Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft
File:                     Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft (raw, json)
Hash identifier:          r0h/g7EwwBfEt21jTtZzqOUxW//IjmlpYheuRUO3PrI=
Subject key identifier:   7E:85:22:7E:80:C5:F4:F4:A1:C7:9E:77:BE:50:D7:D9:3D:41:06:C7
Authority key identifier: 19:C6:F6:C3:E6:63:D8:3D:44:11:92:18:C4:A2:9C:48:F8:BC:95:0B
Certificate issuer:       /CN=A915233F/serialNumber=19C6F6C3E663D83D44119218C4A29C48F8BC950B
Certificate serial:       0205
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft
Manifest number:          0201
Signing time:             Sun 19 Oct 2025 04:44:41 +0000
Manifest this update:     Sun 19 Oct 2025 04:44:41 +0000
Manifest next update:     Sun 26 Oct 2025 04:44:41 +0000
Files and hashes:         1: Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.crl (hash: sdLpkGIvgBBoQ9P3rnvQ2IS/mr1LyRsbTNgR/6J6gjo=)
                          2: 272313529ADA11EDAA08043BC4F9AE02.roa (hash: Tkj82GzJ16obkJIFo6Exr0H47jGo2TnUKRA7738GYK8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.crl
                          rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:44:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915233F, serialNumber=19C6F6C3E663D83D44119218C4A29C48F8BC950B
        Validity
            Not Before: Oct 19 04:44:41 2025 GMT
            Not After : Oct 26 04:44:41 2025 GMT
        Subject: CN=68f46cb9-1781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:71:9c:c9:e4:d5:8c:79:e5:f7:f9:a9:e0:91:
                    a8:da:46:d5:7b:8a:76:62:f2:9f:95:4e:dd:77:12:
                    d5:ce:3e:1b:b9:df:44:6f:fe:12:23:37:bd:ef:35:
                    fb:c8:9b:66:29:15:42:41:d1:20:aa:da:88:48:c1:
                    b3:5a:91:27:05:e8:7b:97:db:85:be:c5:16:88:29:
                    f5:1a:d4:6b:49:10:17:f5:a2:09:06:3a:7c:1c:22:
                    1b:07:f4:7e:9e:e0:83:b7:53:ff:80:1c:2d:c6:92:
                    9d:28:d6:a8:f5:9a:b4:fa:e9:b8:7d:19:93:42:ee:
                    1e:c9:a5:8e:c6:65:3d:f7:60:c1:96:8e:c4:25:eb:
                    2f:53:39:f3:b0:8f:61:b8:c0:f4:87:fa:6b:88:0f:
                    c8:f0:54:5d:85:f8:1f:43:6e:79:65:fb:06:44:48:
                    1a:c9:b8:3e:ea:45:92:9a:77:bd:35:d9:25:2a:70:
                    88:df:25:c1:68:35:24:5d:08:cb:c0:b7:45:f9:d9:
                    f6:95:ba:8c:9a:62:4d:92:21:7b:de:b5:bd:32:9c:
                    7d:da:21:72:a0:03:b8:8e:ee:08:3c:b6:65:6c:60:
                    11:6a:dd:b3:92:7d:d2:a3:af:f2:93:39:6e:e1:56:
                    c5:38:60:09:94:9a:c5:75:f9:4f:c5:d9:f6:0d:ad:
                    c8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:85:22:7E:80:C5:F4:F4:A1:C7:9E:77:BE:50:D7:D9:3D:41:06:C7
            X509v3 Authority Key Identifier:
                keyid:19:C6:F6:C3:E6:63:D8:3D:44:11:92:18:C4:A2:9C:48:F8:BC:95:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915233F/EED8EF469AD711EDBE69CD3AC4F9AE02/Gcb2w-Zj2D1EEZIYxKKcSPi8lQs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:77:ed:75:a2:18:d6:da:5c:c0:91:a2:4f:5d:6d:3b:95:36:
         69:fd:fe:ae:b5:c0:ee:bc:8f:3c:7e:f7:d1:64:3a:d7:a1:25:
         b0:d1:f2:00:31:34:11:f8:3e:4b:dc:22:49:e0:3f:e9:e0:ae:
         fa:5c:f9:0e:66:20:ba:16:4a:e6:c2:bc:a5:8d:23:89:c2:f6:
         8a:1a:73:0f:ef:ff:56:54:e5:c2:ea:c3:b1:d9:00:3d:8b:da:
         e4:d0:6f:b2:3c:b1:f9:a6:d5:ec:e0:04:31:45:e5:93:27:f5:
         30:1b:f7:e1:0e:1a:4c:d0:5b:60:4c:c7:02:e3:27:24:20:51:
         13:4e:b0:06:f4:dd:63:e3:bd:bc:ea:83:70:bb:14:82:19:6a:
         23:76:2f:47:02:d7:6d:7e:b2:6e:74:4e:cb:7d:15:ee:15:3c:
         2e:2d:07:d5:d2:51:34:92:aa:27:8e:c1:57:53:a9:ed:f2:01:
         de:d1:aa:c9:e5:17:61:6e:ce:15:ac:ae:a9:fb:d6:3a:85:3d:
         55:96:9f:7b:05:29:c6:0f:03:c7:e6:20:d6:5b:57:4f:87:8e:
         3e:d7:4d:fd:94:72:b7:b2:9c:d7:16:65:53:c5:9e:34:a4:6b:
         fb:82:36:b3:f2:43:a0:e0:8d:25:1c:8d:78:23:66:7a:89:c4:
         bc:6f:5c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:42:02 2025 by rpki-client