Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
File:                     GWhCPtbSSViApWptsCvGcpjF5oY.mft (raw, json)
Hash identifier:          S3JBrz0xSs1zDxkcCjtuAzLQOPjR4XmzRaI7q2peCsg=
Subject key identifier:   A0:1B:B2:95:F3:CE:B7:65:CB:4F:13:93:6E:0C:EB:8D:FD:1A:B4:74
Authority key identifier: 19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86
Certificate issuer:       /CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
Certificate serial:       1063
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
Manifest number:          1049
Signing time:             Mon 28 Apr 2025 17:38:43 +0000
Manifest this update:     Mon 28 Apr 2025 17:38:42 +0000
Manifest next update:     Mon 05 May 2025 17:38:42 +0000
Files and hashes:         1: GWhCPtbSSViApWptsCvGcpjF5oY.crl (hash: GqLtwpk2bN+rWlPEwccMA6pDYUbNyCMK+L+3YFA8wnQ=)
                          2: D4F3A2B4DBCD11EE9B6F4669C4F9AE02.roa (hash: EHJm/HiHyHS2wDLaVYk3k6uReoau+etZZWwlwm0AUaM=)
                          3: 2884888A717011E99BA2FB3DC4F9AE02.roa (hash: vyuDgVud8VeU+L1s3GBCpzmY/+n8YurORFgDE2x/P9Y=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl
                          rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 17:38:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4195 (0x1063)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D3A9, serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
        Validity
            Not Before: Apr 28 17:38:42 2025 GMT
            Not After : May  5 17:38:42 2025 GMT
        Subject: CN=680fbd22-6c40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:cf:8e:99:72:8e:38:45:32:b6:27:34:d6:9a:
                    7c:06:bc:e5:c7:3f:75:ec:59:72:78:73:21:7d:09:
                    67:84:5f:8a:5c:3b:fe:be:3d:f2:eb:76:f3:ba:56:
                    14:ec:5c:b8:63:bf:7e:ef:c9:13:98:3f:52:64:24:
                    6d:0c:9f:34:a8:83:6f:c8:8b:c0:70:1e:14:8d:bb:
                    e2:97:79:9a:29:2d:de:c4:0a:0e:1b:9d:c3:c4:59:
                    0e:e6:ef:b3:d1:d0:cb:9b:03:c5:4e:14:76:8f:b4:
                    64:1c:ce:fc:c5:2c:9e:c9:4f:1c:89:29:b3:06:ba:
                    0c:62:99:1a:04:4b:b6:04:94:ce:ce:8d:2d:f1:98:
                    a0:aa:c4:ee:51:b8:34:9e:3a:d8:0b:e7:ac:42:b9:
                    33:a6:ce:a5:71:f8:a7:ea:76:3f:28:b5:52:39:34:
                    7b:87:9e:f4:15:a3:60:0a:c0:2e:ae:74:82:82:4a:
                    64:2d:1a:d4:51:8a:08:dc:48:6f:1e:ef:48:c0:87:
                    4c:ab:68:d3:4a:02:a3:5c:22:c2:41:c5:d7:8a:6f:
                    76:83:b5:8f:86:3e:63:93:64:6b:cf:ed:33:92:48:
                    ef:3e:d0:41:c1:73:5a:75:24:00:ff:f9:b7:60:1c:
                    17:9c:6a:8b:78:5c:08:13:81:a0:92:0f:09:b2:8e:
                    9b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1B:B2:95:F3:CE:B7:65:CB:4F:13:93:6E:0C:EB:8D:FD:1A:B4:74
            X509v3 Authority Key Identifier:
                keyid:19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f5:af:eb:30:18:88:6f:e0:ef:1a:2b:49:dd:d2:54:f6:a2:
         7a:65:4a:30:d0:b8:d4:4f:b9:fa:27:87:da:b5:42:2b:68:0d:
         b4:ac:f3:b0:b8:42:65:2b:c1:80:f5:16:0f:b5:3f:f7:0f:ed:
         22:6b:87:63:c1:f4:98:a3:bc:07:3d:7d:17:c9:7b:50:ac:b3:
         37:f4:b7:5d:5e:2c:e6:93:24:22:0d:e4:4a:39:46:8a:eb:b8:
         a0:78:52:4f:48:00:f5:7b:94:bd:0a:28:32:53:34:85:a0:75:
         d6:37:01:1c:1f:3f:ed:88:15:cc:8b:6b:9c:43:75:85:fa:4d:
         ac:64:f0:7c:70:d3:9d:97:87:a4:51:1b:6f:11:d3:2d:c2:bf:
         70:79:38:f7:db:22:f5:90:cf:9e:11:8c:ec:0e:94:fb:bc:b4:
         b3:2a:4f:9d:57:28:00:8b:31:54:f0:3c:eb:39:81:d4:58:ae:
         55:b6:74:4a:31:19:9b:9c:b5:93:ff:10:4d:81:48:65:4f:79:
         bd:b8:70:d3:02:2b:90:77:b9:27:27:20:41:9b:d8:e8:28:0f:
         67:08:20:ff:00:13:9d:03:aa:6a:f6:79:01:de:9d:b1:8a:df:
         06:8b:6a:10:3b:07:e6:4d:80:bc:5d:a2:da:50:dd:7f:9b:42:
         8d:13:d2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:10:46 2025 by rpki-client on console.sobornost.net