Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
File:                     G4GY4pfs-4-1GveWJNO2hKH5tR0.mft (raw, json)
Hash identifier:          hRLuxvCPmocu7LNwHVAMq3ZdrE2nw3djovldJoaTDuw=
Subject key identifier:   F2:51:03:BD:1C:3F:7C:B4:B7:AB:BA:97:AE:B8:D6:8D:B3:21:43:1E
Authority key identifier: 1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D
Certificate issuer:       /CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
Certificate serial:       225C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
Manifest number:          2253
Signing time:             Thu 24 Apr 2025 15:53:22 +0000
Manifest this update:     Thu 24 Apr 2025 15:53:21 +0000
Manifest next update:     Thu 01 May 2025 15:53:21 +0000
Files and hashes:         1: G4GY4pfs-4-1GveWJNO2hKH5tR0.crl (hash: RMdxn7XqG3b8evP6E4Srhe0RWJaZOvr4zjkBdL3z40M=)
                          2: EBEA51DC4EE311EFA1615635C4F9AE02.roa (hash: Trb/xXQ89mwzGyAL+1mOumJDf5X3SVH7b+Li/DvO+lE=)
                          3: 27CF6BE84EED11EF8D4BE30CC4F9AE02.roa (hash: vUHNM7b/7rHUhQuKzV89H4uhi15N4fuBRHxCcyjL5as=)
                          4: EDB5F114A63711EF89F3B833C4F9AE02.roa (hash: yRPrheegIm3V93UgDt8N+OL/cPpnwv9rIo76kYVagnE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl
                          rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 15:53:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8796 (0x225c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E47C, serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
        Validity
            Not Before: Apr 24 15:53:21 2025 GMT
            Not After : May  1 15:53:21 2025 GMT
        Subject: CN=680a5e72-a7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a1:0b:46:ae:c8:62:19:e7:76:77:4d:7c:2c:
                    d2:16:3b:4a:51:8a:64:25:d0:e2:66:4a:9e:f1:70:
                    d2:3d:aa:07:a2:9f:30:dc:c5:78:26:57:78:4f:ee:
                    8a:09:bc:dc:3b:50:91:41:36:14:24:b9:1d:a6:29:
                    bf:d5:17:2a:0f:0a:f1:b3:43:b8:c0:ea:9e:f5:21:
                    5d:77:8e:ab:5a:b8:9e:23:83:2c:05:49:64:32:92:
                    5e:5b:6a:79:b8:a9:c0:ca:f7:95:e4:99:cf:45:f8:
                    97:98:91:82:41:4f:05:a8:46:d9:a4:7e:1a:19:c2:
                    85:27:39:d4:10:e9:06:31:70:da:3d:ae:1a:2d:13:
                    dc:9f:e1:a3:12:e3:7f:7b:e1:01:4c:8d:57:2f:29:
                    2e:c3:6c:7b:d1:76:5b:40:14:47:b6:0b:8a:67:f1:
                    9b:cf:4f:39:1e:4c:f2:5d:e6:59:ca:de:42:e4:c1:
                    b7:89:38:1b:24:ec:b0:f0:aa:9d:d4:c6:04:7f:04:
                    5f:3d:06:e6:c0:c0:1f:8a:5e:f6:81:9a:80:9b:ed:
                    22:6a:d7:1d:c4:c8:fd:83:89:82:59:4c:f8:a6:20:
                    fb:f0:3b:1e:1e:43:17:36:3b:c6:a5:6a:12:bb:cd:
                    0f:9a:d6:7d:5c:5f:60:3c:d5:a6:cd:b3:1a:ed:ef:
                    68:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:51:03:BD:1C:3F:7C:B4:B7:AB:BA:97:AE:B8:D6:8D:B3:21:43:1E
            X509v3 Authority Key Identifier:
                keyid:1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:54:56:e9:d0:f2:d6:41:c0:d9:31:7f:21:54:ff:fa:9e:e5:
         3b:4f:4d:01:01:89:a5:4c:e0:82:6e:8b:9b:a3:58:da:8e:41:
         2d:fc:db:c4:91:58:93:bc:bf:ab:d9:ab:29:4e:b2:ba:44:ba:
         69:ff:ad:40:9b:28:24:19:05:58:1c:80:de:7c:f7:34:e9:7d:
         45:07:87:c1:09:8e:95:fa:bf:9e:2e:50:fb:e3:4f:32:2b:a5:
         75:20:e3:02:81:ab:eb:72:01:e7:01:b7:a5:47:92:ce:64:31:
         be:60:8e:73:0b:2a:63:5c:43:06:f0:29:b9:21:16:d8:f2:a4:
         cb:4a:fe:00:0a:79:a0:d4:e3:af:75:ee:d4:11:f6:b3:32:f0:
         21:78:fc:ab:f5:6b:7b:f6:36:67:2e:e0:57:de:78:cb:81:57:
         93:fe:2f:5c:98:01:24:a4:9a:f7:f3:b8:1f:85:92:12:17:52:
         86:e5:76:d8:ed:30:fc:32:e8:5c:52:48:64:26:09:92:92:bf:
         cd:65:23:5a:d3:16:63:7f:30:8f:f7:fa:ef:72:11:45:98:28:
         54:8c:8d:cd:62:f8:48:ee:49:e4:66:84:de:04:f0:ae:3f:fa:
         8c:9b:5e:16:0a:5e:d4:8e:d5:5f:7f:48:ae:31:c4:72:35:35:
         21:4e:a5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:08:10 2025 by rpki-client on console.sobornost.net