:6d:92:f5:e9:c5:92:74:58:50:11:5c:65:3e:44:0f:ed:
         74:47:1b:d8:ba:ab:70:b5:16:44:c1:ac:6b:d4:f9:69:82:e8:
         3e:14:15:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 12:29:59 2025 by rpki-client