Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
File:                     GO9DJ41GMx6arw_XcqcygNE6qlI.mft (raw, json)
Hash identifier:          T8+gXmQJ1xph2CcirLDvzYtDvMLqn9eAag32cGN2Rdo=
Subject key identifier:   62:3B:2E:A8:F9:B8:DF:06:21:26:0F:42:77:B9:6D:CB:7D:BB:E5:5A
Authority key identifier: 18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52
Certificate issuer:       /CN=A91104D1/serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52
Certificate serial:       10ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
Manifest number:          109A
Signing time:             Fri 22 Aug 2025 17:32:19 +0000
Manifest this update:     Fri 22 Aug 2025 17:32:18 +0000
Manifest next update:     Fri 29 Aug 2025 17:32:18 +0000
Files and hashes:         1: GO9DJ41GMx6arw_XcqcygNE6qlI.crl (hash: 3Zouq9gIpjmgN9OwDCKk1hB2yJG/X2bfpBXCXfJn9pQ=)
                          2: 87C9E3FE3F6D11F0951BB23CC4F9AE02.roa (hash: cZ6PZrYDDvwfg8CUMPN9ghZZSt3c2YnNiECXmtMGmPE=)
                          3: 446826648F3511EE8864C25EC4F9AE02.roa (hash: isUw4olTYLhmDXX2L/NMbXVs40srSiQ7QfOKuuisKvs=)
                          4: 381223E2E00711EE8E019E29C4F9AE02.roa (hash: T690o+zlmCjPk931+I/aCbChbJkL8SqS+o/0AQYcZ0c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl
                          rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4333 (0x10ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91104D1, serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52
        Validity
            Not Before: Aug 22 17:32:18 2025 GMT
            Not After : Aug 29 17:32:18 2025 GMT
        Subject: CN=68a8a9a2-74e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b4:4e:d1:7f:d0:92:6a:47:64:69:ab:6e:d3:
                    fb:1e:35:ae:95:a8:a8:81:11:fb:fd:97:55:0e:1e:
                    80:a7:ba:22:d1:d9:7b:0a:01:e1:a1:f3:5d:7c:7c:
                    63:8a:91:aa:a9:4f:5e:7d:8a:a5:29:c5:57:55:fe:
                    a9:ee:cb:f5:cc:32:ea:6c:bc:c9:a7:8f:ab:b0:90:
                    c5:9e:f5:dc:d1:2b:7a:27:2f:79:4a:ff:1c:2a:9d:
                    e4:3f:4e:fc:8b:49:26:ba:2e:44:46:d6:97:df:8f:
                    85:50:61:23:cf:92:c3:f2:71:a7:5c:29:c8:98:49:
                    a2:36:9a:69:5e:0b:57:f9:ae:bf:86:30:16:fc:56:
                    b7:c3:24:71:79:2c:ff:87:27:6c:76:f2:7b:74:c3:
                    77:86:23:52:2e:8b:9d:56:a3:19:5c:ea:15:68:2b:
                    66:00:4d:e2:b1:8f:28:1b:0e:1e:0c:f9:05:0c:7e:
                    b7:e8:38:f5:79:dd:af:53:0b:c8:1a:e8:c6:dc:13:
                    07:6f:91:1b:d9:b6:cb:a5:8a:3a:51:f4:c4:37:d1:
                    55:56:df:3d:c9:56:d0:21:fc:f4:df:16:f5:51:92:
                    69:f4:2e:18:7f:f4:58:37:25:fb:82:fd:52:6e:90:
                    5a:e0:9f:cb:7c:e0:31:be:18:70:bb:fb:1f:81:f4:
                    5e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:3B:2E:A8:F9:B8:DF:06:21:26:0F:42:77:B9:6D:CB:7D:BB:E5:5A
            X509v3 Authority Key Identifier:
                keyid:18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:15:d8:cb:ce:d7:85:f2:83:eb:5e:0b:42:0f:a4:a1:a2:2f:
         80:2c:0b:31:0a:72:39:52:ca:cd:77:17:aa:ce:31:3d:72:2e:
         d8:0d:35:50:49:08:b5:a8:48:ec:ae:8d:e8:05:71:c1:05:da:
         b3:75:04:e2:9d:77:51:10:c7:d2:5d:c0:97:31:b2:ab:34:68:
         4e:bc:0c:bf:c6:af:cf:bf:65:72:e4:b9:66:c2:0f:fa:e3:8e:
         74:d3:87:de:3b:1d:be:ec:22:fe:e7:44:b8:13:b2:8f:49:4c:
         71:c2:eb:14:a9:c2:96:0d:c9:f1:df:54:0c:85:8b:3d:7e:71:
         df:f2:0d:b6:b6:c7:94:58:df:15:7f:b5:3b:e9:1b:7f:15:e4:
         46:9b:56:bc:b9:98:02:85:ca:be:14:88:f9:58:a2:ee:02:ed:
         93:4d:c2:4e:75:2b:2f:c8:9b:da:a6:56:75:61:fc:6b:49:eb:
         5f:44:36:81:bc:89:a8:68:29:9a:d6:4f:d9:79:d7:08:a6:2d:
         50:9c:1a:4d:5e:c6:29:ae:49:92:28:d2:77:88:97:01:77:ae:
         08:ce:4f:9a:5c:09:6d:bb:a4:21:fe:a9:ef:88:92:49:2f:a2:
         39:60:7c:f3:26:16:ae:52:67:62:52:ac:51:45:51:5c:15:3e:
         e0:e2:24:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:02:52 2025 by rpki-client