Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.mft
File:                     GVeTbMpsS9l-IilhpIkhsz_6IHc.mft (raw, json)
Hash identifier:          CEhVq+steVucY9rXIi/yyA/6VA1t1FMAcaleDOFv+sY=
Subject key identifier:   9E:B2:BC:31:BD:44:00:85:F6:0A:5D:E1:CA:FE:0A:14:98:41:C5:15
Authority key identifier: 19:57:93:6C:CA:6C:4B:D9:7E:22:29:61:A4:89:21:B3:3F:FA:20:77
Certificate issuer:       /CN=A91F6C10/serialNumber=1957936CCA6C4BD97E222961A48921B33FFA2077
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVeTbMpsS9l-IilhpIkhsz_6IHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.mft
Manifest number:          14
Signing time:             Thu 03 Jul 2025 08:17:36 +0000
Manifest this update:     Thu 03 Jul 2025 08:17:36 +0000
Manifest next update:     Thu 10 Jul 2025 08:17:36 +0000
Files and hashes:         1: GVeTbMpsS9l-IilhpIkhsz_6IHc.crl (hash: sXEJsm1rUCSqxCsWrErW2ygq1cXpZXK1OKK2pVw8BOQ=)
                          2: 7DDEB3163B9D11F08338F965C4F9AE02.roa (hash: Nx9zhfXamOV1v87PEDCD/XYv0n33Isg7pa/1D1NmyVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.crl
                          rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVeTbMpsS9l-IilhpIkhsz_6IHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6C10, serialNumber=1957936CCA6C4BD97E222961A48921B33FFA2077
        Validity
            Not Before: Jul  3 08:17:36 2025 GMT
            Not After : Jul 10 08:17:36 2025 GMT
        Subject: CN=68663ca0-ada7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c7:7b:5c:fd:81:a6:35:a3:f6:88:49:ec:67:
                    6e:85:ef:2d:bc:a6:2f:92:f2:42:5b:59:18:57:92:
                    f6:2e:43:14:91:6f:c7:52:46:1a:05:db:4c:96:37:
                    1a:32:20:f3:6d:b7:38:2d:3a:c4:57:18:b0:a2:ec:
                    5c:6c:02:3f:5b:9d:7a:74:4a:67:65:7b:96:63:62:
                    bc:e4:c8:0c:25:e9:5b:85:e3:27:16:7b:c4:86:57:
                    01:41:22:cc:c4:c5:84:c4:65:a8:7e:73:c1:2d:41:
                    e7:ea:88:25:80:fb:a1:6e:06:a3:33:70:da:ad:12:
                    ef:1e:8b:49:a2:94:d0:42:f4:0f:84:9e:6e:12:22:
                    a3:14:e7:bc:4c:ca:98:80:b9:be:86:82:b1:7e:e3:
                    80:56:9e:d5:70:f0:db:29:54:30:37:ec:f7:3f:31:
                    7c:ed:f6:24:cf:bb:b8:3c:04:58:bd:4c:b9:29:1f:
                    dd:db:35:da:e5:be:1c:8a:f2:6e:c3:89:e6:c1:f5:
                    73:90:bc:6c:f7:b9:b2:1e:69:ed:50:29:37:21:39:
                    d9:66:a8:aa:70:d1:4f:f6:b0:4b:9c:81:0f:c8:15:
                    fa:de:54:bd:d6:e6:86:78:17:e6:cc:d4:fd:bd:e8:
                    06:e2:23:5b:fa:18:ca:54:28:35:45:33:3b:3c:0c:
                    a0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B2:BC:31:BD:44:00:85:F6:0A:5D:E1:CA:FE:0A:14:98:41:C5:15
            X509v3 Authority Key Identifier:
                keyid:19:57:93:6C:CA:6C:4B:D9:7E:22:29:61:A4:89:21:B3:3F:FA:20:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVeTbMpsS9l-IilhpIkhsz_6IHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:a4:94:c8:82:cc:d3:3b:d6:27:bb:ef:4d:db:8b:25:71:e1:
         6d:a7:2f:e6:8a:e2:3a:32:a2:df:17:80:61:c6:c0:8f:47:32:
         9b:51:9e:3c:9a:45:c5:56:17:48:56:ad:33:b9:2d:4f:19:22:
         68:75:f4:69:f8:a4:45:78:0a:e6:57:a8:fd:5b:05:3d:0c:91:
         3a:b2:b6:bf:36:26:eb:4c:27:43:ca:28:82:8a:d7:a5:16:4e:
         10:4e:c8:a2:00:bc:f3:e4:06:ae:64:ee:30:b9:fa:a5:af:6c:
         06:4c:91:17:77:ba:42:d4:d5:0e:2f:cc:7a:23:9c:36:ce:e5:
         eb:d1:da:97:0d:87:22:1a:11:bb:7b:34:eb:14:45:fb:f6:ca:
         e1:17:13:06:40:00:81:ea:3c:c1:d1:ea:63:41:f3:3f:12:26:
         01:af:cc:4c:ab:6d:98:77:6c:a5:a2:ca:f0:5b:e4:58:3d:27:
         18:ae:dc:98:f8:0e:12:de:f7:99:5a:ba:d9:4b:18:ea:91:d7:
         e3:b8:fa:c0:06:73:60:e6:67:c5:82:b4:15:d2:73:88:09:96:
         b6:43:19:d0:5f:40:2a:7e:41:67:33:4c:24:ba:e2:10:ed:cb:
         d4:75:f4:a0:2a:d5:8d:33:30:25:6a:1d:15:cc:15:56:73:8b:
         99:74:57:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:33:22 2025 by rpki-client