Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
File:                     GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft (raw, json)
Hash identifier:          DxeZkzr0GV/MCBeQhEztX5qfSjAOYnT+yXPcXpCIfhc=
Subject key identifier:   E4:0A:62:07:B5:35:30:A9:B4:CB:F1:70:A8:E9:1E:D4:0D:7D:32:0B
Authority key identifier: 1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84
Certificate issuer:       /CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
Certificate serial:       027C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
Manifest number:          026D
Signing time:             Sun 27 Apr 2025 01:24:31 +0000
Manifest this update:     Sun 27 Apr 2025 01:24:31 +0000
Manifest next update:     Sun 04 May 2025 01:24:31 +0000
Files and hashes:         1: GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl (hash: cOyMYXL5OdLQrL5EVNcXqJUp6PleZBXvmz0GFRRyHP8=)
                          2: CF0D85CEFE5211EFA5AB8F82C4F9AE02.roa (hash: TtO94NVCrFd/kOM0g0jsLA5taaehqwgncyfWlORB4kA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl
                          rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 01:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187F7E, serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
        Validity
            Not Before: Apr 27 01:24:31 2025 GMT
            Not After : May  4 01:24:31 2025 GMT
        Subject: CN=680d874f-990e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ed:3b:b5:33:ca:c4:fe:dd:f7:49:b0:62:ef:
                    f5:33:9d:87:d8:a5:6e:94:7a:6a:93:43:d9:9d:46:
                    87:6f:24:b5:85:eb:1f:0f:ea:92:10:b8:a1:64:e4:
                    6d:c5:e7:76:c2:f3:55:3e:27:be:98:64:1f:aa:ac:
                    da:20:5a:12:4b:1c:a8:07:23:f7:6c:c7:40:b5:de:
                    f3:b4:9c:4f:6e:78:03:da:fb:00:d8:90:fd:84:78:
                    0e:a0:f0:8c:30:bb:53:c9:69:80:4d:50:d2:cd:6d:
                    f3:20:02:c4:2d:0f:ad:e6:ba:14:00:07:34:64:8e:
                    02:09:cc:6b:b9:0f:8e:40:be:83:64:f8:4e:0b:70:
                    11:a5:31:ab:9a:aa:21:dd:f4:f2:9e:2f:0f:8d:5b:
                    b8:fb:a9:dc:1e:03:8b:57:d8:f3:6c:67:8b:18:02:
                    4f:c8:f0:27:5f:a3:72:b1:e7:a9:a0:b8:bb:c4:eb:
                    1b:d8:ab:95:0d:28:57:83:09:ff:4a:11:a2:dd:36:
                    eb:6e:fb:2a:4a:be:a6:f5:8a:82:ee:af:21:4c:63:
                    f4:d2:3f:1a:61:c9:3d:44:ca:1e:d1:d1:e3:a6:31:
                    2b:c5:30:f5:25:ee:f0:3a:89:35:97:c4:f2:bb:40:
                    ee:77:bb:56:50:05:d5:88:69:a1:07:c4:fe:81:d8:
                    1e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0A:62:07:B5:35:30:A9:B4:CB:F1:70:A8:E9:1E:D4:0D:7D:32:0B
