Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft
File:                     GagF0CaVVoPz_uVj-Oagonjwv3E.mft (raw, json)
Hash identifier:          4JrwlrfMtN5PbCqbMU8SxacZb4foVL6VXhZjAfX9dfw=
Subject key identifier:   5F:1D:6E:83:D6:45:F3:12:0A:D4:8C:46:CA:16:22:05:4E:23:B0:0F
Authority key identifier: 19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71
Certificate issuer:       /CN=A912111B/serialNumber=19A805D026955683F3FEE563F8E6A0A278F0BF71
Certificate serial:       06A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft
Manifest number:          06A1
Signing time:             Sat 18 Oct 2025 23:46:35 +0000
Manifest this update:     Sat 18 Oct 2025 23:46:35 +0000
Manifest next update:     Sat 25 Oct 2025 23:46:35 +0000
Files and hashes:         1: GagF0CaVVoPz_uVj-Oagonjwv3E.crl (hash: PctFI5ZliHoGHFg4ypGpKMfp11FuO+6yLcILA1wS2OE=)
                          2: 6D3057FC85F511EBB5C36F09C4F9AE02.roa (hash: j+dLoRV+1O81d7fGrVAaKGQRyaLFal/pTYtw+D6AbWA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.crl
                          rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:46:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1703 (0x6a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912111B, serialNumber=19A805D026955683F3FEE563F8E6A0A278F0BF71
        Validity
            Not Before: Oct 18 23:46:35 2025 GMT
            Not After : Oct 25 23:46:35 2025 GMT
        Subject: CN=68f426db-c492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0e:8d:4d:d8:7f:74:82:79:4f:d8:b9:70:58:
                    60:86:87:ac:9c:21:b3:16:99:ee:c1:4e:02:8d:7c:
                    81:5d:3c:ea:ef:c0:07:a8:27:2b:cc:58:de:02:a7:
                    16:0f:e8:56:b3:92:54:c9:10:a7:d6:88:7e:ea:1b:
                    d2:7a:8a:c0:7d:39:0a:31:1b:f4:af:80:9c:9e:f1:
                    2f:6e:bf:ee:35:75:df:1a:8b:f5:1b:18:e4:55:2a:
                    12:61:1f:8a:bd:10:5e:26:e7:d4:4a:2d:4f:a7:f1:
                    33:d5:52:a1:aa:32:91:a4:0f:96:a8:bb:a3:bf:90:
                    37:7e:c4:fa:56:00:67:82:9b:87:a1:4c:b3:7e:c9:
                    7d:33:f4:b5:1e:9b:af:31:ab:a8:46:c4:b4:04:28:
                    68:b9:50:97:ab:9f:6b:74:11:40:8e:59:fa:f2:27:
                    02:13:aa:ed:72:fc:36:d7:81:e7:49:c1:9b:cb:d0:
                    97:67:bd:4d:26:17:bb:43:a2:c0:3f:76:f1:0a:45:
                    25:a8:ff:3c:af:0c:95:75:ad:90:83:19:23:01:30:
                    10:fe:6c:f9:26:25:22:b7:01:8c:32:20:b6:9d:ff:
                    2e:27:d4:28:05:de:f6:5f:01:49:5c:94:3a:e7:8b:
                    d8:50:e6:fe:c9:29:1b:9c:32:c5:be:d0:32:d6:9e:
                    ed:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1D:6E:83:D6:45:F3:12:0A:D4:8C:46:CA:16:22:05:4E:23:B0:0F
            X509v3 Authority Key Identifier:
                keyid:19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:bb:4e:3a:eb:6c:2f:77:97:c6:98:c0:05:04:01:2b:f4:ec:
         c5:07:7c:f0:f5:07:0d:7e:3a:3e:39:38:40:83:0f:b9:98:88:
         00:fa:99:0b:b8:0d:f7:91:15:2c:0b:e9:7a:b1:9d:66:14:56:
         ac:15:de:70:9e:ff:54:fd:e2:05:56:20:40:93:e7:94:15:ee:
         ce:23:d4:f9:07:63:f8:af:02:38:b9:95:76:3f:92:b2:0e:7a:
         f6:4d:3e:2a:d6:94:e4:1a:97:48:f3:00:f9:98:dd:99:dd:30:
         77:58:43:c0:ef:b4:bb:77:f4:93:b4:4d:f6:d5:0d:8c:13:3b:
         cd:73:3e:87:95:52:1a:e8:d4:a3:78:11:90:a5:ec:51:d6:62:
         d8:a3:70:2b:2f:4d:83:57:a3:99:18:a5:6e:dc:1a:2c:e9:95:
         ce:2a:0c:15:80:0f:1b:f9:95:09:dd:a2:18:cd:1c:bc:65:6e:
         23:0c:62:8d:6c:c3:e1:d2:99:ef:fd:37:8a:7d:fd:b8:79:0d:
         31:d2:61:07:19:31:0c:b7:e4:66:0e:b7:3c:da:91:08:69:76:
         2f:e1:4e:fa:52:f8:78:d4:75:70:95:e9:b9:2c:14:7d:65:82:
         87:db:b8:6c:e2:e8:dd:77:d0:a3:36:94:59:84:75:11:b0:1e:
         48:40:7c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:21:19 2025 by rpki-client