Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft
File:                     GWzuJffRt-pwjOGIczcUM5LORxw.mft (raw, json)
Hash identifier:          TuYkMP/aPMxu0AXtGbb0qMLYRopnsuv163wDj5yQosE=
Subject key identifier:   10:05:66:C1:D7:04:0B:5F:35:DC:6B:79:4D:7A:F8:E1:D5:68:E0:97
Authority key identifier: 19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C
Certificate issuer:       /CN=A9154340/serialNumber=196CEE25F7D1B7EA708CE1887337143392CE471C
Certificate serial:       0601
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft
Manifest number:          05FB
Signing time:             Sat 26 Apr 2025 22:22:33 +0000
Manifest this update:     Sat 26 Apr 2025 22:22:33 +0000
Manifest next update:     Sat 03 May 2025 22:22:33 +0000
Files and hashes:         1: GWzuJffRt-pwjOGIczcUM5LORxw.crl (hash: 00O2WU6EQQG9Ml6joPxrn7lvHjXfte1RwY/x0cB2CE0=)
                          2: 8BF559B2A70111EBBAA7C612C4F9AE02.roa (hash: f8Wgv+IoxprOJRGqIQDg8nNXDjXWODO4WSnYU8FiMVw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.crl
                          rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:22:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1537 (0x601)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154340, serialNumber=196CEE25F7D1B7EA708CE1887337143392CE471C
        Validity
            Not Before: Apr 26 22:22:33 2025 GMT
            Not After : May  3 22:22:33 2025 GMT
        Subject: CN=680d5ca9-6a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d5:db:68:9a:89:1f:b4:ca:e1:e2:cc:2a:9b:
                    57:7f:ec:3c:3a:04:18:d2:ab:e5:4b:ef:9b:31:af:
                    55:97:3f:61:4a:1f:f7:75:b9:92:02:31:ef:d9:cd:
                    fb:ae:4c:6f:47:66:10:1a:2f:df:09:97:96:9b:1c:
                    02:c3:2a:78:8d:98:0b:d7:c2:e9:e2:a7:ba:b9:ff:
                    ef:d0:58:13:59:ee:c5:9a:5c:b2:f1:8e:bb:46:03:
                    61:c4:56:b1:07:32:97:60:95:bc:39:73:35:63:cf:
                    27:b1:a7:ce:26:60:0d:b7:ee:3d:b5:5d:4f:44:ad:
                    24:ff:9a:06:98:d4:3c:a3:74:42:4b:9f:8e:9e:f1:
                    21:81:d6:b5:e1:2a:59:ed:7e:df:a9:8b:26:45:a0:
                    e3:0f:21:88:42:4c:e4:18:0f:21:db:0d:35:d2:ac:
                    eb:d9:aa:c9:3d:a5:b1:fa:2f:a7:ce:1f:19:7b:14:
                    95:67:48:b2:3a:53:4f:06:5f:37:da:e6:c4:17:d5:
                    83:65:6b:06:93:ed:c1:6d:4a:40:09:3e:d5:04:0b:
                    2a:0b:b5:99:50:e4:08:4d:f5:23:7d:a5:57:b6:e4:
                    dc:e0:3f:13:47:0d:4c:06:55:55:d4:c5:79:95:50:
                    13:ff:60:cf:85:b7:b4:6c:8c:5b:8e:ac:15:55:a2:
                    5c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:05:66:C1:D7:04:0B:5F:35:DC:6B:79:4D:7A:F8:E1:D5:68:E0:97
