Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
File:                     ggn985rwLDua5QPyJddH5nqjzfM.mft (raw, json)
Hash identifier:          etl1l1zb8gbxU5adyaRqkCtouxtAZnoso6PkDKTfIkU=
Subject key identifier:   84:BA:6B:A5:8D:38:7D:8E:B7:87:91:77:8F:AD:EA:ED:43:D8:9F:11
Authority key identifier: 82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3
Certificate issuer:       /CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3
Certificate serial:       0135
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
Manifest number:          012D
Signing time:             Tue 13 May 2025 03:49:58 +0000
Manifest this update:     Tue 13 May 2025 03:49:58 +0000
Manifest next update:     Tue 20 May 2025 03:49:58 +0000
Files and hashes:         1: ggn985rwLDua5QPyJddH5nqjzfM.crl (hash: 1RvlDxyIgW9Z3RYJufjiA0SuKLtxaAT3fN4FLS9hun8=)
                          2: 007AE4426C9311EEBEA0EB63C4F9AE02.roa (hash: btNm9lgvWpgU2p+BlBu9ugdzhnB1MwJxPbCJvAvXYk4=)
                          3: 4E87E6766C9311EEA3DF6E7FC4F9AE02.roa (hash: 0v/eXjEpWzRz29ZAhBrd/kYndqaDkG5i5cTyE+9QFnM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl
                          rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 03:49:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144788, serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3
        Validity
            Not Before: May 13 03:49:58 2025 GMT
            Not After : May 20 03:49:58 2025 GMT
        Subject: CN=6822c166-772e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:20:90:ca:89:7f:20:38:96:9e:1c:da:60:3f:
                    71:15:15:08:99:af:ca:6e:68:de:da:de:91:52:9b:
                    b0:6a:eb:f5:e3:51:7b:cd:46:98:9b:af:7c:7f:07:
                    2f:af:62:e8:a2:bd:8f:f0:d6:fd:fe:be:9f:e6:81:
                    4c:ab:ae:b1:5f:e0:d5:5b:aa:16:bd:95:90:34:5a:
                    79:c7:51:01:4d:31:fb:2a:92:ad:2f:af:50:ed:b5:
                    33:ff:c2:17:fa:74:0e:03:94:ac:d9:5c:b1:65:74:
                    35:31:75:9a:97:4f:e0:2f:cc:a8:28:5b:88:95:67:
                    ee:38:0a:30:b2:dc:bf:ce:9d:4f:ea:90:09:02:d0:
                    c2:44:3b:cf:b7:cc:7c:67:ee:6e:86:52:9f:af:bb:
                    f6:f2:e9:68:0b:9b:ad:8e:33:e0:b2:05:51:4a:06:
                    2c:bf:49:ce:74:f0:ca:3a:a9:86:65:68:22:87:e0:
                    f0:b7:69:c1:bb:b7:e5:86:69:23:e4:84:8b:f8:f4:
                    92:bb:6e:24:e6:d5:22:9b:ec:53:fd:68:a9:50:7b:
                    81:b7:c9:b9:92:bb:a1:64:02:5d:6d:08:51:8a:1d:
                    79:29:e3:15:6a:e0:54:9c:97:62:7e:c4:a5:7f:7c:
                    62:37:c4:b6:13:4f:47:07:fd:83:45:dc:d1:0e:3f:
