Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
File:                     G0PzVWVtEI4w0YQ03rV5PPagGjA.mft (raw, json)
Hash identifier:          wgNocseOc04akxJo+LO48tB9WaYsHjQ28RkHgsocF8k=
Subject key identifier:   97:F9:C0:FC:1D:98:63:B2:C2:BE:F2:1F:61:B2:52:35:63:B8:69:CD
Authority key identifier: 1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30
Certificate issuer:       /CN=A916B0EA/serialNumber=1B43F355656D108E30D18434DEB5793CF6A01A30
Certificate serial:       0C47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
Manifest number:          1464
Signing time:             Wed 02 Jul 2025 18:49:00 +0000
Manifest this update:     Wed 02 Jul 2025 18:49:00 +0000
Manifest next update:     Wed 09 Jul 2025 18:49:00 +0000
Files and hashes:         1: G0PzVWVtEI4w0YQ03rV5PPagGjA.crl (hash: TRPt16xinrxkyGVp/ZI3OM0yvoJFIZFpG2QwdwvixDQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.crl
                          rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 18:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3143 (0xc47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B0EA, serialNumber=1B43F355656D108E30D18434DEB5793CF6A01A30
        Validity
            Not Before: Jul  2 18:49:00 2025 GMT
            Not After : Jul  9 18:49:00 2025 GMT
        Subject: CN=68657f1c-0187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:47:78:3b:3a:b5:7d:51:59:83:9d:21:ae:e5:
                    97:05:77:63:6d:e3:5b:1c:0c:45:fa:a2:b0:26:e9:
                    7a:d4:d3:a0:77:4a:00:d9:65:6f:c9:30:65:dc:da:
                    67:30:c6:f7:1f:24:e9:49:41:c3:1e:07:a1:6c:42:
                    d0:df:79:d1:c0:2c:16:64:00:4f:61:2f:74:f6:b4:
                    85:83:61:66:b9:6f:91:af:2c:ce:05:0c:cf:77:29:
                    61:c7:25:ca:e6:96:24:ee:37:bb:f7:d7:21:6b:2f:
                    ba:17:aa:ea:5a:f9:7e:72:97:f0:1c:bb:75:bd:f8:
                    1f:e1:80:29:46:ef:fb:b9:fb:92:43:01:bb:e1:b4:
                    f9:03:72:10:24:1d:21:a0:1b:c1:07:0f:f1:78:9f:
                    63:3e:53:d5:97:f8:9a:a1:e3:52:76:80:66:97:ab:
                    a4:3b:7a:01:ee:3d:96:d6:ec:fa:39:96:36:4d:17:
                    b7:af:40:80:5a:12:46:7b:ab:e7:96:c2:2e:2d:d5:
                    ef:a7:5d:9d:0e:02:13:1b:2b:46:18:9d:8d:28:e5:
                    70:e8:0c:db:74:89:02:d1:23:3d:e6:75:d6:d0:8b:
                    09:07:39:91:75:c0:62:9e:11:29:25:bb:fc:c1:f0:
                    ab:9c:7c:0e:2a:30:17:53:a7:13:90:44:f6:83:43:
                    98:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F9:C0:FC:1D:98:63:B2:C2:BE:F2:1F:61:B2:52:35:63:B8:69:CD
            X509v3 Authority Key Identifier:
                keyid:1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ed:4e:0a:17:10:d7:b9:26:70:aa:25:1b:a8:76:b4:76:52:97:
         07:f1:1d:ac:8a:f9:35:38:52:2e:3f:9c:6e:9d:65:21:fb:e8:
         df:1c:da:11:17:40:e0:a7:25:32:ca:46:13:d4:02:cf:e5:cf:
         26:ee:02:9a:1b:a2:f3:83:96:aa:b2:9f:eb:63:b4:9b:00:32:
         94:96:d6:1b:11:72:11:25:ee:c5:f8:e2:69:b6:d4:06:6b:da:
         08:ea:bc:70:62:4c:17:f8:d2:d7:68:bf:b5:32:dd:d1:5f:f9:
         6a:57:b3:6a:3d:a0:1e:b2:67:8e:58:9c:0c:c8:f5:5a:87:2f:
         72:c3:ec:09:b4:64:3c:9f:5f:e4:c0:d8:27:35:df:68:81:ff:
         7f:b1:e6:34:4e:6b:f4:f9:ad:b0:7e:0a:a2:39:cc:10:03:03:
         69:1d:db:3e:ef:76:d1:3f:37:0d:b7:3b:c4:90:55:0a:09:60:
         39:55:c3:4e:81:fc:cb:d6:11:1c:a9:1a:9b:8f:42:2c:66:ca:
         3f:01:37:28:06:82:82:94:43:61:b5:09:4d:01:db:98:e6:67:
         06:24:f2:d2:82:30:10:7a:e2:d3:d4:25:f7:2e:36:f4:37:ca:
         bc:08:e6:3c:0d:59:19:e9:45:34:f2:28:c3:22:19:ad:37:9a:
         dc:83:38:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 21:58:41 2025 by rpki-client