Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
File:                     GWhCPtbSSViApWptsCvGcpjF5oY.mft (raw, json)
Hash identifier:          eUTL4gor2gjGJU/Sdfb4dgU4uPD4UbnqQBoscZFyXik=
Subject key identifier:   09:AD:7C:DA:DB:B1:DC:6F:61:58:A6:3F:50:9A:7B:26:4A:37:32:50
Authority key identifier: 19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86
Certificate issuer:       /CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
Certificate serial:       106C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
Manifest number:          1052
Signing time:             Mon 12 May 2025 17:20:17 +0000
Manifest this update:     Mon 12 May 2025 17:20:16 +0000
Manifest next update:     Mon 19 May 2025 17:20:16 +0000
Files and hashes:         1: GWhCPtbSSViApWptsCvGcpjF5oY.crl (hash: 94m+/nSLTYhS2aamKqXfMFHYHkNXPjHEmzEN8dRvYdM=)
                          2: D4F3A2B4DBCD11EE9B6F4669C4F9AE02.roa (hash: EHJm/HiHyHS2wDLaVYk3k6uReoau+etZZWwlwm0AUaM=)
                          3: 2884888A717011E99BA2FB3DC4F9AE02.roa (hash: vyuDgVud8VeU+L1s3GBCpzmY/+n8YurORFgDE2x/P9Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl
                          rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 17:20:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4204 (0x106c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D3A9, serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
        Validity
            Not Before: May 12 17:20:16 2025 GMT
            Not After : May 19 17:20:16 2025 GMT
        Subject: CN=68222dd0-b13c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d8:40:36:a6:21:0c:e0:2a:70:7f:d4:6a:9b:
                    d1:7b:24:98:d5:ed:04:2a:a1:b3:f6:d5:1a:74:37:
                    13:2c:11:f1:f3:f0:c4:70:c3:83:e6:cd:28:f3:d0:
                    21:19:3c:5c:8b:bb:bb:44:af:ce:09:cd:5a:0b:38:
                    bb:9a:9a:f4:44:de:38:4b:d7:a0:4d:9a:b7:fc:ad:
                    a9:a3:92:44:3c:f3:9f:ca:c2:8f:6b:dc:84:d5:d1:
                    50:e4:d0:6c:d6:fa:6c:f5:e3:2c:01:85:bd:52:93:
                    a6:db:58:ab:85:70:a1:57:ae:b1:45:5c:09:0a:03:
                    2a:43:25:5c:24:e3:43:0b:98:37:eb:f3:9b:8d:93:
                    f1:7e:61:69:fd:17:6f:17:75:6e:94:fc:09:f2:2e:
                    e7:89:08:31:f2:f6:fe:a5:30:49:ac:b5:2f:1e:a7:
                    da:e7:cc:aa:b7:27:5a:5b:37:f1:56:6d:48:6d:1a:
                    fc:ec:2e:99:95:38:8c:e3:b8:1e:92:1e:9f:e9:cf:
                    2c:a3:5b:49:ab:6a:7f:60:83:18:2c:d0:fe:f5:4c:
                    27:2a:e0:3c:7f:6e:29:c3:8c:b7:97:14:46:13:65:
                    0f:6a:a3:4e:1d:9a:f8:5d:bc:f9:b1:a6:ee:c8:28:
                    af:35:67:f9:81:c1:81:46:e2:4e:59:19:7c:8d:a1:
                    5b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AD:7C:DA:DB:B1:DC:6F:61:58:A6:3F:50:9A:7B:26:4A:37:32:50
            X509v3 Authority Key Identifier:
                keyid:19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:96:81:30:b8:86:60:91:f1:f3:21:90:1f:0a:62:1c:10:dc:
         52:00:df:e5:87:da:00:33:9b:8a:ef:a3:e2:d8:6d:32:1d:05:
         90:bb:56:bd:45:bd:18:d1:f2:01:e7:48:6a:5b:e8:ed:82:4f:
         57:55:ae:84:c0:e4:2e:c4:33:a3:99:a5:a5:31:25:c4:bb:1a:
         9d:93:bf:8e:94:7e:ef:ac:b1:59:1b:7a:91:29:17:41:bd:5d:
         43:89:88:fb:14:fc:14:fd:66:63:ab:c5:22:65:51:6c:cc:84:
         cf:07:d7:67:90:81:b0:ef:c9:c7:ab:b4:3f:3d:bf:ac:b4:c9:
         43:a0:d8:be:2f:e5:81:d7:a0:18:8a:6b:41:fc:a8:c8:20:2f:
         df:aa:44:72:cb:c6:95:57:dd:6a:b9:b7:b0:f6:92:bb:71:a2:
         d8:e9:46:c4:71:f2:3c:89:68:09:8e:22:e0:87:e3:df:ce:38:
         57:b8:14:06:de:dc:ba:38:10:44:80:6b:cb:49:80:fa:45:c0:
         ab:ab:71:a5:59:21:89:28:ea:7b:66:69:91:8c:f5:d6:10:86:
         b3:30:ef:f0:32:ec:e3:57:21:27:54:00:8f:b4:fa:af:18:fb:
         2a:e8:88:45:dd:7f:38:14:0b:4f:66:5b:51:5f:76:84:5a:82:
         bf:5d:3f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 14:29:10 2025 by rpki-client