                    5a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BA:6B:A5:8D:38:7D:8E:B7:87:91:77:8F:AD:EA:ED:43:D8:9F:11
            X509v3 Authority Key Identifier:
                keyid:82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:33:f4:15:e9:da:ba:09:42:d1:21:cb:93:0c:a3:6a:05:66:
         37:72:8f:27:0f:5f:30:1e:fe:5c:a6:82:99:dc:08:11:07:a8:
         b4:35:95:36:1a:6b:c7:85:f4:00:6d:a3:3d:04:e2:8c:7e:ff:
         7e:dd:24:a0:85:26:cb:31:1a:63:48:dd:18:a0:54:d3:3a:b1:
         8e:07:3f:4b:2b:05:77:f2:a7:31:ee:50:64:d9:5e:c7:81:fe:
         50:ea:80:f8:68:2d:60:d4:5b:12:be:76:5f:ec:98:32:01:83:
         df:94:3d:ad:cf:57:23:a8:8a:bd:b3:17:7a:58:df:e2:1e:db:
         a3:6b:da:ed:4e:d8:a9:80:13:4d:46:9f:47:45:5c:29:7e:b5:
         73:a5:e7:c1:3d:30:01:f7:60:1a:54:2c:93:c7:cc:4e:1d:33:
         a0:e7:57:76:4a:10:3d:4e:3c:b3:0e:aa:3a:0d:5d:08:b5:2b:
         d1:4a:45:f3:ca:ec:c2:71:b4:77:38:2c:a7:43:df:7a:67:1e:
         4c:90:b6:6f:e1:2b:cf:7e:a9:a4:66:f5:1e:3d:ac:ed:c0:15:
         1e:f9:d8:1e:27:c4:0f:bb:b5:01:30:7b:f7:05:d0:b4:53:56:
         f0:d3:25:b5:3e:c4:b1:dd:86:3f:37:3d:a0:3c:52:f4:f8:b0:
         71:e4:aa:a9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQ3ODgxMTAvBgNVBAUTKDgyMDlGREYzOUFGMDJDM0I5QUU1MDNGMjI1RDc0N0U2
N0FBM0NERjMwHhcNMjUwNTEzMDM0OTU4WhcNMjUwNTIwMDM0OTU4WjAYMRYwFAYD
VQQDEw02ODIyYzE2Ni03NzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2iCQyol/IDiWnhzaYD9xFRUIma/Kbmje2t6RUpuwauv141F7zUaYm698fwcv
r2Loor2P8Nb9/r6f5oFMq66xX+DVW6oWvZWQNFp5x1EBTTH7KpKtL69Q7bUz/8IX
+nQOA5Ss2VyxZXQ1MXWal0/gL8yoKFuIlWfuOAowsty/zp1P6pAJAtDCRDvPt8x8
Z+5uhlKfr7v28uloC5utjjPgsgVRSgYsv0nOdPDKOqmGZWgih+Dwt2nBu7flhmkj
5ISL+PSSu24k5tUim+xT/WipUHuBt8m5kruhZAJdbQhRih15KeMVauBUnJdifsSl
f3xiN8S2E09HB/2DRdzRDj9arQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIS6a6WN
OH2Ot4eRd4+t6u1D2J8RMB8GA1UdIwQYMBaAFIIJ/fOa8Cw7muUD8iXXR+Z6o83z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDc4OC8zN0YwMUIxQTZD
OTExMUVFQTU2MDdCMjlDNEY5QUUwMi9nZ245ODVyd0xEdWE1UVB5SmRkSDVucWp6
Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dnbjk4NXJ3TER1YTVRUHlKZGRINW5xanpmTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDc4OC8zN0YwMUIxQTZDOTExMUVFQTU2MDdCMjlDNEY5QUUwMi9nZ245ODVyd0xE
dWE1UVB5SmRkSDVucWp6Zk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBSM/QV6dq6CULRIcuTDKNqBWY3co8nD18wHv5cpoKZ3AgRB6i0NZU2
GmvHhfQAbaM9BOKMfv9+3SSghSbLMRpjSN0YoFTTOrGOBz9LKwV38qcx7lBk2V7H
gf5Q6oD4aC1g1FsSvnZf7JgyAYPflD2tz1cjqIq9sxd6WN/iHtuja9rtTtipgBNN
Rp9HRVwpfrVzpefBPTAB92AaVCyTx8xOHTOg51d2ShA9TjyzDqo6DV0ItSvRSkXz
yuzCcbR3OCynQ996Zx5MkLZv4SvPfqmkZvUePaztwBUe+dgeJ8QPu7UBMHv3BdC0
U1bw0yW1PsSx3YY/Nz2gPFL0+LBx5Kqp
-----END CERTIFICATE-----
Generated at Wed May 14 01:13:06 2025 by rpki-client