Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
File:                     gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft (raw, json)
Hash identifier:          97n9Rjj2pBIgN2SNEIaKkoKytjtHzi/hNeLYN4z67ZU=
Subject key identifier:   97:BE:6C:10:F2:D1:2B:0A:22:12:18:09:58:5E:C9:50:46:98:47:2C
Authority key identifier: 81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F
Certificate issuer:       /CN=A912CD21/serialNumber=818BB90332717F935730DAF14708FFC2F605F05F
Certificate serial:       6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
Manifest number:          67
Signing time:             Sun 19 Oct 2025 10:28:32 +0000
Manifest this update:     Sun 19 Oct 2025 10:28:31 +0000
Manifest next update:     Sun 26 Oct 2025 10:28:31 +0000
Files and hashes:         1: gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl (hash: fcgTl501KAXv0anM/byadz1gjjpMhRZZlttKzzi5beg=)
                          2: 15039C1E202F11F0AFD72717C4F9AE02.roa (hash: RNEYHFbl/lHVURQeSl/swC0oZ7j6giFqMqHaOjHDKKE=)
                          3: 2A2F9262201811F09DB3CC16C4F9AE02.roa (hash: /APLoPia3hJaAawAfJ/kXfLzR5xKKXFF9u0rCxKw4H8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl
                          rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CD21, serialNumber=818BB90332717F935730DAF14708FFC2F605F05F
        Validity
            Not Before: Oct 19 10:28:31 2025 GMT
            Not After : Oct 26 10:28:31 2025 GMT
        Subject: CN=68f4bd50-cd14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d1:0d:63:64:81:f0:89:fd:2c:48:39:57:62:
                    0a:65:3e:e0:9b:a4:6e:43:b7:17:f9:b0:ab:7b:55:
                    8b:ce:f3:69:04:32:56:75:ec:1e:a5:7f:88:bc:14:
                    79:00:09:59:9f:11:db:8b:de:ce:8e:5d:fb:6e:e7:
                    ff:cd:e5:28:e6:03:4d:a7:b5:95:f8:dd:b6:32:bc:
                    c6:5e:57:5f:3b:44:c4:5f:b0:57:ba:21:f0:42:7f:
                    ec:e9:89:ad:2d:c5:d8:2e:89:fd:9c:51:62:83:17:
                    fc:2f:fa:a3:b1:30:9d:99:89:99:14:1a:ec:86:4e:
                    6b:2c:2b:aa:b3:36:03:04:4b:d3:be:3c:69:32:39:
                    a5:85:4d:15:58:39:3d:50:5c:6a:b7:c2:63:b8:bb:
                    3d:bd:1e:40:31:c9:0e:cb:8b:f3:cb:7f:e1:a8:14:
                    3d:e5:82:6f:5c:d4:7f:5a:d9:8d:20:a1:2c:fa:5c:
                    96:4f:98:dc:45:c5:d5:4f:f1:74:f7:73:d4:a9:76:
                    5e:10:ab:04:68:a4:ce:5c:dc:3d:5e:8b:b7:72:dc:
                    a8:9d:12:5a:26:de:b2:c1:26:b1:6a:88:9b:5a:09:
                    34:94:9d:1c:03:d8:2e:da:96:45:89:ab:6c:1b:ed:
                    03:91:07:de:47:1f:6e:08:93:2c:be:f7:30:1d:20:
                    ce:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BE:6C:10:F2:D1:2B:0A:22:12:18:09:58:5E:C9:50:46:98:47:2C
            X509v3 Authority Key Identifier:
                keyid:81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:a2:8d:d1:94:c7:dc:b1:32:43:52:77:e4:96:c0:7a:40:64:
         6d:c8:c3:7f:d3:b7:14:39:05:87:2c:c7:37:98:62:25:fb:06:
         b1:c7:89:56:ef:82:c2:08:4e:5b:37:d2:f6:a7:20:a3:2c:cc:
         ef:21:94:53:73:1c:08:e4:ac:01:0d:0f:ee:e8:27:42:37:52:
         59:1d:cb:8e:b9:ec:41:ef:cb:c4:b7:69:f8:a6:ef:51:2b:44:
         97:b2:65:9b:92:ba:64:52:43:8e:05:d5:5f:db:76:a2:64:48:
         7d:cc:72:f6:2e:9c:f5:9a:1c:49:03:8a:67:c6:27:01:2a:78:
         0c:14:49:58:0c:0e:4c:4f:78:a8:e3:bf:ff:f6:8e:0b:a0:fb:
         f1:cb:0e:84:2a:6c:06:45:51:67:e8:30:26:e8:eb:80:91:92:
         35:eb:0c:b1:77:29:7b:4e:38:30:82:91:44:97:42:a0:14:d7:
         ed:7b:2a:44:a3:2c:9f:27:06:f9:f9:ad:1e:8d:94:23:6c:57:
         1a:ab:c9:d5:87:77:e4:43:b0:20:c0:f6:97:32:a4:a3:ee:df:
         d5:89:6a:5c:f1:97:83:39:8c:46:3a:8a:ba:b7:a2:66:ad:49:
         9e:07:0f:ff:43:64:54:c9:54:7e:3e:d3:fd:65:0e:ee:0c:58:
         d6:ce:be:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:48:40 2025 by rpki-client