Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
File:                     GW-SdzKT5JVLTZel03rIIKdFwuA.mft (raw, json)
Hash identifier:          xZJj4RlfEaTgkH/487tYpd4+Rrt76Rf9Ml19DRpV41E=
Subject key identifier:   F1:50:60:E5:0D:77:F6:11:47:E7:60:6C:86:59:D8:6B:A4:C0:85:75
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Certificate issuer:       /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial:       030D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
Manifest number:          02EA
Signing time:             Sun 27 Apr 2025 01:04:45 +0000
Manifest this update:     Sun 27 Apr 2025 01:04:44 +0000
Manifest next update:     Sun 04 May 2025 01:04:44 +0000
Files and hashes:         1: GW-SdzKT5JVLTZel03rIIKdFwuA.crl (hash: TmxepmtaQ4/BCtrwd1cCgfKALenDIh2GlUNSyQu3CVM=)
                          2: 210018C41AC811F0A36D0557C4F9AE02.roa (hash: TH6X/Ex2OyacjylJvgt9XfDP408i9Q7c825WUDIDj08=)
                          3: AEF7F896B23511EF99CCD73DC4F9AE02.roa (hash: wSoOb2i11MD192v+PAQoqyp2HOpmx/3/4IA2POen7/s=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
                          rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 01:04:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 781 (0x30d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917315B, serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
        Validity
            Not Before: Apr 27 01:04:44 2025 GMT
            Not After : May  4 01:04:44 2025 GMT
        Subject: CN=680d82ad-511b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cd:cb:15:9b:a8:5d:6d:1b:a7:6b:b5:60:a8:
                    af:ff:da:b9:d7:10:76:af:be:7e:04:38:57:48:79:
                    7a:0e:5a:5d:3d:3b:f8:0f:81:1f:5e:66:c2:0f:f4:
                    e0:a5:63:c6:88:6d:a8:f2:35:9f:db:59:31:84:3d:
                    90:14:69:03:c9:10:1b:00:54:39:9f:ea:68:59:88:
                    d1:e4:81:8e:e9:39:92:de:12:a4:44:65:9b:cf:1a:
                    ca:72:d2:0f:3d:a6:ad:d7:01:19:6d:c2:1e:e6:6e:
                    35:4f:75:20:a5:00:b6:12:65:48:69:05:aa:87:e8:
                    f2:dd:d4:0f:d5:83:fd:e2:2a:9f:42:6c:e5:ff:f9:
                    3a:f4:32:1d:47:a9:27:94:b5:e0:b2:24:67:06:3d:
                    9c:f6:1b:db:1e:a0:61:10:51:cc:5a:7b:2f:c6:50:
                    23:a0:47:22:27:5a:63:94:06:64:72:cc:27:29:c4:
                    b2:19:33:2e:41:4c:e3:60:a6:74:90:30:55:16:84:
                    23:47:7e:00:c6:d5:a2:f5:43:cf:ce:cd:b4:07:bc:
                    63:7e:16:9a:6c:b2:ab:72:6e:94:50:9d:f8:ca:85:
                    b3:52:89:a9:ab:c1:bc:07:7f:1a:0f:79:34:a1:3b:
                    f3:b0:c6:88:36:f2:d5:24:6d:4f:e3:bf:65:08:9d:
