Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F525/8242878494C911ED8B3D215EC4F9AE02/GLReQdo59jAuMWmWMNMihds9kxw.mft
File:                     GLReQdo59jAuMWmWMNMihds9kxw.mft (raw, json)
Hash identifier:          PD7oMTHJcMG7BuQnxh7AZ5/NvGYz03OlOQ4TxQ4u5ks=
Subject key identifier:   92:3C:69:2A:F3:DA:6B:1F:FA:63:A1:84:B1:D2:11:83:94:FA:F0:E5
Authority key identifier: 18:B4:5E:41:DA:39:F6:30:2E:31:69:96:30:D3:22:85:DB:3D:93:1C
Certificate issuer:       /CN=A918F525/serialNumber=18B45E41DA39F6302E31699630D32285DB3D931C
Certificate serial:       01B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLReQdo59jAuMWmWMNMihds9kxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F525/8242878494C911ED8B3D215EC4F9AE02/GLReQdo59jAuMWmWMNMihds9kxw.mft
Manifest number:          01B4
Signing time:             Thu 15 May 2025 02:36:31 +0000
Manifest this update:     Thu 15 May 2025 02:36:31 +0000
Manifest next update:     Thu 22 May 2025 02:36:31 +0000
Files and hashes:         1: GLReQdo59jAuMWmWMNMihds9kxw.crl (hash: lUMdwHKV6OqgY3qqz9Y43NvPBAYm3AAp5n2aMNcRdV4=)
                          2: 3062089A94CE11ED806CD364C4F9AE02.roa (hash: 5q8BGN7Hf8i2/RzifjmylO87f37u56OKRgIkUmDm+8Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F525/8242878494C911ED8B3D215EC4F9AE02/GLReQdo59jAuMWmWMNMihds9kxw.crl
                          rsync://rpki.apnic.net/member_repository/A918F525/8242878494C911ED8B3D215EC4F9AE02/GLReQdo59jAuMWmWMNMihds9kxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLReQdo59jAuMWmWMNMihds9kxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 02:36:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F525, serialNumber=18B45E41DA39F6302E31699630D32285DB3D931C
        Validity
            Not Before: May 15 02:36:31 2025 GMT
            Not After : May 22 02:36:31 2025 GMT
        Subject: CN=6825532f-ab49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dd:b4:8f:db:3a:be:43:d4:10:a9:52:7e:c9:
                    c4:f6:45:f2:88:9a:06:df:34:b7:cb:12:4b:5b:b1:
                    51:ae:2f:f4:ff:9a:14:f4:61:61:e4:8f:aa:a9:d2:
                    d6:04:ed:48:b9:94:5f:b0:e1:a5:46:8f:cf:5c:83:
                    14:3f:4e:1d:bd:74:60:cc:ce:47:77:dc:2d:d9:cc:
                    e1:7f:b9:f5:31:c1:32:3d:3a:31:e8:5f:e4:21:78:
                    fe:a6:28:b4:e1:f9:44:2d:f5:f0:37:55:8c:f7:1c:
                    d1:f9:eb:d7:a0:0d:6e:e0:73:4f:24:01:45:5c:03:
                    3a:5c:e2:f7:9e:60:6a:54:86:d8:88:4e:f7:9e:14:
                    94:3a:02:d8:63:72:ac:82:90:ca:40:0a:77:ea:04:
                    2a:54:85:00:06:ac:87:d8:57:38:64:7d:3f:56:0b:
                    46:a5:c3:52:30:96:f4:1d:29:c3:c4:0c:43:09:6e:
                    33:a2:cd:fd:3b:30:a8:dd:14:0b:13:5a:58:ae:38:
                    f0:d5:ef:78:9e:3c:22:ea:18:35:0e:24:2b:6d:ba:
                    45:16:27:4e:d3:d7:4f:18:b7:80:40:54:70:bd:74:
                    87:77:51:4e:ac:88:63:aa:b7:8e:eb:8e:62:be:6b:
                    69:a8:48:17:1b:0b:39:aa:65:7e:16:40:f0:6a:c7:
                    3b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3C:69:2A:F3:DA:6B:1F:FA:63:A1:84:B1:D2:11:83:94:FA:F0:E5
            X509v3 Authority Key Identifier:
                keyid:18:B4:5E:41:DA:39:F6:30:2E:31:69:96:30:D3:22:85:DB:3D:93:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F525/8242878494C911ED8B3D215EC4F9AE02/GLReQdo59jAuMWmWMNMihds9kxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLReQdo59jAuMWmWMNMihds9kxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F525/8242878494C911ED8B3D215EC4F9AE02/GLReQdo59jAuMWmWMNMihds9kxw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:8e:fa:49:cc:00:14:be:30:f6:b3:6c:e5:91:f2:72:ef:0e:
         46:c7:04:b1:8e:d5:86:e0:b0:1f:2b:33:df:f5:4c:0e:3e:88:
         40:62:ee:b4:a9:a4:f6:db:0d:22:85:d3:fe:72:9b:60:7e:eb:
         27:09:80:db:b7:e0:49:b8:03:00:14:4b:4e:5b:85:ca:ea:6b:
         fb:88:44:08:b0:26:02:c6:f7:9e:f8:e3:25:bc:44:3e:db:58:
         79:4c:31:e2:8e:47:3c:7b:c8:72:17:51:24:9b:22:f0:8a:2a:
         f9:1a:3b:19:4f:b1:1b:29:cc:b5:97:90:95:18:93:c4:71:cd:
         67:bf:52:12:77:9a:c0:7f:fb:9e:e4:b2:5d:eb:09:2a:2e:e5:
         5c:16:2d:41:bc:07:9c:12:8e:72:b0:e1:8f:8c:90:24:cd:16:
         2c:21:49:7c:c8:fe:f0:19:7f:45:9d:22:fc:69:e8:d4:c7:e9:
         d4:24:cb:70:d6:98:a6:bf:0d:b2:6a:90:84:1b:83:c4:49:85:
         f6:02:40:46:f9:cd:95:34:a6:65:53:da:f9:29:f1:0d:b7:18:
         59:39:9b:80:93:8c:5e:dc:c2:00:a1:9a:cb:ac:5c:bf:a1:0e:
         2a:80:be:87:4b:6d:af:89:bc:05:82:33:72:7f:9d:d8:85:76:
         49:53:f1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 18:56:39 2025 by rpki-client