Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft
File:                     G4nCebixZmmNK-SGc-zMKwgTPjk.mft (raw, json)
Hash identifier:          Zf6NFKn3vt2a+4vq1DAZZ/a7fpJw9FX4Js5JQGP+R9c=
Subject key identifier:   26:13:CB:E4:CD:F0:81:99:AD:24:7B:2B:27:5C:DB:3F:26:81:6C:DF
Authority key identifier: 1B:89:C2:79:B8:B1:66:69:8D:2B:E4:86:73:EC:CC:2B:08:13:3E:39
Certificate issuer:       /CN=A91FCEB1/serialNumber=1B89C279B8B166698D2BE48673ECCC2B08133E39
Certificate serial:       0711
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft
Manifest number:          27AA
Signing time:             Sat 28 Jun 2025 15:51:55 +0000
Manifest this update:     Sat 28 Jun 2025 15:51:54 +0000
Manifest next update:     Sat 05 Jul 2025 15:51:54 +0000
Files and hashes:         1: G4nCebixZmmNK-SGc-zMKwgTPjk.crl (hash: jtgiiTTOrrTD5zSNXCfC2YWcYXga20WMWItKVJKKYtA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.crl
                          rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 15:51:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1809 (0x711)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCEB1, serialNumber=1B89C279B8B166698D2BE48673ECCC2B08133E39
        Validity
            Not Before: Jun 28 15:51:54 2025 GMT
            Not After : Jul  5 15:51:54 2025 GMT
        Subject: CN=68600f9b-4df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6a:1c:c3:35:d4:45:db:5b:b9:c1:03:d0:c1:
                    c8:2a:be:c8:fe:56:3d:48:4d:46:9a:a8:96:a8:ab:
                    e1:c3:b3:76:b8:2e:37:38:6b:56:28:9f:7b:05:36:
                    98:d0:25:be:fc:d1:9b:b8:6e:10:83:6a:f4:34:56:
                    6a:f7:1b:a2:81:84:c2:30:a1:f0:67:30:9a:cf:9c:
                    69:59:39:dd:0f:bc:bd:b6:73:28:79:39:75:f3:1a:
                    11:04:32:f2:b5:be:79:a8:c6:c1:68:31:34:e9:45:
                    8d:16:46:77:75:f8:2e:86:ce:81:4e:c0:d1:ff:99:
                    37:a6:0d:77:75:b9:e5:4a:83:29:52:f9:d6:d6:61:
                    55:6d:ea:ed:4e:97:cf:78:8f:f8:c2:74:1b:9f:3f:
                    79:70:9d:d0:2f:52:73:c5:14:74:44:a3:20:13:c6:
                    10:5f:b3:1f:52:34:44:89:fe:47:3c:d8:9d:ec:90:
                    41:0d:24:34:62:8b:ba:d0:b5:16:57:14:0d:be:05:
                    a6:42:25:74:de:58:72:85:ca:9c:d2:33:5a:5d:12:
                    a3:f2:66:32:7a:47:ae:21:3e:18:1d:7c:8b:8e:d1:
                    74:4c:be:70:d4:87:03:b6:85:87:1e:c0:e3:85:f2:
                    f6:a9:6e:bc:c8:2f:97:1d:37:90:be:c7:e6:be:20:
                    04:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:13:CB:E4:CD:F0:81:99:AD:24:7B:2B:27:5C:DB:3F:26:81:6C:DF
            X509v3 Authority Key Identifier:
                keyid:1B:89:C2:79:B8:B1:66:69:8D:2B:E4:86:73:EC:CC:2B:08:13:3E:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:16:80:6c:bb:d7:24:f2:cd:8f:a4:87:9c:29:66:a7:48:b6:
         ba:f1:b0:fe:c7:7e:61:ab:62:63:1c:54:9a:68:da:8a:8a:dc:
         30:75:ae:bd:cf:82:97:ba:2c:09:60:03:1a:4f:05:6e:9a:9e:
         79:29:8f:64:f2:79:b8:13:e3:55:ea:32:e1:be:f3:2f:72:ce:
         43:bd:b9:22:12:f5:47:10:1a:11:07:ba:e4:02:5a:2a:ad:d5:
         ca:db:89:ca:ac:c3:5c:e2:9f:a3:c6:5b:c5:ec:dc:ad:cd:d7:
         0d:c3:14:57:3b:3c:9a:85:f3:1b:d9:13:2d:3c:8e:61:60:2f:
         9b:f1:c5:23:f3:03:cf:47:09:fe:f0:b2:14:9e:d5:fa:cb:b8:
         76:b8:6f:6e:b0:96:2f:82:6d:99:d9:ff:0b:bf:bd:33:7b:d0:
         56:70:1b:b6:f2:ed:c7:40:ef:18:db:04:8b:74:e1:e5:c5:9d:
         d8:dc:80:95:dc:ea:56:d6:20:e2:5f:01:73:3e:1f:1a:87:17:
         fe:81:36:20:04:e2:33:41:31:fd:c9:b6:2f:1e:dc:d8:93:0d:
         ac:6a:63:6d:f3:75:d6:8e:8f:58:bd:98:9f:a1:4b:ea:1b:96:
         dd:b9:fb:bf:0c:17:0c:b3:0b:48:6b:1f:f1:54:36:10:3c:3f:
         29:34:aa:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:26:48 2025 by rpki-client