Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
File:                     G1Zt71944xm_wNFADedV4mSoK7w.mft (raw, json)
Hash identifier:          zOr+Wldx6HzQUS44ll3PNUtiwTAA/iqJ3KPtFC4t0No=
Subject key identifier:   75:0D:DC:B4:CC:47:75:7B:54:3A:AF:36:2A:AB:87:9C:92:98:D3:0E
Authority key identifier: 1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC
Certificate issuer:       /CN=A91C20AB/serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
Certificate serial:       08F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
Manifest number:          08E5
Signing time:             Wed 02 Jul 2025 20:39:22 +0000
Manifest this update:     Wed 02 Jul 2025 20:39:22 +0000
Manifest next update:     Wed 09 Jul 2025 20:39:22 +0000
Files and hashes:         1: G1Zt71944xm_wNFADedV4mSoK7w.crl (hash: B+EC6miOUjrmhFD1NqsyH5e4tPsVpqsh2VEbWZxhMmY=)
                          2: 28D36892B09411EAA964465EC4F9AE02.roa (hash: UfAX/Fj0JrJleqfsMcMBvDOpsY+oWvOczsjEMDPs474=)
                          3: 2979BC38B09411EAA964465EC4F9AE02.roa (hash: NUYwvd8XbnzOJ3mNMJWywPbsBYEeOEcLsau7uMQ+orY=)
                          4: AB659244056211EBAE3DBC4CC4F9AE02.roa (hash: Ptv1d6l4zCzsDfAGIqW3ARxnruAqZbwm3s5WFQRyBpQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl
                          rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 20:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2295 (0x8f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C20AB, serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
        Validity
            Not Before: Jul  2 20:39:22 2025 GMT
            Not After : Jul  9 20:39:22 2025 GMT
        Subject: CN=686598fa-b034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d1:61:61:c7:aa:6e:4c:fe:f0:76:b5:90:77:
                    9a:6e:1f:9a:af:ca:36:25:4e:fe:78:cc:46:8e:d0:
                    99:ec:15:e3:1a:87:76:71:98:e5:69:8b:ef:ef:ee:
                    b1:cb:d7:fb:5c:bf:9e:a5:a7:a1:73:50:86:fc:6b:
                    9e:fc:e9:3b:4c:b0:7f:cf:b1:ee:2d:c2:73:6d:16:
                    f6:11:c6:0f:3a:fa:c2:8f:ed:7d:7a:2a:12:82:01:
                    31:bc:32:57:02:87:8a:4c:59:4f:65:12:b9:99:18:
                    02:9f:e5:19:9c:19:1f:d3:23:6c:8a:40:ea:f3:f4:
                    02:86:b3:3b:76:4d:a9:f5:10:2c:fb:34:d0:18:34:
                    91:8d:5c:fd:65:20:4d:ed:e2:f9:65:af:fa:7a:3c:
                    e7:7a:a5:11:44:73:1c:ef:4e:df:2d:a4:41:f4:23:
                    6a:f7:87:78:eb:ef:98:a4:0f:f9:8c:7e:89:9a:b0:
                    c9:96:1b:3e:ba:28:67:75:65:88:32:10:d5:91:28:
                    be:c1:08:be:20:16:4a:2e:12:5e:02:4a:c4:e7:a2:
                    92:24:2c:02:38:46:bb:4c:39:2c:26:1e:06:19:c2:
                    a9:d5:da:c6:7a:d1:b2:ab:db:c2:e2:46:71:ed:3c:
                    c9:75:5f:bc:82:f2:56:d5:ad:6c:63:3a:9b:94:75:
                    89:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0D:DC:B4:CC:47:75:7B:54:3A:AF:36:2A:AB:87:9C:92:98:D3:0E
            X509v3 Authority Key Identifier:
                keyid:1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:39:29:63:df:cf:f7:13:3c:35:85:31:f5:f4:81:99:9b:9d:
         10:5d:ba:4c:d0:42:d9:30:4c:15:64:1e:81:ca:3f:32:ef:18:
         c2:ad:a1:a4:ac:b0:77:a9:40:4a:09:08:d6:7b:93:44:1e:b4:
         dc:86:c8:3c:4b:b5:3d:aa:e6:d0:a0:b3:77:44:c0:0b:7f:bf:
         f3:a1:de:84:c5:b0:07:6b:f1:d6:e5:73:7e:73:6d:76:ea:9c:
         30:d8:74:1b:54:4a:99:5d:91:be:9c:10:1d:fa:db:f7:75:e9:
         12:df:4b:1d:4e:76:52:18:60:80:2b:53:31:b1:fe:b2:fe:3a:
         52:f3:01:fd:fa:b8:b2:b0:c9:ae:55:a7:79:be:dc:fd:b8:cd:
         3a:c1:94:de:0d:f3:ab:2e:0f:41:2e:65:83:c4:e8:b1:f0:2f:
         c6:cf:e0:2b:6d:e5:8e:a3:b6:81:10:bd:fc:69:8d:09:7f:1c:
         9a:82:65:76:98:9d:0c:cf:37:0c:ef:72:e0:d4:6f:ab:b6:49:
         35:44:50:f7:a4:2b:c7:38:cd:af:40:0f:cd:fc:b6:f1:8e:af:
         3e:48:1e:70:88:13:02:27:bc:62:09:87:3a:d1:d8:a1:a5:49:
         33:5d:f4:87:66:67:11:a8:40:fc:6a:ba:0d:3b:e9:40:30:5b:
         b7:21:0c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:32:00 2025 by rpki-client