Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft
File:                     gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft (raw, json)
Hash identifier:          l+jQX/ZeyV/bVHqK98x7VnuI1uAj1pliZQQKM5uem4A=
Subject key identifier:   CE:0C:E3:09:84:72:62:29:00:4E:61:B4:B5:98:F7:10:B9:20:60:D0
Authority key identifier: 80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A
Certificate issuer:       /CN=A91936BE/serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A
Certificate serial:       081C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft
Manifest number:          0810
Signing time:             Wed 02 Jul 2025 21:10:08 +0000
Manifest this update:     Wed 02 Jul 2025 21:10:08 +0000
Manifest next update:     Wed 09 Jul 2025 21:10:08 +0000
Files and hashes:         1: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl (hash: P+6r7l++tPI1FGeE1jn8bmQAPgYcCsc0AtRI4LrateI=)
                          2: 538866F6E44B11EAA31DD984C4F9AE02.roa (hash: muRqFTnS2+oQQUYzYuXwP+mAhzn5jlwAwgRQL1uNMII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl
                          rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 21:10:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2076 (0x81c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91936BE, serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A
        Validity
            Not Before: Jul  2 21:10:08 2025 GMT
            Not After : Jul  9 21:10:08 2025 GMT
        Subject: CN=6865a030-736c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ef:af:64:92:df:11:20:be:01:19:78:20:79:
                    a6:b0:6b:62:0f:05:5f:f6:ca:95:24:5a:94:54:23:
                    e4:23:40:79:72:a7:51:27:da:78:a0:63:f5:4c:cc:
                    02:b3:ea:e7:39:d1:79:8f:10:b5:50:b6:8f:3b:c1:
                    2b:fb:8f:6f:c3:49:db:86:20:10:2f:df:fd:5a:11:
                    92:fe:68:68:5b:1c:50:47:c8:6c:6c:11:cf:e5:05:
                    aa:82:a7:72:b8:c6:2b:87:dc:7f:17:34:2a:74:24:
                    c3:58:b2:8c:f1:7b:2e:5f:d2:d3:5a:58:1f:50:95:
                    75:d5:de:e3:63:93:77:94:b6:45:7f:ef:1d:c0:26:
                    da:0f:47:da:8d:9a:89:5e:78:d6:11:e0:04:1e:56:
                    85:e6:59:53:42:90:56:62:51:92:e9:f3:6a:84:b9:
                    bd:54:02:f6:89:5a:fe:10:b8:ba:72:fc:9b:83:75:
                    ae:97:e9:0d:88:ce:b9:03:48:d6:b3:97:2e:3c:bc:
                    79:92:2a:5f:8f:6d:9b:65:26:13:d7:18:72:41:13:
                    17:3d:b5:10:90:51:47:db:7b:34:d4:5d:36:42:35:
                    1f:07:45:1c:8a:49:5f:b6:0c:09:e5:27:3c:d3:ae:
                    31:cc:d3:78:a5:5a:4f:fb:a7:da:99:54:d6:d0:2a:
                    65:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0C:E3:09:84:72:62:29:00:4E:61:B4:B5:98:F7:10:B9:20:60:D0
            X509v3 Authority Key Identifier:
                keyid:80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:9b:6f:f3:79:7f:fd:7d:2f:1a:c4:57:5a:d0:59:c3:4d:87:
         70:93:6d:51:05:dc:c5:d2:c0:f8:9a:0d:55:b9:aa:ea:9f:ca:
         da:d3:27:b7:c3:b5:b3:a9:ba:24:57:d7:a3:8d:f5:58:69:74:
         f4:d5:eb:2c:2e:35:15:46:02:21:cb:b3:aa:f9:a0:16:d6:eb:
         84:bd:5a:cf:28:f4:a9:97:4a:45:b4:d4:76:3d:71:27:28:09:
         ab:3b:ad:1f:d4:3a:0e:48:4e:f1:1c:4c:a4:33:dd:ee:ec:79:
         49:63:37:7a:32:6e:6b:ed:29:36:b7:23:03:fe:98:89:d7:7e:
         f5:85:f7:30:c1:3f:c8:c9:e1:ff:a5:98:65:5b:fd:e1:e7:95:
         82:b7:77:cf:0d:62:df:6a:e7:0c:5b:21:fe:b2:de:57:01:07:
         d4:c2:30:2e:b1:59:81:54:ac:ff:71:a5:07:6b:46:4c:5d:f4:
         49:03:7e:94:89:a5:e3:7c:a9:d1:95:f7:b1:cd:62:14:18:ec:
         c0:59:6d:80:9d:84:6e:cd:1c:0b:47:43:e3:37:fa:4f:1c:15:
         0b:67:1e:3a:ed:1b:a5:23:60:e0:0c:48:2b:62:f7:3a:96:40:
         41:86:88:ec:95:18:3f:51:cf:27:14:f2:35:0a:37:8a:40:25:
         6e:fa:66:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 02:54:01 2025 by rpki-client