Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.mft
File:                     GQQ80InJeU-nj0WlTqtfK26Rju4.mft (raw, json)
Hash identifier:          rR1hXX5dH4irEzgsImITtBssQPkmlIbMyyz4pvGUzaM=
Subject key identifier:   31:1E:1D:86:C4:3A:61:6D:82:00:25:F7:31:01:D5:A9:AD:72:CC:DB
Authority key identifier: 19:04:3C:D0:89:C9:79:4F:A7:8F:45:A5:4E:AB:5F:2B:6E:91:8E:EE
Certificate issuer:       /CN=A91A57AA/serialNumber=19043CD089C9794FA78F45A54EAB5F2B6E918EEE
Certificate serial:       017B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQQ80InJeU-nj0WlTqtfK26Rju4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.mft
Manifest number:          0178
Signing time:             Tue 13 May 2025 03:12:46 +0000
Manifest this update:     Tue 13 May 2025 03:12:45 +0000
Manifest next update:     Tue 20 May 2025 03:12:45 +0000
Files and hashes:         1: GQQ80InJeU-nj0WlTqtfK26Rju4.crl (hash: rACeYIjqiBHDDC56kd4hEqD6biEDci9+qxwEYRJLSuw=)
                          2: DFC9BF30F14E11ED992E1316C4F9AE02.roa (hash: PzV7dQ/Ntjwe4VwuBgo5nWo9sWxiEDa03H8RbyLVUfw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.crl
                          rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQQ80InJeU-nj0WlTqtfK26Rju4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 03:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A57AA, serialNumber=19043CD089C9794FA78F45A54EAB5F2B6E918EEE
        Validity
            Not Before: May 13 03:12:45 2025 GMT
            Not After : May 20 03:12:45 2025 GMT
        Subject: CN=6822b8ad-be3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9d:74:64:36:95:9d:81:20:b4:ff:ee:6d:51:
                    d7:68:6d:72:a2:39:56:8e:46:0e:b0:b2:91:da:b6:
                    ec:84:c5:04:a0:4e:51:ae:95:14:fd:e3:39:c5:6c:
                    69:92:25:07:b2:84:86:5e:03:10:4b:7e:51:fd:8a:
                    a1:4c:12:22:9e:17:08:15:3e:67:71:ef:a7:72:2f:
                    29:be:ef:70:bc:d9:ac:64:77:a7:8d:b2:bc:29:12:
                    79:49:9c:8d:c1:2e:8b:3e:46:4c:5f:1e:f9:13:d1:
                    8c:e9:48:cf:d9:5c:d9:fa:65:82:ab:3b:cc:d6:cd:
                    72:97:0e:a6:cd:53:be:3d:7f:de:59:95:f8:71:58:
                    25:fb:21:67:af:0e:26:11:94:a6:d2:25:5d:84:7c:
                    ff:aa:fd:3d:20:a2:46:25:80:de:ac:46:92:c7:08:
                    82:bb:3a:44:4b:33:9e:8f:68:f0:0a:32:28:9c:cd:
                    e9:33:ff:1e:36:9f:fb:da:40:1d:60:b2:a6:d5:9e:
                    e7:40:e4:d7:eb:b6:49:be:0a:61:10:4b:fd:29:9b:
                    59:00:30:90:eb:db:ad:d2:d5:c3:2a:a0:9d:57:4e:
                    43:71:a2:da:2c:43:aa:39:cd:02:d4:99:79:15:39:
                    20:ef:f0:60:61:2a:c9:db:48:87:1f:85:47:d7:f0:
                    35:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1E:1D:86:C4:3A:61:6D:82:00:25:F7:31:01:D5:A9:AD:72:CC:DB
            X509v3 Authority Key Identifier:
                keyid:19:04:3C:D0:89:C9:79:4F:A7:8F:45:A5:4E:AB:5F:2B:6E:91:8E:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQQ80InJeU-nj0WlTqtfK26Rju4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ed:67:bd:f4:26:29:69:dc:c9:27:d7:2d:a0:a5:5a:5e:c9:
         15:eb:37:47:2c:ff:0f:87:de:3c:89:27:8c:d4:00:6a:f7:84:
         73:fe:3b:8a:0d:dc:19:b7:9f:16:0a:63:78:63:1c:13:d7:5e:
         b2:51:7e:cf:99:59:43:b7:26:e0:d3:b0:a7:12:6d:72:ec:7b:
         41:d2:6f:bd:11:bf:03:43:38:dc:d6:73:82:3b:c1:40:7e:2d:
         07:72:37:d4:e3:a6:19:0c:f1:61:9b:90:90:35:f8:34:db:39:
         aa:a5:0f:54:6b:04:86:f1:54:2a:54:92:67:c4:e9:6e:36:1c:
         82:27:4d:3e:00:27:84:ea:6f:be:06:ce:67:42:38:37:c7:d0:
         95:dd:a3:25:19:6b:48:0f:d1:94:f2:65:27:03:59:8a:dc:ea:
         eb:51:09:39:5f:ec:95:bc:10:db:5a:23:13:55:ee:d8:24:0a:
         91:71:1a:25:21:48:a7:9d:5f:c9:da:12:f1:3c:ff:0b:ce:53:
         ac:fe:15:30:f2:48:35:2d:92:d7:bc:4a:eb:de:a1:56:c3:b0:
         73:ef:58:86:9e:c9:5d:74:02:53:f7:86:ac:9c:4f:9d:7d:8f:
         00:a3:85:ac:24:46:1a:78:03:10:e4:eb:bf:79:37:f8:37:2d:
         cd:bc:23:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 22:50:40 2025 by rpki-client