                    58:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:50:60:E5:0D:77:F6:11:47:E7:60:6C:86:59:D8:6B:A4:C0:85:75
            X509v3 Authority Key Identifier:
                keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:57:94:5d:88:aa:4d:a4:87:cd:d3:c4:db:63:cf:8e:d8:4f:
         a0:d1:d9:c2:2b:bb:64:0d:dd:51:77:52:6a:ae:01:32:b9:9d:
         d1:dd:22:68:2e:aa:d2:3b:c8:c0:56:3b:7c:65:af:31:43:ef:
         c8:5c:81:2e:98:22:37:6a:ef:3d:9b:73:f8:f8:62:d4:3c:82:
         2e:09:fa:86:61:6f:4f:92:5c:0a:7c:59:e7:71:cc:ad:38:74:
         69:f4:3e:0f:d0:70:8b:68:d1:de:d6:d3:bb:4b:f3:1c:37:e6:
         b3:18:90:a8:17:4e:59:85:f4:00:ed:3f:66:bd:8e:44:4b:aa:
         3d:59:d5:b1:e6:a4:46:1e:e9:3e:42:6e:ec:e3:c0:fe:7d:63:
         45:d6:e6:ca:26:a9:80:3e:ac:24:8e:d2:ef:58:50:5f:de:92:
         44:00:d5:35:41:c2:01:23:c7:ee:b8:59:69:4f:a6:18:4f:04:
         a7:1d:72:12:73:d0:07:d4:22:88:c2:32:fe:de:2b:a8:78:09:
         c5:2b:5b:a6:76:2d:00:4c:fb:f8:0c:d7:3f:96:ec:89:e1:28:
         1d:3f:b6:f6:ab:8f:82:6c:61:bd:e4:4f:d6:bf:f5:06:8d:aa:
         7d:9a:c8:b8:fd:c4:a2:e3:5e:36:cd:21:bd:ea:c8:4d:4a:39:
         48:68:a4:28
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzMxNUIxMTAvBgNVBAUTKDE5NkY5Mjc3MzI5M0U0OTU0QjREOTdBNUQzN0FDODIw
QTc0NUMyRTAwHhcNMjUwNDI3MDEwNDQ0WhcNMjUwNTA0MDEwNDQ0WjAYMRYwFAYD
VQQDEw02ODBkODJhZC01MTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0M3LFZuoXW0bp2u1YKiv/9q51xB2r75+BDhXSHl6DlpdPTv4D4EfXmbCD/Tg
pWPGiG2o8jWf21kxhD2QFGkDyRAbAFQ5n+poWYjR5IGO6TmS3hKkRGWbzxrKctIP
Paat1wEZbcIe5m41T3UgpQC2EmVIaQWqh+jy3dQP1YP94iqfQmzl//k69DIdR6kn
lLXgsiRnBj2c9hvbHqBhEFHMWnsvxlAjoEciJ1pjlAZkcswnKcSyGTMuQUzjYKZ0
kDBVFoQjR34AxtWi9UPPzs20B7xjfhaabLKrcm6UUJ34yoWzUompq8G8B38aD3k0
oTvzsMaINvLVJG1P479lCJ1YuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFQYOUN
d/YRR+dgbIZZ2GukwIV1MB8GA1UdIwQYMBaAFBlvkncyk+SVS02XpdN6yCCnRcLg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzE1Qi9ENzM1QTNCNEVE
NEIxMUVDQTk1NTM3NzhDNEY5QUUwMi9HVy1TZHpLVDVKVkxUWmVsMDNySUlLZEZ3
dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dXLVNkektUNUpWTFRaZWwwM3JJSUtkRnd1QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzE1Qi9ENzM1QTNCNEVENEIxMUVDQTk1NTM3NzhDNEY5QUUwMi9HVy1TZHpLVDVK
VkxUWmVsMDNySUlLZEZ3dUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC9V5RdiKpNpIfN08TbY8+O2E+g0dnCK7tkDd1Rd1JqrgEyuZ3R3SJo
LqrSO8jAVjt8Za8xQ+/IXIEumCI3au89m3P4+GLUPIIuCfqGYW9PklwKfFnnccyt
OHRp9D4P0HCLaNHe1tO7S/McN+azGJCoF05ZhfQA7T9mvY5ES6o9WdWx5qRGHuk+
Qm7s48D+fWNF1ubKJqmAPqwkjtLvWFBf3pJEANU1QcIBI8fuuFlpT6YYTwSnHXIS
c9AH1CKIwjL+3iuoeAnFK1umdi0ATPv4DNc/luyJ4SgdP7b2q4+CbGG95E/Wv/UG
jap9msi4/cSi4142zSG96shNSjlIaKQo
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:03 2025 by rpki-client on console.sobornost.net