Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft
File:                     gCx1H6mENH35yTztuX7ZUalSgoY.mft (raw, json)
Hash identifier:          ToLYWDmsHY0RO3vFXpszy92B0nhJ9bKekC1/bO6FJ1U=
Subject key identifier:   1C:62:49:A3:0F:D7:0D:7A:4D:19:00:32:7D:EE:B3:6C:4E:B2:46:F3
Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86
Certificate issuer:       /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286
Certificate serial:       0D69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft
Manifest number:          0D51
Signing time:             Sat 18 Oct 2025 18:41:37 +0000
Manifest this update:     Sat 18 Oct 2025 18:41:36 +0000
Manifest next update:     Sat 25 Oct 2025 18:41:36 +0000
Files and hashes:         1: gCx1H6mENH35yTztuX7ZUalSgoY.crl (hash: 3YQuJF7jADXm7eear7urJG0lTxkOEWk4ykgKzJUHSKo=)
                          2: AF2CB5CE101E11ED9FA78415C4F9AE02.roa (hash: VZ24W4uKwM60qRJ5vfKCX9lh+SGHmx0HfVlijTJVzIY=)
                          3: 677F3316E02711E9AB669750C4F9AE02.roa (hash: 4yWetI8VRw7mXlPSVbHYiXd6wjj+BvrR9fES4qn/WNo=)
                          4: 9A735F54EBE611EC82C08A11C4F9AE02.roa (hash: DgvkkBXnQUs6910aIZGV/GX1Y7PZj78ZOyie/aItMGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl
                          rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3433 (0xd69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286
        Validity
            Not Before: Oct 18 18:41:36 2025 GMT
            Not After : Oct 25 18:41:36 2025 GMT
        Subject: CN=68f3df60-6955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ff:d1:13:52:6d:df:30:4c:4a:0c:3d:ec:51:
                    09:36:0e:db:21:64:0a:81:61:51:22:61:7f:9f:55:
                    c8:4b:82:66:48:c8:78:ef:f3:9e:79:79:6c:9a:5e:
                    f1:e2:d6:74:3b:ca:3b:d4:c7:6c:1e:75:a5:1b:16:
                    3c:61:15:db:dc:92:46:b3:e8:c5:43:37:ff:09:e0:
                    40:87:e6:f5:91:0d:21:09:04:0f:74:51:78:7b:22:
                    03:42:f3:1f:ce:3b:94:65:40:38:28:3d:24:1c:5b:
                    b9:f8:4d:ba:91:ff:db:72:5f:6b:cb:e3:42:81:32:
                    1e:11:60:46:d0:df:3f:c5:83:0c:e3:74:21:a3:7a:
                    f8:70:75:6d:72:bf:15:51:1b:40:b8:99:48:a1:f3:
                    0e:d4:d9:eb:0d:8a:dd:cd:4f:17:55:76:a8:3d:c3:
                    e0:4d:c9:49:c8:ed:52:8d:0a:ed:e3:85:a3:74:ad:
                    d6:b2:1d:d8:be:a3:06:b2:5a:54:1d:ad:39:40:1a:
                    77:72:24:83:55:b0:c7:1c:b6:a0:64:a0:51:4e:9f:
                    02:75:7e:38:23:e8:15:1c:16:11:ea:e1:3a:4e:dd:
                    43:80:45:41:d8:26:42:b6:07:19:d5:8b:81:32:17:
                    cb:b7:ca:2f:46:6f:40:58:10:ae:6f:bf:6c:1d:4f:
                    02:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:62:49:A3:0F:D7:0D:7A:4D:19:00:32:7D:EE:B3:6C:4E:B2:46:F3
            X509v3 Authority Key Identifier:
                keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:11:98:43:e4:58:3e:8a:b1:82:25:7d:80:ae:0a:c3:9d:1f:
         15:ed:bb:16:ea:e0:77:7d:df:c1:5f:53:ba:b1:84:35:de:ef:
         2d:dd:e0:1e:9e:78:c1:d1:fd:ac:24:fe:e9:c7:21:19:a3:bb:
         73:7b:22:b1:68:d1:75:f3:8e:6f:17:18:83:b1:61:04:2d:7c:
         f1:c5:2a:5c:0a:0e:60:59:70:93:0d:c4:d5:4a:67:1c:80:9c:
         ec:eb:6a:73:d1:e1:36:10:b5:5d:c7:d0:bd:39:11:00:62:a3:
         11:65:47:9a:ea:7d:1d:fc:5d:c7:9a:a6:d8:d9:bc:31:19:09:
         dc:02:b4:d8:c5:9d:63:e2:73:10:44:6a:86:1f:6c:63:38:1a:
         a7:49:64:b9:47:3a:a9:3e:17:d5:34:af:d7:d4:87:3c:bc:3e:
         c0:49:f6:73:87:d3:87:a7:22:1a:ce:67:2a:e5:38:f7:65:71:
         c5:43:fc:ee:66:df:ea:54:87:15:52:67:ef:f1:c1:23:26:bf:
         a4:46:04:dd:3c:dc:60:7a:2d:4a:d0:df:c0:4a:cc:cb:ff:1b:
         f1:1c:8c:7a:55:16:10:21:01:0d:a1:d6:3b:62:70:d2:ee:9e:
         cb:bb:20:99:90:aa:94:70:38:00:61:b9:97:d4:21:a6:f6:fb:
         2a:70:73:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:35:00 2025 by rpki-client