Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
File:                     _GiPuVzFIF4D5wpgXJlMXUlaszI.mft (raw, json)
Hash identifier:          6ckrXy7dzBXsELY0trO5MdltarLkIxh7tJJB3AtP1t8=
Subject key identifier:   32:A5:92:ED:44:F7:5E:48:00:A4:91:33:22:8D:08:03:A3:41:74:98
Authority key identifier: FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32
Certificate issuer:       /CN=A91CFD43/serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332
Certificate serial:       030C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
Manifest number:          0307
Signing time:             Sun 29 Jun 2025 00:47:43 +0000
Manifest this update:     Sun 29 Jun 2025 00:47:43 +0000
Manifest next update:     Sun 06 Jul 2025 00:47:43 +0000
Files and hashes:         1: _GiPuVzFIF4D5wpgXJlMXUlaszI.crl (hash: Ml8QLDvM5/LaNoU8zfaYVM98V4gwkX6i+ZG7aBmD9Dg=)
                          2: 4E8DA224547711EF9EDD014DC4F9AE02.roa (hash: 4Q9eSoyybwKkbe+OvPprVAkVlq22srO6Z2iGnnSJ3hw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl
                          rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 00:47:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 780 (0x30c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFD43, serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332
        Validity
            Not Before: Jun 29 00:47:43 2025 GMT
            Not After : Jul  6 00:47:43 2025 GMT
        Subject: CN=68608d2f-d7e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:15:bd:b5:25:8d:72:f3:e2:7f:45:06:73:59:
                    ef:a3:42:4c:0d:a3:e4:d9:30:06:08:82:c1:d3:6d:
                    82:56:ce:e7:11:7b:6d:f2:d2:d5:3d:27:47:95:6e:
                    c9:b4:8d:cb:fe:c4:fc:ed:90:d5:2a:f7:38:a9:64:
                    fa:2a:b7:93:6f:7b:3b:9a:f5:c8:d7:ae:2f:b1:03:
                    cb:85:38:da:c1:97:7c:b2:a6:1c:5b:39:11:78:ba:
                    e7:93:21:b4:8f:43:6a:6d:47:24:7b:eb:0d:11:da:
                    51:14:03:0a:5e:54:52:59:8d:83:05:1e:fc:5b:89:
                    da:a2:dd:88:b2:8b:19:58:aa:2e:d5:c4:96:e1:72:
                    17:4c:a0:25:49:aa:54:93:e1:80:6d:d2:b9:31:57:
                    af:c0:34:0f:05:5c:67:bb:55:ee:e7:1d:ab:35:6f:
                    ba:2c:e4:d5:ef:c5:cb:5a:ec:c7:09:71:84:c3:f1:
                    88:c2:15:b8:0f:c5:a7:6d:eb:bb:05:08:65:30:bd:
                    82:88:d0:52:1a:54:50:2e:b7:4d:34:10:c5:34:82:
                    2a:ca:be:28:d1:e1:71:c2:55:2a:5d:6b:1c:3d:d1:
                    01:15:6b:2c:1f:9b:22:de:34:bc:ee:14:99:bc:d8:
                    89:8a:a8:6b:c4:ff:36:9c:26:43:08:e2:70:8c:b1:
                    b0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A5:92:ED:44:F7:5E:48:00:A4:91:33:22:8D:08:03:A3:41:74:98
            X509v3 Authority Key Identifier:
                keyid:FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:c0:fd:a7:81:73:dd:1d:4d:4e:6f:ac:97:db:a9:3b:ed:51:
         97:f3:9a:6f:12:93:5c:c6:43:32:b5:2c:62:90:30:b8:2a:0d:
         3f:34:cf:11:13:1e:88:e8:8a:55:c5:dc:4d:8d:11:90:6c:d1:
         a8:28:dd:65:ca:11:0f:a3:d3:72:b6:8b:8e:ea:ba:48:da:e4:
         a3:76:5f:ac:d5:45:8c:12:88:d7:bc:13:a2:31:eb:3d:62:61:
         9d:d9:0c:45:c2:63:a7:45:e2:7a:bc:81:03:3a:93:02:48:0c:
         f7:93:f4:f1:b9:37:e5:60:d5:0b:82:8a:c9:45:46:31:72:3b:
         ed:3b:62:af:22:a9:d2:ba:c9:9a:19:c0:78:88:2e:00:e3:15:
         6e:30:f4:98:fb:01:cb:3a:64:de:c7:6b:41:25:9a:04:51:0a:
         1e:d7:6b:41:f7:5d:15:68:45:bb:73:55:a1:e3:ce:9e:43:4e:
         c4:80:f4:ef:8d:ee:3c:06:ac:23:b2:6c:7a:a6:7f:55:e3:31:
         d2:25:ea:b5:0f:fd:6d:ba:3c:86:62:5c:4e:4b:1b:9e:96:68:
         c1:7d:73:f4:9c:85:67:b6:71:4a:5b:df:15:51:a0:05:c3:9b:
         7e:92:75:46:65:a1:e4:a0:e4:60:4d:01:1e:71:60:8a:a8:65:
         64:97:7e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 13:54:47 2025 by rpki-client