Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft
File:                     GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft (raw, json)
Hash identifier:          54mSOyP2RPnizrgnuoHHaGI1y/K3hcI/yQgOaUyM8U8=
Subject key identifier:   C4:D9:96:4A:17:4B:25:27:16:B6:34:FD:DA:A9:CC:70:9A:DC:A5:DA
Authority key identifier: 19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9
Certificate issuer:       /CN=A91DC931/serialNumber=198C4364CF032C730D9585834982096D50A752C9
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft
Manifest number:          CF
Signing time:             Fri 09 May 2025 04:45:36 +0000
Manifest this update:     Fri 09 May 2025 04:45:35 +0000
Manifest next update:     Fri 16 May 2025 04:45:35 +0000
Files and hashes:         1: GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl (hash: mOMs44da5p271D0PR+whkht0dRrpEAjPN4b1L2wqSJQ=)
                          2: 24EF88B8F56011EEACB7CB3CC4F9AE02.roa (hash: lDcIajuaLqzNHKrvaw5xtEMBD4ZDOs+n5ffXRVCGNBU=)
                          3: 2575F02EF56011EEACB7CB3CC4F9AE02.roa (hash: KFC3fNOGbggZ+0GBW6U9NwCDNNl5aIjRFI0d9Wv5l3w=)
                          4: BBE9AEC0F55F11EEB6F1153CC4F9AE02.roa (hash: FpsujdeSIYLDxosFYlUPrmKqSq5TJ8BXCM8BjJrvMC0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl
                          rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 May 2025 04:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC931, serialNumber=198C4364CF032C730D9585834982096D50A752C9
        Validity
            Not Before: May  9 04:45:35 2025 GMT
            Not After : May 16 04:45:35 2025 GMT
        Subject: CN=681d886f-0854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6b:d7:5e:e5:be:34:b8:2f:76:d2:db:1b:dd:
                    ff:98:a2:36:8d:c2:79:d9:62:a1:b8:33:56:d4:fa:
                    0e:ef:af:b5:f6:04:95:01:22:cc:41:42:35:46:9b:
                    1d:f5:6c:13:bf:88:0e:c0:f6:4f:cc:0a:79:82:f8:
                    3c:0f:af:e7:a6:7b:ef:e7:63:b7:2b:c6:9b:97:1f:
                    94:cf:fa:76:a7:84:ed:ca:4d:83:d1:bb:17:6c:75:
                    81:16:ff:2f:d2:55:28:2e:aa:0b:e4:b4:71:e2:e1:
                    4f:ee:8a:57:e4:0b:bc:cc:8e:25:0f:29:0c:1f:9e:
                    df:ac:32:2e:4a:4d:be:48:14:1e:71:70:b4:25:b1:
                    c7:f0:d6:d3:40:9c:21:17:f6:0d:08:0e:c3:9c:bf:
                    37:36:5e:26:4b:81:16:21:42:cf:4a:28:7c:d5:b5:
                    ba:c5:19:e9:d6:ad:93:65:a6:18:dc:fe:b5:cf:c0:
                    46:a5:83:5b:21:09:bf:04:d3:fb:4d:ea:9a:8c:da:
                    39:7e:b9:12:35:5c:64:7a:ff:26:5d:0b:32:04:09:
                    61:b9:a3:44:10:92:14:9c:e6:5e:b3:30:43:53:08:
                    97:bf:be:a1:6c:b6:86:a2:f6:aa:9c:0c:53:59:87:
                    bc:d7:78:1a:cb:98:ff:74:38:ad:f5:5c:d9:97:22:
                    cb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D9:96:4A:17:4B:25:27:16:B6:34:FD:DA:A9:CC:70:9A:DC:A5:DA
            X509v3 Authority Key Identifier:
                keyid:19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:03:d6:79:11:ef:41:11:0f:4f:9c:75:2a:18:f0:e1:3e:1e:
         bc:7b:9b:f6:15:d4:3e:d5:c4:7d:85:fb:5a:83:39:ea:6c:0f:
         39:69:44:95:c6:5f:03:84:e6:2d:5c:69:79:2e:39:95:52:d4:
         93:83:66:15:24:57:ed:26:bb:4a:f5:fa:e6:ba:b3:50:60:a0:
         cb:55:e0:af:d4:8a:14:65:0a:3b:fe:7e:fc:f8:e2:30:a3:95:
         40:b2:f1:31:e6:9f:b7:b3:53:9f:ec:ea:39:d6:75:70:1e:18:
         e1:ef:31:c5:42:f1:9f:b1:bb:1c:6b:1a:73:a8:0a:6f:0b:be:
         7c:37:6f:c7:b2:b5:60:a0:a5:97:43:73:2f:ee:11:fd:47:fa:
         c7:58:ec:17:f1:ae:16:1b:fd:48:a7:47:8b:b8:cd:ef:fb:9f:
         4d:ec:fa:0f:f2:cd:11:a6:5e:fa:e9:7b:84:eb:12:9d:c0:0d:
         24:01:50:b3:8d:e2:49:ae:94:ca:e3:b9:c1:61:af:e4:2d:f9:
         09:84:50:42:94:c6:9f:0e:62:e4:f3:e6:ef:7b:08:18:b2:3d:
         12:90:40:8b:46:2a:fe:83:58:97:03:29:b6:c5:fa:bc:2a:61:
         3c:93:da:23:d5:2c:37:20:5f:98:b9:30:35:b8:e8:0d:7d:ff:
         07:5a:96:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:01:48 2025 by rpki-client