Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
File:                     GkAQC15dw00ay1htJzOQptUXff8.mft (raw, json)
Hash identifier:          kl7LbJTWkSG/WwxsE5LLOcpUD6yTES2u3zNfz3AMZlI=
Subject key identifier:   3A:E2:A3:8F:14:C4:73:34:1F:7D:6D:C5:CD:81:B7:84:A8:58:90:EA
Authority key identifier: 1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF
Certificate issuer:       /CN=A9194C99/serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF
Certificate serial:       03C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
Manifest number:          03BE
Signing time:             Tue 01 Jul 2025 01:14:45 +0000
Manifest this update:     Tue 01 Jul 2025 01:14:45 +0000
Manifest next update:     Tue 08 Jul 2025 01:14:45 +0000
Files and hashes:         1: GkAQC15dw00ay1htJzOQptUXff8.crl (hash: EwpUwUjaTTZPbTwib7iuZd7rNL6sxUNhL3gQ9NQrRGY=)
                          2: 8AB545D294A711ECA073AB56C4F9AE02.roa (hash: Vcf2mCMS48B4jAqDXmFIESOPS9I9k4iNYocNkMUmAvc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl
                          rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 01:14:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 963 (0x3c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194C99, serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF
        Validity
            Not Before: Jul  1 01:14:45 2025 GMT
            Not After : Jul  8 01:14:45 2025 GMT
        Subject: CN=68633685-40d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:00:2d:89:47:fc:c5:5f:3f:af:c9:8e:9c:eb:
                    c3:b2:f7:eb:5b:83:cf:d9:2f:da:87:9f:e2:2f:03:
                    9b:45:cd:5b:fa:52:36:62:2d:52:1c:f8:fb:8b:09:
                    a4:8b:aa:cb:63:b1:a1:39:21:e1:bf:58:f8:6d:88:
                    92:0d:68:f9:e5:38:2c:15:16:1f:cf:51:6f:d0:df:
                    89:8a:7d:14:be:8b:de:9f:6e:4d:d8:f0:65:ed:fb:
                    da:78:a6:39:1c:7d:a3:b8:fe:01:68:a3:91:60:40:
                    3f:9a:f7:5b:25:36:23:e9:bd:85:08:3d:81:2e:be:
                    ed:90:84:d1:7f:5b:0d:36:05:b0:6a:ec:3f:68:01:
                    58:3b:9c:e4:ce:4d:ec:88:8d:5a:40:09:bc:96:07:
                    85:b0:4b:28:bb:96:e0:6d:63:5c:3a:31:a1:29:67:
                    57:9d:e3:0e:df:dc:37:51:a7:51:08:53:8d:1c:54:
                    2f:d0:c6:92:2c:c5:60:15:bd:ef:03:70:b1:02:88:
                    16:74:8f:09:0b:c0:be:a7:2d:4c:1e:e2:93:79:8c:
                    6a:2e:f1:48:94:99:e9:63:9c:b4:42:ec:ee:aa:7f:
                    6b:84:2e:65:d9:1c:18:7c:9f:26:0c:de:06:5c:9c:
                    08:cd:55:e8:5e:dc:50:ca:de:a4:d5:e4:e7:d1:49:
                    9f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E2:A3:8F:14:C4:73:34:1F:7D:6D:C5:CD:81:B7:84:A8:58:90:EA
            X509v3 Authority Key Identifier:
                keyid:1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ee:01:c6:76:17:62:18:fb:9f:9f:d7:b5:d2:b8:e7:ed:e3:
         d8:9d:a7:83:3b:ea:42:0d:ea:6a:44:36:ff:34:27:5d:eb:0b:
         1f:57:d1:66:57:e5:56:57:10:8e:7f:3c:d2:52:50:cc:e2:29:
         16:d1:c7:f8:9c:d3:1a:f1:2a:18:cf:a4:ff:b8:18:02:d6:0c:
         ee:61:89:01:6b:c7:b2:6e:07:ee:6c:fb:0f:ad:67:26:77:d6:
         e5:5d:5d:ce:64:9e:e0:1b:84:62:76:47:cb:08:0a:5e:39:57:
         3d:09:b5:85:1d:bd:93:19:7e:06:50:f7:52:84:84:ae:78:7a:
         5d:a7:6a:dc:ac:4a:4c:25:66:5c:2e:96:95:8f:12:93:a7:92:
         e0:64:e3:fa:68:fe:16:33:ab:d0:ee:5b:8e:1c:5f:7b:e0:b0:
         56:fd:7f:4e:b1:d3:cc:1e:c6:e3:f6:3c:e4:eb:0b:63:65:91:
         f0:92:18:1c:c2:02:96:26:f5:5b:b1:3d:08:c7:ad:19:91:1f:
         25:5c:e0:ca:5c:6c:78:7e:47:a3:13:9c:ba:a2:76:cf:9a:c4:
         d8:1e:5c:3d:3d:c9:6c:87:9e:5f:7d:4e:db:dc:02:66:91:e0:
         34:af:2b:d9:8f:1f:8f:d4:1e:0e:b3:e5:f7:88:95:6f:99:2a:
         8d:2d:24:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:30:52 2025 by rpki-client