Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
File:                     G4GY4pfs-4-1GveWJNO2hKH5tR0.mft (raw, json)
Hash identifier:          1ApYI0JZzBtCh0hetfnreCIKt89yLA5IGpX5liCwqaE=
Subject key identifier:   EF:B7:1D:8B:BD:42:57:AA:6C:60:57:56:BA:CC:5B:87:81:0F:92:A1
Authority key identifier: 1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D
Certificate issuer:       /CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
Certificate serial:       227E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
Manifest number:          2275
Signing time:             Mon 30 Jun 2025 15:55:36 +0000
Manifest this update:     Mon 30 Jun 2025 15:55:35 +0000
Manifest next update:     Mon 07 Jul 2025 15:55:35 +0000
Files and hashes:         1: G4GY4pfs-4-1GveWJNO2hKH5tR0.crl (hash: +0V93kRP9JqNVQAvwrGXoXes6GiDI4crmKDNxVvP3xE=)
                          2: EBEA51DC4EE311EFA1615635C4F9AE02.roa (hash: Trb/xXQ89mwzGyAL+1mOumJDf5X3SVH7b+Li/DvO+lE=)
                          3: 27CF6BE84EED11EF8D4BE30CC4F9AE02.roa (hash: vUHNM7b/7rHUhQuKzV89H4uhi15N4fuBRHxCcyjL5as=)
                          4: EDB5F114A63711EF89F3B833C4F9AE02.roa (hash: yRPrheegIm3V93UgDt8N+OL/cPpnwv9rIo76kYVagnE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl
                          rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 15:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8830 (0x227e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E47C, serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
        Validity
            Not Before: Jun 30 15:55:35 2025 GMT
            Not After : Jul  7 15:55:35 2025 GMT
        Subject: CN=6862b377-b9d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6a:4a:4c:a9:fa:5e:11:4f:5b:7b:8a:8a:6c:
                    e9:4a:26:6b:29:a4:2e:71:fb:f5:33:45:0a:4f:09:
                    2e:35:92:c6:19:50:31:f8:4d:0f:40:bd:15:3c:a3:
                    dc:9f:4a:e8:8f:95:89:72:77:8c:b4:f7:34:31:59:
                    0d:0e:d0:bf:08:f2:32:59:4e:52:6f:e1:13:36:12:
                    15:58:98:34:ba:0b:b1:7c:02:0a:82:a9:3a:9c:6d:
                    b4:11:97:83:48:e0:4a:18:ef:a7:35:8b:87:00:7b:
                    10:86:33:22:ee:d5:d7:fb:81:25:04:74:b4:73:32:
                    d3:ff:d7:0f:14:84:09:c1:25:2b:2e:6e:f9:37:73:
                    50:25:f5:36:e6:9f:ee:9d:54:8a:c1:38:f2:79:df:
                    6d:7e:c6:b1:68:bf:3d:2f:19:bb:e1:1f:86:1b:f7:
                    14:11:7f:e7:a1:db:25:60:54:c9:3f:8a:70:a7:ce:
                    8e:4d:4c:70:af:0f:dd:39:e4:a9:73:5c:1c:eb:25:
                    8d:a7:95:96:7e:ed:e7:3c:df:af:d8:7a:5f:d4:2f:
                    ab:1f:88:9b:6b:ce:7c:0f:09:16:15:37:db:92:b0:
                    f5:3b:5a:01:00:d2:8c:31:60:7f:fb:47:22:8b:ec:
                    da:d5:54:66:b1:53:5c:c0:4b:2d:5d:b5:30:dc:ec:
