Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft
File:                     Gn5MpKocInIldylqsFeD11WxFr0.mft (raw, json)
Hash identifier:          NE9CBxGvFO4btWjQ4yn6SlAZMym78MxFVd8h9InhvPw=
Subject key identifier:   FB:91:96:42:4C:5C:8B:76:39:5D:B1:0A:E3:96:C6:B1:EB:D1:67:02
Authority key identifier: 1A:7E:4C:A4:AA:1C:22:72:25:77:29:6A:B0:57:83:D7:55:B1:16:BD
Certificate issuer:       /CN=A915803A/serialNumber=1A7E4CA4AA1C22722577296AB05783D755B116BD
Certificate serial:       0BE0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft
Manifest number:          0BD6
Signing time:             Sat 28 Jun 2025 18:37:02 +0000
Manifest this update:     Sat 28 Jun 2025 18:37:01 +0000
Manifest next update:     Sat 05 Jul 2025 18:37:01 +0000
Files and hashes:         1: Gn5MpKocInIldylqsFeD11WxFr0.crl (hash: dPxK/spvgJCDsFMlGbVctXEKtj5WjgfmvZRX6hnTI20=)
                          2: 5B9628CE1E5311EA9A133560C4F9AE02.roa (hash: 4J/p4/at9N0h24OffWZyBK2PKe4zkvNfclH1N1tyx/c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.crl
                          rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 18:37:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3040 (0xbe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915803A, serialNumber=1A7E4CA4AA1C22722577296AB05783D755B116BD
        Validity
            Not Before: Jun 28 18:37:01 2025 GMT
            Not After : Jul  5 18:37:01 2025 GMT
        Subject: CN=6860364e-a81e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b4:88:83:69:55:fc:ba:f0:bf:41:24:ba:e1:
                    9e:d9:ad:89:11:aa:e5:60:e1:6b:b4:4b:97:c4:33:
                    b5:3f:59:2f:fa:92:e8:4b:bb:dd:fe:33:71:f2:90:
                    e9:1a:06:fc:b2:2e:0a:f2:8c:ce:7f:e8:e2:3a:ad:
                    47:41:c4:16:a6:b7:6d:56:de:b1:50:53:1a:20:82:
                    49:de:75:1e:23:57:fe:53:08:5d:be:ea:f3:4b:a1:
                    dc:66:e2:fe:c1:c3:a3:2c:18:53:1b:07:a4:a0:8d:
                    aa:5f:ba:aa:c0:6a:81:fb:3a:a7:a5:00:17:81:00:
                    9f:06:9c:13:cf:37:b9:57:51:ea:3f:f4:e1:a4:39:
                    f9:81:eb:55:86:6d:c6:d6:ff:76:b0:46:18:2c:e5:
                    e7:c9:c0:7a:c1:4b:36:95:79:b4:f8:c3:bb:9d:14:
                    4f:02:1e:ef:94:89:a7:df:f8:56:d3:c1:c2:03:03:
                    d1:5b:65:6c:09:f2:4c:a4:20:4c:1d:3a:dc:10:a8:
                    96:f2:8d:ba:fd:74:2f:2d:4d:25:d7:d9:23:e7:4e:
                    9b:ff:c9:1c:a2:d5:78:48:0a:13:b1:86:59:b6:71:
                    61:fa:3f:fa:29:cd:40:86:5a:e0:10:ab:4c:26:95:
                    8b:df:3b:f0:34:80:29:ed:1d:bf:fc:b1:25:b0:a9:
                    95:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:91:96:42:4C:5C:8B:76:39:5D:B1:0A:E3:96:C6:B1:EB:D1:67:02
            X509v3 Authority Key Identifier:
                keyid:1A:7E:4C:A4:AA:1C:22:72:25:77:29:6A:B0:57:83:D7:55:B1:16:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:30:37:4a:82:6f:37:57:2c:c2:8f:f6:1c:a0:14:2d:0e:45:
         19:01:54:c0:38:36:00:91:de:1a:72:e6:5a:23:96:0f:7a:21:
         b6:90:44:1e:cb:b0:42:db:43:8a:0d:cb:2c:a4:2b:0d:82:39:
         62:ef:65:1b:a6:f0:85:7b:68:a9:42:ce:14:9c:ca:db:98:8e:
         d0:89:2a:89:a3:31:5c:3c:d9:14:3e:ea:13:c0:a0:b4:f6:28:
         83:eb:87:55:24:40:6c:e0:25:7d:a9:96:a7:f1:7c:de:ee:1d:
         dc:36:2a:35:14:8f:8e:03:96:32:08:12:e7:76:cb:5b:c7:c1:
         d1:e2:25:57:8b:59:a1:5d:58:f6:09:0b:2f:3a:7c:93:1c:8e:
         63:e2:3c:bb:1d:8f:62:91:db:cd:68:09:72:dc:1f:11:dc:29:
         b5:65:df:8c:82:3e:71:4d:02:3d:f1:ad:48:eb:f7:18:66:47:
         b3:81:42:ff:73:82:b4:8e:ee:ab:27:2c:de:09:fd:b0:5c:00:
         12:10:9c:5b:45:ec:d0:4d:76:62:91:f2:fc:f0:33:1d:5e:6a:
         c4:51:31:3f:04:8e:97:42:58:dd:9f:e9:87:40:39:0d:78:da:
         18:44:04:09:51:a6:b9:b7:32:4b:aa:3d:7a:7b:10:12:15:b1:
         4d:5e:2c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:26:38 2025 by rpki-client