Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft
File:                     -GGkJMXdlLdB2BgJtff_OVVjdl4.mft (raw, json)
Hash identifier:          HrJBc39WYW77XPNMqL4SQK8SzOrPITRc3Sg9UbEYsnM=
Subject key identifier:   A0:27:93:00:9B:9E:73:81:0D:EB:5E:36:06:5B:96:D8:AB:A7:6C:FE
Authority key identifier: F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E
Certificate issuer:       /CN=A915B6E9/serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E
Certificate serial:       03EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft
Manifest number:          03E7
Signing time:             Thu 03 Jul 2025 00:54:26 +0000
Manifest this update:     Thu 03 Jul 2025 00:54:26 +0000
Manifest next update:     Thu 10 Jul 2025 00:54:26 +0000
Files and hashes:         1: -GGkJMXdlLdB2BgJtff_OVVjdl4.crl (hash: 6eFjoYhybPEFjFwK7vJ/KOKZGZOwmRx4+c4hD8mQ/s8=)
                          2: D2438C7C4B1F11EDAF41BC7FC4F9AE02.roa (hash: tt7O9YQ0p71DCEEFVfdI/EIIH0WIFOY0otBzHdQ0+Os=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl
                          rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 00:54:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1006 (0x3ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B6E9, serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E
        Validity
            Not Before: Jul  3 00:54:26 2025 GMT
            Not After : Jul 10 00:54:26 2025 GMT
        Subject: CN=6865d4c2-b02d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ad:4a:31:4b:ff:21:ae:7e:52:27:71:92:3f:
                    12:cb:5b:51:d3:a9:0a:3f:fc:2a:cc:4f:52:0e:3d:
                    79:b2:dd:97:06:cd:be:d4:57:b3:f3:17:97:26:05:
                    0c:66:45:40:92:8c:4a:79:b3:6f:d4:51:0a:b3:c3:
                    40:a7:cf:ca:ce:2c:19:0e:b9:f3:2b:ec:4a:44:6a:
                    9a:cf:a5:11:58:ac:e5:54:64:ac:eb:8c:f1:7e:f3:
                    00:8e:83:52:03:b3:7c:56:4d:39:2e:af:e7:dc:c7:
                    49:ba:f2:e2:e7:71:fe:85:fd:8f:95:46:13:9f:ef:
                    d2:d3:56:10:f2:fc:11:ca:e0:59:ba:25:27:15:72:
                    2f:70:d5:68:bb:2c:23:4b:10:7e:d1:70:de:d3:a5:
                    49:87:c4:9b:0c:2b:5e:75:cc:67:f5:1c:33:87:be:
                    50:f0:d3:9c:de:17:33:df:64:f8:b5:df:aa:e2:91:
                    7c:a0:9b:6e:c4:47:61:8f:ef:37:68:ec:1e:3b:4e:
                    a3:98:f7:7c:86:66:ce:b2:52:11:94:60:c7:a3:d0:
                    7a:38:be:90:b9:af:5c:fb:d6:35:46:5e:ef:cc:a1:
                    75:93:5f:9e:4f:4b:1a:ac:ff:3e:f4:b9:c1:e2:d1:
                    d5:79:1a:20:fa:0f:74:a7:55:a9:7f:75:b4:50:ea:
                    c1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:27:93:00:9B:9E:73:81:0D:EB:5E:36:06:5B:96:D8:AB:A7:6C:FE
            X509v3 Authority Key Identifier:
                keyid:F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a0:de:2c:4f:6a:98:cd:3f:81:3b:73:1d:43:65:6a:b2:d4:
         59:b6:05:f7:7c:55:ac:56:7c:62:3e:85:d2:f7:06:b1:57:f8:
         13:4c:96:bc:d1:7f:40:45:c7:0e:6f:ef:27:e4:ab:88:83:d1:
         af:5b:89:62:c3:68:e4:ac:fa:df:67:3d:ab:0a:f4:54:36:2e:
         c5:f4:9a:a0:ad:ce:79:c8:ba:ad:7a:ff:92:0b:ab:cf:e5:9b:
         1d:36:65:1f:0e:37:83:4d:95:36:6c:de:00:32:33:5d:98:7e:
         87:85:cc:92:27:b9:76:3b:6c:5b:7c:19:b8:93:bc:c3:b7:21:
         e5:c0:13:aa:02:e1:29:e5:15:32:e5:3b:aa:1d:1b:39:d4:a4:
         dc:91:36:4c:a1:0f:cb:66:5e:cc:85:02:ed:4b:d5:62:14:0d:
         94:04:7e:16:cc:7c:0b:58:97:c3:2a:dc:59:86:a1:4d:b4:77:
         c2:cf:43:e8:1c:73:ab:de:f7:55:03:11:db:21:d2:ea:0a:6d:
         f2:e3:95:5f:98:3c:a9:93:69:dd:ce:06:ea:e6:7d:4c:d6:3a:
         ee:c6:61:72:f8:79:82:a8:00:dc:74:4a:ba:ea:02:ee:71:c4:
         f9:c8:95:bb:76:3d:75:a7:32:72:54:ba:b1:a7:f0:cd:5e:43:
         45:34:f0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:37:54 2025 by rpki-client