                    4e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B7:1D:8B:BD:42:57:AA:6C:60:57:56:BA:CC:5B:87:81:0F:92:A1
            X509v3 Authority Key Identifier:
                keyid:1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:b1:00:c7:d0:30:22:e1:93:dd:6b:3e:b7:6a:c5:0b:d8:4f:
         34:da:84:a7:0a:84:52:6c:aa:9a:23:73:2f:72:4e:59:01:7e:
         b6:b3:df:44:73:0c:48:ca:4b:6d:dc:06:1c:b3:10:26:03:7c:
         34:c1:19:5d:a2:29:2e:f9:b3:d4:0c:e7:a3:02:25:4b:58:18:
         94:d1:1c:6e:4a:b1:e4:1f:4a:39:a3:c8:50:2d:ba:de:9e:2b:
         6d:00:fc:8b:b7:3a:10:30:59:20:b7:a2:09:3a:e5:a8:cf:32:
         dd:ae:6c:71:59:e5:5a:15:af:7c:0a:54:d2:6a:38:70:0b:af:
         49:52:7c:9d:22:76:8d:4d:46:8b:9a:ed:6e:a6:42:a1:e5:46:
         5d:64:6c:ce:73:ba:62:fd:57:03:b2:39:18:e5:b2:72:03:bd:
         0c:84:c9:f3:0d:7e:34:d4:9a:b0:08:ca:54:fe:c8:54:9f:1f:
         e4:66:af:7b:37:f2:16:57:80:2b:32:0c:5c:24:71:fe:19:ec:
         f6:25:d4:e5:c5:38:27:6e:ad:48:13:6c:bb:07:ca:4b:f6:b2:
         5b:7d:7d:00:e9:a3:3f:e5:67:f9:9c:73:f4:0b:ce:d2:3e:66:
         f1:53:ca:23:f9:eb:17:d3:09:88:f3:70:bd:df:6d:aa:e9:72:
         60:3e:d4:1e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICIn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUU0N0MxMTAvBgNVBAUTKDFCODE5OEUyOTdFQ0ZCOEZCNTFBRjc5NjI0RDNCNjg0
QTFGOUI1MUQwHhcNMjUwNjMwMTU1NTM1WhcNMjUwNzA3MTU1NTM1WjAYMRYwFAYD
VQQDEw02ODYyYjM3Ny1iOWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0mpKTKn6XhFPW3uKimzpSiZrKaQucfv1M0UKTwkuNZLGGVAx+E0PQL0VPKPc
n0roj5WJcneMtPc0MVkNDtC/CPIyWU5Sb+ETNhIVWJg0uguxfAIKgqk6nG20EZeD
SOBKGO+nNYuHAHsQhjMi7tXX+4ElBHS0czLT/9cPFIQJwSUrLm75N3NQJfU25p/u
nVSKwTjyed9tfsaxaL89Lxm74R+GG/cUEX/nodslYFTJP4pwp86OTUxwrw/dOeSp
c1wc6yWNp5WWfu3nPN+v2Hpf1C+rH4iba858DwkWFTfbkrD1O1oBANKMMWB/+0ci
i+za1VRmsVNcwEstXbUw3OxO5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+3HYu9
QleqbGBXVrrMW4eBD5KhMB8GA1UdIwQYMBaAFBuBmOKX7PuPtRr3liTTtoSh+bUd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTQ3Qy80N0I1NTk5MkFE
MEYxMUU1Qjk3OEZENTRDNEY5QUUwMi9HNEdZNHBmcy00LTFHdmVXSk5PMmhLSDV0
UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0c0R1k0cGZzLTQtMUd2ZVdKTk8yaEtINXRSMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RTQ3Qy80N0I1NTk5MkFEMEYxMUU1Qjk3OEZENTRDNEY5QUUwMi9HNEdZNHBmcy00
LTFHdmVXSk5PMmhLSDV0UjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCHsQDH0DAi4ZPdaz63asUL2E802oSnCoRSbKqaI3Mvck5ZAX62s99E
cwxIyktt3AYcsxAmA3w0wRldoiku+bPUDOejAiVLWBiU0RxuSrHkH0o5o8hQLbre
nittAPyLtzoQMFkgt6IJOuWozzLdrmxxWeVaFa98ClTSajhwC69JUnydInaNTUaL
mu1upkKh5UZdZGzOc7pi/VcDsjkY5bJyA70MhMnzDX401JqwCMpU/shUnx/kZq97
N/IWV4ArMgxcJHH+Gez2JdTlxTgnbq1IE2y7B8pL9rJbfX0A6aM/5Wf5nHP0C87S
PmbxU8oj+esX0wmI83C9322q6XJgPtQe
-----END CERTIFICATE-----
Generated at Tue Jul 1 17:51:44 2025 by rpki-client