Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft
File:                     GySJViTA9S0agjsvKdrcCOKmJmE.mft (raw, json)
Hash identifier:          HWJ65RYnckvgsiqEI8DBF6aTKt9kpNjx/350W7DSdVA=
Subject key identifier:   17:0D:DD:9C:79:A2:FB:D3:BA:B4:B5:F8:19:92:DC:4D:22:E4:5E:F7
Authority key identifier: 1B:24:89:56:24:C0:F5:2D:1A:82:3B:2F:29:DA:DC:08:E2:A6:26:61
Certificate issuer:       /CN=A9136385/serialNumber=1B24895624C0F52D1A823B2F29DADC08E2A62661
Certificate serial:       0171
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft
Manifest number:          016F
Signing time:             Sat 23 Aug 2025 03:56:27 +0000
Manifest this update:     Sat 23 Aug 2025 03:56:27 +0000
Manifest next update:     Sat 30 Aug 2025 03:56:27 +0000
Files and hashes:         1: GySJViTA9S0agjsvKdrcCOKmJmE.crl (hash: +aKG8OrWrMzz/LwOacJFMqvQ05oVKArkJRIU4FHgdHI=)
                          2: 557745EE4E1B11EEBA53316CC4F9AE02.roa (hash: kc35Syn08c4EtuwoQYpFr9xOBj5+HU59IWuBenhwr1A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.crl
                          rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:56:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136385, serialNumber=1B24895624C0F52D1A823B2F29DADC08E2A62661
        Validity
            Not Before: Aug 23 03:56:27 2025 GMT
            Not After : Aug 30 03:56:27 2025 GMT
        Subject: CN=68a93beb-1cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:73:b9:e0:43:fa:83:b9:fb:c5:d2:62:9d:29:
                    a3:8d:b8:a2:a7:cc:fe:9d:c5:c9:93:63:52:8a:a3:
                    6a:17:67:63:34:ca:9e:51:da:3b:f3:cb:3c:4e:d1:
                    d5:7c:e6:c8:58:28:ff:45:72:45:c2:ae:d5:c2:85:
                    25:a8:81:7e:0a:1c:b2:9a:3d:d2:79:be:0a:53:95:
                    87:18:18:f6:12:5c:ef:a1:7e:e6:bc:b1:f0:0e:b3:
                    6b:35:b4:34:a6:97:03:ce:87:5f:e3:52:78:1c:ed:
                    69:19:59:30:10:71:06:fe:05:04:89:61:b1:2b:31:
                    12:0f:e4:89:05:27:ed:3f:27:7f:90:79:cc:82:30:
                    b3:44:e7:9d:af:28:5d:aa:64:79:f4:5a:20:ab:f7:
                    84:a6:49:84:07:db:37:00:a4:60:df:36:b7:e9:91:
                    8e:5c:da:a4:dc:42:ee:a0:5a:f4:bb:77:34:3b:95:
                    92:8a:54:8d:fa:3a:1e:20:6f:e6:1e:a3:2d:ac:b5:
                    35:d7:a7:7c:82:b2:8d:74:d4:11:bb:f5:94:4c:71:
                    ea:16:a1:27:a3:0e:2a:a7:7b:88:4d:c4:78:e7:34:
                    f4:03:28:34:75:72:61:7b:1e:d1:bb:91:5e:72:f5:
                    5e:dd:80:db:75:df:1a:02:aa:28:63:7b:2a:9b:59:
                    3b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0D:DD:9C:79:A2:FB:D3:BA:B4:B5:F8:19:92:DC:4D:22:E4:5E:F7
            X509v3 Authority Key Identifier:
                keyid:1B:24:89:56:24:C0:F5:2D:1A:82:3B:2F:29:DA:DC:08:E2:A6:26:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:45:09:5c:91:d0:f7:7a:07:a6:e9:62:3a:99:76:f6:b1:ed:
         8a:55:5c:54:b5:91:ae:44:a6:b3:77:b3:81:d1:13:c5:66:3e:
         8c:a3:b3:c9:37:e5:b5:5b:bd:e5:76:9d:bb:12:67:b9:ee:74:
         be:46:ce:c6:70:69:ad:e8:ed:4b:c2:e0:c0:1e:5a:bf:c4:ab:
         fc:c3:9b:f4:ab:3c:af:55:ea:5b:d6:dd:4a:2e:7f:e8:89:ca:
         a2:77:44:60:aa:38:0f:c1:18:f8:43:ca:0c:8c:dc:94:f6:67:
         7f:e1:3e:0c:fc:6e:43:8c:1a:6c:2c:cd:a1:73:9c:60:5f:d8:
         6e:b8:a9:eb:c9:e3:a8:e6:31:4b:1a:f1:4e:31:e7:53:67:be:
         97:36:7f:51:a8:19:61:dd:da:4e:13:6d:40:a6:39:93:ff:76:
         83:12:56:73:3b:c0:21:01:8e:82:79:5a:ff:6e:ee:f4:22:5e:
         da:35:96:5d:88:fc:11:d4:48:7c:04:9d:c1:b6:2d:e2:38:b2:
         ac:96:3f:90:7e:3c:a4:b7:76:cb:7a:e6:fa:10:79:89:38:12:
         af:90:ac:30:5f:f3:22:72:a4:61:66:84:42:af:98:96:c7:b8:
         47:9b:a2:a0:31:ab:ce:c0:e7:47:76:d1:dd:80:a7:4e:ae:02:
         74:4b:88:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:24:55 2025 by rpki-client