Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft
File:                     GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft (raw, json)
Hash identifier:          xYKSMaz2CXyzv+kQ86IC14LjAnazPWwQfZqYR0bSMsw=
Subject key identifier:   30:30:A5:A8:1C:54:C4:2A:A4:61:43:95:47:BC:4F:79:75:4F:BA:CA
Authority key identifier: 19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36
Certificate issuer:       /CN=A919400C/serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636
Certificate serial:       060D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft
Manifest number:          0600
Signing time:             Sat 10 May 2025 22:29:58 +0000
Manifest this update:     Sat 10 May 2025 22:29:58 +0000
Manifest next update:     Sat 17 May 2025 22:29:58 +0000
Files and hashes:         1: GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl (hash: WCmWX5LBq2bRzyzu9FF276cuQz4eu9jFhoqKZh3XldQ=)
                          2: 6E6A801066CB11EFA513A684C4F9AE02.roa (hash: vXar9bKA8CImjVKWhu4MzK44EuwvcZRevRawwazNHWQ=)
                          3: 3D83702E66CB11EFA2A66984C4F9AE02.roa (hash: lUgZ45NhNVzRaDmFfEX8lN0zDz9HpfoRqK2qSylb5c0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl
                          rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 22:29:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1549 (0x60d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919400C, serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636
        Validity
            Not Before: May 10 22:29:58 2025 GMT
            Not After : May 17 22:29:58 2025 GMT
        Subject: CN=681fd366-8947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:db:b9:1a:3c:1f:f0:27:ae:cd:05:ca:92:69:
                    94:ed:d6:ca:cd:17:90:72:eb:22:81:18:9b:71:85:
                    ab:07:60:04:66:02:52:78:b6:63:d2:9b:dc:d8:3c:
                    7d:70:d9:da:a3:8e:ce:10:4a:f6:3c:63:a8:76:4d:
                    ca:4a:84:7f:04:0c:11:53:4f:cc:87:fc:fa:fa:f5:
                    b5:dd:17:93:5e:64:ec:cf:d2:b8:72:e2:f3:ca:1e:
                    e7:61:ce:61:35:b2:b8:e7:88:e9:f6:ad:bf:39:05:
                    06:03:f0:23:69:14:1b:e6:ff:df:d3:78:4a:6f:4b:
                    95:3f:7b:04:4f:30:f9:43:85:d4:60:61:83:c5:df:
                    15:f0:6c:b3:7c:ac:be:e6:65:74:80:28:31:44:69:
                    8b:5c:58:f9:8e:d3:da:bd:72:c4:ed:fa:49:6b:0e:
                    ed:77:02:1b:f9:ea:cf:5a:c0:b0:b3:58:e4:62:85:
                    5c:71:a2:7c:b3:4e:5c:d2:a4:24:58:1f:d8:7c:b7:
                    86:15:3a:2e:2c:f4:52:6b:69:1a:ba:d4:c4:2e:84:
                    e7:2f:7b:d4:ed:d1:1f:2c:db:8b:a4:6f:0d:59:d6:
                    a9:9f:9c:97:bb:91:e9:06:ad:a7:e6:5b:e6:5e:6a:
                    f5:89:59:55:09:1f:c1:b2:0d:dc:28:d5:2e:3e:48:
                    dd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:30:A5:A8:1C:54:C4:2A:A4:61:43:95:47:BC:4F:79:75:4F:BA:CA
            X509v3 Authority Key Identifier:
                keyid:19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:4c:41:b1:93:2f:73:9d:89:1d:31:11:cb:c3:b7:9b:d4:fb:
         03:81:f0:07:74:63:32:95:83:6f:58:1a:ad:7e:eb:6f:86:79:
         94:87:62:4a:e5:0c:50:85:3d:75:76:53:ad:93:5d:14:b5:72:
         c8:27:01:b5:d8:98:0e:31:62:1b:e1:47:b9:99:86:cd:55:af:
         00:b4:d5:a2:a9:b7:7b:6b:03:ac:54:a3:78:47:52:fe:58:0a:
         08:9a:9c:a3:2f:13:3a:02:d5:a7:24:fc:23:58:00:26:9c:91:
         39:a0:94:26:ad:61:a4:f3:99:b6:87:16:4a:4b:ae:50:50:9b:
         a6:59:53:9d:d9:86:53:e4:f5:04:ac:46:e3:c5:73:f9:6c:40:
         ca:2c:85:3e:36:44:ec:43:f3:71:c8:e6:74:b2:22:74:c8:6e:
         ff:4b:a2:92:f5:e7:2c:d9:3a:8e:e0:ab:a8:82:18:1d:92:bd:
         7c:42:28:33:f5:28:89:c2:ee:5d:f3:c2:d8:ea:2f:78:80:4e:
         53:2f:c9:e7:39:79:54:cb:fe:b7:41:00:8a:6d:e9:1f:e6:c3:
         44:99:ab:33:dc:c5:59:bd:70:12:cf:09:90:31:02:e7:05:5a:
         5d:a0:d3:d5:22:35:46:93:84:57:56:ed:d6:33:b9:c8:32:41:
         ba:28:3d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:40:41 2025 by rpki-client