            X509v3 Authority Key Identifier:
                keyid:1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ab:4b:4e:0e:fd:16:40:6a:51:50:2f:e2:da:aa:a2:b9:c7:
         5b:be:cc:d3:af:fa:e5:ca:bb:43:53:f4:5b:f0:a5:24:89:4a:
         16:fb:8b:45:e4:13:6c:0c:82:1b:bf:36:28:d3:59:19:e2:c0:
         cb:93:ae:09:64:80:c7:6e:20:d7:8f:f5:ec:3b:20:49:47:a0:
         dc:99:24:b1:44:6c:71:65:c9:0f:88:be:4b:4a:3c:6e:b3:66:
         f8:88:47:35:61:54:89:8c:46:51:0e:bf:a4:f2:60:ed:84:86:
         ad:a9:a4:57:69:d7:df:49:70:b5:a0:ab:5d:5d:15:9e:99:36:
         e0:6f:52:57:73:43:92:14:a0:47:6e:2c:8c:76:05:a4:dc:81:
         48:93:4b:10:0a:a7:4a:6c:65:20:25:fe:69:fb:75:0a:0d:a2:
         09:3b:d3:fc:bd:00:7d:62:6e:bc:a4:89:e7:12:4b:90:c0:d7:
         31:32:5e:d7:33:04:f4:f7:94:c2:9f:0d:a2:fc:32:6b:dd:eb:
         0f:3b:59:a2:91:29:6f:c4:b4:ca:f3:13:24:62:ff:48:bb:6d:
         24:50:b6:1b:5c:50:7a:fe:d3:1c:36:6f:9c:81:37:2c:e7:e7:
         f5:77:55:e2:4d:2a:dc:6a:8e:d8:ee:e6:7f:26:38:6a:c0:d3:
         0e:f6:53:6a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODdGN0UxMTAvBgNVBAUTKDFBNjgyOTQxRjg3ODlDNENFQTNDQzMzQjYzNzNFNDk0
NzYzMEJDODQwHhcNMjUwNDI3MDEyNDMxWhcNMjUwNTA0MDEyNDMxWjAYMRYwFAYD
VQQDEw02ODBkODc0Zi05OTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvO07tTPKxP7d90mwYu/1M52H2KVulHpqk0PZnUaHbyS1hesfD+qSELihZORt
xed2wvNVPie+mGQfqqzaIFoSSxyoByP3bMdAtd7ztJxPbngD2vsA2JD9hHgOoPCM
MLtTyWmATVDSzW3zIALELQ+t5roUAAc0ZI4CCcxruQ+OQL6DZPhOC3ARpTGrmqoh
3fTyni8PjVu4+6ncHgOLV9jzbGeLGAJPyPAnX6NyseepoLi7xOsb2KuVDShXgwn/
ShGi3TbrbvsqSr6m9YqC7q8hTGP00j8aYck9RMoe0dHjpjErxTD1Je7wOok1l8Ty
u0Dud7tWUAXViGmhB8T+gdgesQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQKYge1
NTCptMvxcKjpHtQNfTILMB8GA1UdIwQYMBaAFBpoKUH4eJxM6jzDO2Nz5JR2MLyE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0Y3RS9DNzYzQjVFMDEw
RTkxMUVEODVDQ0VBMzdDNEY5QUUwMi9HbWdwUWZoNG5FenFQTU03WTNQa2xIWXd2
SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dtZ3BRZmg0bkV6cVBNTTdZM1BrbEhZd3ZJUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
N0Y3RS9DNzYzQjVFMDEwRTkxMUVEODVDQ0VBMzdDNEY5QUUwMi9HbWdwUWZoNG5F
enFQTU03WTNQa2xIWXd2SVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBoq0tODv0WQGpRUC/i2qqiucdbvszTr/rlyrtDU/Rb8KUkiUoW+4tF
5BNsDIIbvzYo01kZ4sDLk64JZIDHbiDXj/XsOyBJR6DcmSSxRGxxZckPiL5LSjxu
s2b4iEc1YVSJjEZRDr+k8mDthIatqaRXadffSXC1oKtdXRWemTbgb1JXc0OSFKBH
biyMdgWk3IFIk0sQCqdKbGUgJf5p+3UKDaIJO9P8vQB9Ym68pInnEkuQwNcxMl7X
MwT095TCnw2i/DJr3esPO1mikSlvxLTK8xMkYv9Iu20kULYbXFB6/tMcNm+cgTcs
5+f1d1XiTSrcao7Y7uZ/JjhqwNMO9lNq
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:12 2025 by rpki-client on console.sobornost.net