Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft
File:                     Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft (raw, json)
Hash identifier:          nUgS+2/cBZXXhmP8+pZH/XzdKDGNn++FsFb/C2V5Bqw=
Subject key identifier:   AD:5F:1E:F3:A5:ED:1A:FB:0D:5F:99:1E:50:EA:CF:82:38:39:E3:71
Authority key identifier: 1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A
Certificate issuer:       /CN=A91518AF/serialNumber=1A6934CAB5213D8B43FD54358938DD1F31A1690A
Certificate serial:       0729
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft
Manifest number:          0723
Signing time:             Sat 18 Oct 2025 23:15:39 +0000
Manifest this update:     Sat 18 Oct 2025 23:15:38 +0000
Manifest next update:     Sat 25 Oct 2025 23:15:38 +0000
Files and hashes:         1: Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl (hash: Aj9ZShLt0XsffYg7Q151EWhfAN8C2A/xJCftTu6wp1E=)
                          2: C1C296F45A7111EBB1700884C4F9AE02.roa (hash: B12a5nmb++1idn982o5fMgF1ev9LOoacLfiyTpfrCoE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl
                          rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1833 (0x729)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91518AF, serialNumber=1A6934CAB5213D8B43FD54358938DD1F31A1690A
        Validity
            Not Before: Oct 18 23:15:38 2025 GMT
            Not After : Oct 25 23:15:38 2025 GMT
        Subject: CN=68f41f9b-38f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fa:49:c6:f8:e4:af:56:b6:23:75:99:76:45:
                    9d:4f:ae:08:96:8c:2a:b5:2c:f4:fc:5f:78:0b:73:
                    cb:30:f0:53:d1:c1:c4:f3:89:cc:ad:a9:23:bb:ba:
                    a1:43:66:2b:f5:5c:79:d4:62:4d:40:00:88:8e:74:
                    90:88:7f:42:77:3f:2d:4b:97:c0:02:ca:73:67:0e:
                    e7:b4:67:f0:ea:ba:0a:1d:54:b3:79:2e:a7:82:ba:
                    b3:f4:d9:41:5a:bf:fd:07:64:82:df:32:aa:3f:f4:
                    e2:3c:7b:be:8a:3b:56:f7:0e:ea:13:a1:ec:de:80:
                    b7:c0:4e:4a:f7:d2:15:98:99:73:50:95:1f:c8:6b:
                    1e:fb:75:ec:27:42:d7:a9:57:b5:87:71:8b:4f:9b:
                    22:ff:2e:15:f7:ec:f1:47:22:51:3d:e7:55:51:1a:
                    10:76:11:9a:01:d0:66:4f:f6:71:95:de:c1:b1:0c:
                    bf:25:f3:fb:6b:8e:30:d9:98:22:6d:76:0a:eb:84:
                    da:f1:32:7e:5b:0a:64:93:ac:07:61:63:76:23:f9:
                    23:59:1b:0c:5b:99:28:35:dc:07:cf:0a:5d:d8:19:
                    67:f9:54:b6:55:85:48:6c:41:ed:b1:09:b0:2c:24:
                    8c:38:9e:6b:34:0b:d7:52:ec:b0:af:1d:33:be:e6:
                    4f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5F:1E:F3:A5:ED:1A:FB:0D:5F:99:1E:50:EA:CF:82:38:39:E3:71
            X509v3 Authority Key Identifier:
                keyid:1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:a0:98:89:ec:7a:9b:ba:e9:5b:32:f2:ed:8a:64:6d:2e:2a:
         9b:0f:32:37:a0:9c:df:42:6f:3e:91:c5:9b:b0:f5:63:b9:28:
         02:20:59:23:4e:bd:a6:68:c9:4a:10:ee:64:be:9f:a5:5d:90:
         fa:f4:3f:81:55:a7:3b:9a:d4:e7:dc:1e:c9:d8:65:f3:f5:78:
         6d:e7:90:47:04:6e:7a:cf:df:7c:cc:3f:35:cf:89:59:92:a9:
         8d:f0:bd:f8:72:55:64:f7:4d:33:74:bd:18:9b:17:bf:fd:bc:
         3a:7f:e6:f2:8b:5f:c9:87:31:9a:ec:a3:f6:51:14:7c:b0:ec:
         55:e7:06:56:76:35:ce:fb:ea:f0:ca:28:41:ab:ee:a3:b2:33:
         25:64:a9:dd:27:7b:0f:8c:af:e4:ae:bb:41:73:5f:0d:33:12:
         cf:de:b0:cc:15:7c:6f:05:c1:a6:0a:cb:4e:af:0b:74:c0:0e:
         65:f9:84:34:98:ca:61:05:d8:26:a8:03:7e:4d:7f:4a:1d:a7:
         da:69:9a:6b:d0:d2:fb:b1:25:db:95:1d:d9:3a:08:ef:ae:f7:
         47:77:5a:7c:47:bc:e0:25:b2:57:c0:4e:66:e5:fb:a2:0b:fa:
         3c:a6:48:68:33:a5:02:5a:44:a3:f4:72:79:48:d2:b5:36:77:
         e4:ab:d5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:09 2025 by rpki-client