Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
File:                     GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft (raw, json)
Hash identifier:          34L+UYFGiVURJ/+nmSEmv/VqBkLch12eSKeKK9a/o6Y=
Subject key identifier:   C2:5A:F6:A4:E9:6F:E6:44:C4:03:B7:65:EB:95:3C:45:73:0B:66:13
Authority key identifier: 18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77
Certificate issuer:       /CN=A912A5D4/serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877
Certificate serial:       7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
Manifest number:          7C
Signing time:             Sun 19 Oct 2025 10:04:02 +0000
Manifest this update:     Sun 19 Oct 2025 10:04:01 +0000
Manifest next update:     Sun 26 Oct 2025 10:04:01 +0000
Files and hashes:         1: GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl (hash: NWpePHei8EN8ZjOOyGSliJSirmNDCMAWwYXzCHWn0e4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl
                          rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A5D4, serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877
        Validity
            Not Before: Oct 19 10:04:01 2025 GMT
            Not After : Oct 26 10:04:01 2025 GMT
        Subject: CN=68f4b792-2265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f8:a2:f4:cc:b0:7f:37:93:a3:46:5f:51:a9:
                    f8:3a:11:cb:42:bf:2f:28:04:50:2c:c7:9c:2c:13:
                    32:50:fb:5f:47:56:6e:9c:cd:f2:8d:1b:7e:8b:2c:
                    71:08:03:82:71:38:27:84:c7:30:bc:3d:aa:37:48:
                    67:fb:a8:c1:7d:ba:f6:88:9d:f4:2d:2c:2f:b9:c8:
                    3b:08:1c:f4:dc:c5:29:28:2d:50:f8:e6:e9:e4:7d:
                    76:f3:59:68:ae:a3:ad:23:8e:20:ce:8e:56:99:c7:
                    37:36:5a:63:3d:91:6a:15:0c:ed:b5:38:18:ac:be:
                    2b:f2:18:e4:76:17:29:5e:ff:15:53:c8:10:dd:c0:
                    49:6d:28:13:d0:46:bb:e6:b8:48:30:a2:0c:4e:d7:
                    e4:ac:ea:19:cb:79:74:ad:1e:63:e1:ea:ed:46:9e:
                    06:ff:8b:c9:95:a9:8d:fb:a5:35:e3:48:d1:0f:9e:
                    81:8f:de:dc:6a:fa:a2:7e:4b:ce:9a:92:bd:83:10:
                    55:27:59:6d:4a:1c:16:09:52:17:be:48:37:a5:09:
                    bf:9b:96:4c:96:c1:96:6b:3d:f7:da:9e:50:b9:2a:
                    83:6b:19:40:53:84:9d:4c:2b:28:78:83:d3:b9:28:
                    cc:e4:59:98:ae:83:29:df:66:ac:c2:f3:ba:0d:01:
                    d3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5A:F6:A4:E9:6F:E6:44:C4:03:B7:65:EB:95:3C:45:73:0B:66:13
            X509v3 Authority Key Identifier:
                keyid:18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f8:76:f4:dd:31:27:75:13:b2:b9:57:71:e6:02:14:e5:4d:
         9c:f4:c8:f6:55:19:90:25:29:05:b9:b4:e3:28:a3:00:01:59:
         bb:75:9b:18:7d:9a:1b:c8:16:21:1e:4d:3d:1d:c5:25:c6:82:
         e9:9b:b5:bd:7e:b9:46:ff:8c:96:be:0e:59:9c:84:57:78:15:
         41:3e:3f:7f:60:ca:ae:af:eb:46:56:11:7b:52:fc:0d:a5:4e:
         5b:c8:f4:5e:14:d6:ce:9c:dc:b7:8d:6c:cd:39:48:a5:e1:98:
         1a:8b:1c:04:42:4c:f2:89:87:c3:be:a0:11:90:d2:16:19:75:
         1c:68:13:6d:b0:42:57:9e:43:92:37:fe:76:9a:02:b0:3f:21:
         11:18:29:ef:74:13:86:06:85:0f:0c:76:56:42:b4:89:b7:c5:
         ab:e5:f5:d8:db:fb:78:b3:47:ec:68:de:15:a5:22:86:30:6e:
         3a:c3:e0:c4:7e:d9:64:5e:43:a1:e9:b1:78:db:22:fe:5b:2d:
         e0:0b:ca:ab:30:ab:2d:a6:1f:b2:15:28:ee:04:36:79:58:c9:
         f1:58:7c:47:39:c7:d4:37:eb:ed:1d:a7:da:40:f5:71:4c:00:
         27:7b:2e:13:7c:13:23:8d:b2:d7:e6:09:08:a0:62:e2:e6:1e:
         33:9d:3c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:07:42 2025 by rpki-client