Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft
File:                     G43u2x08SMwcTCF7lpx5hUGkzHc.mft (raw, json)
Hash identifier:          nAUpck7Coj/GXRD+Zk6/c+psw0Z4ZysK7DSpssdgUtI=
Subject key identifier:   C9:1D:41:82:B0:D0:02:1B:11:1A:04:70:8A:25:C1:CB:03:E6:7A:25
Authority key identifier: 1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77
Certificate issuer:       /CN=A9124803/serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77
Certificate serial:       069A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft
Manifest number:          0693
Signing time:             Sat 18 Oct 2025 23:51:58 +0000
Manifest this update:     Sat 18 Oct 2025 23:51:58 +0000
Manifest next update:     Sat 25 Oct 2025 23:51:58 +0000
Files and hashes:         1: G43u2x08SMwcTCF7lpx5hUGkzHc.crl (hash: QxF46m/QdWIhiTCiUpYW9rTC0S9kGoYKJu6YnCCxrjY=)
                          2: 62CCFF308C7211EB98A6DD43C4F9AE02.roa (hash: lV/cpNWUCFTUuQ8wWKZTK1Tzrge3tnngMyqR3AbKgb4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.crl
                          rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:51:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1690 (0x69a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124803, serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77
        Validity
            Not Before: Oct 18 23:51:58 2025 GMT
            Not After : Oct 25 23:51:58 2025 GMT
        Subject: CN=68f4281e-7355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d3:39:4b:a3:50:72:57:03:fc:0c:a5:3f:12:
                    b8:1d:71:5a:a0:af:23:d0:a9:0c:f2:c3:56:92:d6:
                    5e:6e:db:22:05:4f:b0:bc:18:e0:f5:cd:46:dc:af:
                    f2:b2:ac:59:60:bb:84:c2:89:87:0f:c2:5d:90:f9:
                    39:8f:fd:6b:e3:7e:82:77:bd:6a:6c:f1:10:bd:6a:
                    f0:b2:dc:94:38:e9:5d:6c:dc:e7:ee:7b:f8:ac:cb:
                    9a:40:6f:6f:ab:90:37:ec:f7:9f:25:36:71:f3:6a:
                    de:9c:0f:1a:22:d3:9c:d3:7b:38:03:4a:4d:95:f5:
                    97:08:3b:87:59:e3:d0:39:5c:1a:02:ee:a5:02:1c:
                    a3:aa:70:5e:97:d8:f1:bc:9a:33:ca:85:6f:9c:29:
                    53:05:e8:c0:0e:41:ad:d3:73:c3:2a:9e:bd:9b:bf:
                    4d:2b:ff:eb:60:77:58:3f:9c:3d:2f:da:77:df:4c:
                    32:7a:d2:67:bf:1b:ab:5f:fc:38:a3:55:4a:30:78:
                    fe:a1:8a:43:e2:1b:34:d9:8c:27:6e:e4:5f:d2:fc:
                    07:48:e6:18:12:e9:5c:40:c1:4f:a6:32:11:48:4e:
                    36:d5:8f:c4:2c:39:f7:fd:fb:3b:5c:ed:ec:1a:d4:
                    c5:05:63:95:3f:4d:ca:c1:1a:17:fc:8a:4b:b0:61:
                    d9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1D:41:82:B0:D0:02:1B:11:1A:04:70:8A:25:C1:CB:03:E6:7A:25
            X509v3 Authority Key Identifier:
                keyid:1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:10:bb:ac:d1:00:72:ac:7f:8d:74:ca:48:89:06:6c:f4:94:
         f3:51:87:06:72:20:a3:7a:d7:8b:4a:39:0d:04:b4:8b:3c:f5:
         26:76:69:f2:d8:57:16:f6:d7:0b:07:aa:6f:f2:4b:30:09:80:
         b7:8d:62:68:df:02:61:a2:f5:a8:93:3f:85:fa:ee:41:86:d4:
         f3:61:26:48:02:df:db:fb:72:99:77:07:38:97:88:84:3b:b0:
         46:e7:6d:32:75:dd:3d:16:8f:7c:d6:0b:60:57:42:ce:d7:dc:
         cb:5b:4e:e0:bd:6f:09:74:f3:26:53:43:b1:a3:c6:90:47:af:
         1e:b4:47:d6:4a:a0:b6:f5:6e:4c:1a:8d:22:dc:59:33:4c:a1:
         84:86:e8:1d:4f:cc:42:b2:b6:03:2b:12:8d:18:a5:b3:59:ef:
         fa:54:ce:f7:ef:b8:c1:21:ce:01:30:7c:34:32:31:18:eb:ab:
         2b:19:bd:be:cb:b2:bf:b1:1d:5b:51:09:2e:e3:5d:93:00:dc:
         14:bf:ae:3f:b9:16:19:94:3b:a1:83:bd:c3:b4:ec:75:56:6e:
         93:6e:90:58:35:0b:ef:1b:a0:44:c9:1a:6a:08:ec:b8:8d:03:
         4e:b3:16:68:36:91:b5:2c:6d:d7:2a:19:e2:d9:a4:77:6b:d1:
         fb:41:66:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:45:14 2025 by rpki-client