            X509v3 Authority Key Identifier:
                keyid:19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:c0:c3:af:21:fc:ce:f0:76:0e:d4:a0:60:9d:1c:99:39:2b:
         c1:14:5f:ef:19:78:57:1f:6f:bc:be:81:fb:de:d5:73:e9:22:
         9e:da:d1:2b:0f:a6:07:82:07:39:8c:7c:49:9f:11:c9:f3:a6:
         fc:4f:e6:2f:e6:2e:7b:17:e1:56:67:f7:6d:16:f0:7f:3b:2a:
         4e:b1:ff:39:97:64:ac:cc:51:49:28:be:40:68:b3:28:fd:34:
         df:89:5c:bb:6b:90:33:dc:5b:c7:78:19:5b:12:de:74:49:13:
         c8:4b:f3:ee:eb:0a:a4:8d:fd:aa:48:c7:2f:43:5c:66:09:b5:
         a4:97:9c:a5:44:45:5c:54:7a:0a:40:d0:a9:d3:0c:dd:d3:00:
         fb:43:10:58:31:1e:c3:a9:0d:70:0b:09:2e:94:af:2a:99:d1:
         e7:7e:21:2c:f3:29:14:08:56:c0:8a:e9:74:be:71:e3:33:9c:
         be:cb:8a:8d:0c:0f:3e:00:73:8e:b7:00:23:54:3c:8b:81:6f:
         af:39:b0:f9:84:a0:ef:e0:26:a7:fa:27:e4:d5:ec:92:71:3c:
         ca:85:20:45:9d:85:c3:1f:7f:ae:5c:3e:6f:fa:d7:47:3d:af:
         65:d6:76:1a:a1:23:50:bb:bc:ac:b4:4c:18:c8:ca:ef:aa:f9:
         2a:20:57:bf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQzNDAxMTAvBgNVBAUTKDE5NkNFRTI1RjdEMUI3RUE3MDhDRTE4ODczMzcxNDMz
OTJDRTQ3MUMwHhcNMjUwNDI2MjIyMjMzWhcNMjUwNTAzMjIyMjMzWjAYMRYwFAYD
VQQDEw02ODBkNWNhOS02YTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmdXbaJqJH7TK4eLMKptXf+w8OgQY0qvlS++bMa9Vlz9hSh/3dbmSAjHv2c37
rkxvR2YQGi/fCZeWmxwCwyp4jZgL18Lp4qe6uf/v0FgTWe7Fmlyy8Y67RgNhxFax
BzKXYJW8OXM1Y88nsafOJmANt+49tV1PRK0k/5oGmNQ8o3RCS5+OnvEhgda14SpZ
7X7fqYsmRaDjDyGIQkzkGA8h2w010qzr2arJPaWx+i+nzh8ZexSVZ0iyOlNPBl83
2ubEF9WDZWsGk+3BbUpACT7VBAsqC7WZUOQITfUjfaVXtuTc4D8TRw1MBlVV1MV5
lVAT/2DPhbe0bIxbjqwVVaJcQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBAFZsHX
BAtfNdxreU16+OHVaOCXMB8GA1UdIwQYMBaAFBls7iX30bfqcIzhiHM3FDOSzkcc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDM0MC9GOEU3NjA3Q0E2
NzcxMUVCOEI0QkIxM0VDNEY5QUUwMi9HV3p1SmZmUnQtcHdqT0dJY3pjVU01TE9S
eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0dXenVKZmZSdC1wd2pPR0ljemNVTTVMT1J4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDM0MC9GOEU3NjA3Q0E2NzcxMUVCOEI0QkIxM0VDNEY5QUUwMi9HV3p1SmZmUnQt
cHdqT0dJY3pjVU01TE9SeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQABwMOvIfzO8HYO1KBgnRyZOSvBFF/vGXhXH2+8voH73tVz6SKe2tEr
D6YHggc5jHxJnxHJ86b8T+Yv5i57F+FWZ/dtFvB/OypOsf85l2SszFFJKL5AaLMo
/TTfiVy7a5Az3FvHeBlbEt50SRPIS/Pu6wqkjf2qSMcvQ1xmCbWkl5ylREVcVHoK
QNCp0wzd0wD7QxBYMR7DqQ1wCwkulK8qmdHnfiEs8ykUCFbAiul0vnHjM5y+y4qN
DA8+AHOOtwAjVDyLgW+vObD5hKDv4Can+ifk1eyScTzKhSBFnYXDH3+uXD5v+tdH
Pa9l1nYaoSNQu7ystEwYyMrvqvkqIFe/
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:46 2025 by rpki-client on console.sobornost.net