Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
File:                     G4GY4pfs-4-1GveWJNO2hKH5tR0.mft (raw, json)
Hash identifier:          r3BeTs2S2GasnibMW1/uUz7M9ybqtpVBhxNSvNbLov4=
Subject key identifier:   83:D9:9F:34:0F:D0:1C:AC:65:48:44:D3:8A:56:2B:B4:EE:72:B9:86
Authority key identifier: 1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D
Certificate issuer:       /CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
Certificate serial:       2264
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
Manifest number:          225B
Signing time:             Sat 10 May 2025 15:48:29 +0000
Manifest this update:     Sat 10 May 2025 15:48:28 +0000
Manifest next update:     Sat 17 May 2025 15:48:28 +0000
Files and hashes:         1: G4GY4pfs-4-1GveWJNO2hKH5tR0.crl (hash: wtX1lqY/8NxVJuoeqOgHTP4uEs77xsNqyzVPbpNNynk=)
                          2: EBEA51DC4EE311EFA1615635C4F9AE02.roa (hash: Trb/xXQ89mwzGyAL+1mOumJDf5X3SVH7b+Li/DvO+lE=)
                          3: 27CF6BE84EED11EF8D4BE30CC4F9AE02.roa (hash: vUHNM7b/7rHUhQuKzV89H4uhi15N4fuBRHxCcyjL5as=)
                          4: EDB5F114A63711EF89F3B833C4F9AE02.roa (hash: yRPrheegIm3V93UgDt8N+OL/cPpnwv9rIo76kYVagnE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl
                          rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 15:48:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8804 (0x2264)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E47C, serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
        Validity
            Not Before: May 10 15:48:28 2025 GMT
            Not After : May 17 15:48:28 2025 GMT
        Subject: CN=681f754d-ab21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:63:a1:1d:be:7d:33:68:ca:14:ca:40:41:53:
                    09:a7:80:4a:80:b1:ad:f9:ab:37:0f:84:c7:c9:0d:
                    b6:eb:65:5c:98:00:f4:55:9f:a4:fc:fe:a8:0f:12:
                    c9:ab:6f:21:de:f5:6e:b1:65:0f:21:fb:e2:72:2b:
                    47:f3:dd:42:56:97:76:1d:a3:11:c8:df:28:86:13:
                    a6:06:e8:ae:6b:ed:6c:e1:16:72:25:da:4c:f0:e6:
                    cf:22:e6:8f:94:85:17:e2:24:5c:2e:57:a4:34:07:
                    79:b3:e5:33:03:c7:00:35:a0:ec:72:40:d1:10:27:
                    54:31:64:f0:41:10:bf:2c:88:94:22:91:db:5b:d2:
                    8d:1c:e4:fc:42:11:d4:72:bd:16:a6:2a:57:97:18:
                    de:a7:36:84:34:36:7f:02:01:d8:ef:89:fd:1d:6c:
                    0d:4b:ec:7c:6b:c3:5f:f4:d5:d8:81:28:95:5d:c7:
                    39:6d:99:5b:d8:f5:42:83:ab:7f:34:c6:1f:61:13:
                    f1:c2:00:a6:33:8d:fc:ef:0a:c9:f4:e4:dc:d8:19:
                    fa:0b:22:b8:a8:44:05:2e:d7:37:c4:d1:35:9e:17:
                    97:39:14:8e:56:59:88:05:c0:5b:0a:a8:46:b1:2f:
                    8f:ef:35:72:91:ce:9e:37:63:fa:57:f3:68:9a:3c:
                    05:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D9:9F:34:0F:D0:1C:AC:65:48:44:D3:8A:56:2B:B4:EE:72:B9:86
            X509v3 Authority Key Identifier:
                keyid:1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:e0:34:48:93:ca:3a:4b:ae:81:68:96:40:df:85:ce:28:20:
         8c:fb:7f:3a:34:71:d2:e2:ac:f2:0f:31:69:19:bd:43:29:d8:
         32:c9:3a:a8:68:83:95:9d:26:db:19:f8:07:c6:0b:09:bc:26:
         d0:84:39:2f:08:0b:71:8c:3c:c7:65:af:81:6d:fd:db:9c:8b:
         3c:4b:33:39:5f:4c:d4:d3:25:62:39:52:2e:e7:7b:3a:3b:b7:
         b0:d4:fb:47:0a:34:c9:6c:83:5a:c2:4c:72:ae:2d:ab:11:ba:
         4e:d4:be:0e:74:0a:f0:91:c7:11:cc:85:07:71:82:82:c3:16:
         8e:f7:0e:24:0f:d8:26:56:29:ec:da:65:aa:36:70:45:d7:b7:
         3c:60:b5:72:34:95:4c:b6:6d:9b:d1:bc:e2:11:35:44:c1:ba:
         10:27:96:11:18:ea:74:d5:a1:c5:92:d7:f9:0f:fe:5c:c3:2b:
         d9:10:94:8b:a1:32:ae:4d:bd:a9:11:28:c8:6e:0f:4a:19:88:
         cb:35:c5:79:b5:39:60:cd:3f:f5:a2:90:24:7e:ee:d3:5b:67:
         4c:15:71:01:45:39:49:99:e1:e4:67:44:f7:29:15:ea:e8:5e:
         61:4c:39:85:14:e8:fa:1c:fa:88:3d:79:35:0f:94:f2:e0:91:
         4f:e4:04:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:17:19 2025 by rpki-client