Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft
File:                     Gn5MpKocInIldylqsFeD11WxFr0.mft (raw, json)
Hash identifier:          PBpedAkuBiocXf4QGCpM1ooodU+3VwVsxdsrOdAACkQ=
Subject key identifier:   61:D6:02:46:98:DB:2A:13:19:DE:B8:3C:34:29:D3:C4:B3:8E:D6:89
Authority key identifier: 1A:7E:4C:A4:AA:1C:22:72:25:77:29:6A:B0:57:83:D7:55:B1:16:BD
Certificate issuer:       /CN=A915803A/serialNumber=1A7E4CA4AA1C22722577296AB05783D755B116BD
Certificate serial:       0C19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft
Manifest number:          0C0F
Signing time:             Sat 18 Oct 2025 19:36:22 +0000
Manifest this update:     Sat 18 Oct 2025 19:36:22 +0000
Manifest next update:     Sat 25 Oct 2025 19:36:22 +0000
Files and hashes:         1: Gn5MpKocInIldylqsFeD11WxFr0.crl (hash: bq+/3V6hG6SRIbEa1EHdMbsgCZVg9ggqBb1e2Rzx9Cg=)
                          2: 5B9628CE1E5311EA9A133560C4F9AE02.roa (hash: 4J/p4/at9N0h24OffWZyBK2PKe4zkvNfclH1N1tyx/c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.crl
                          rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3097 (0xc19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915803A, serialNumber=1A7E4CA4AA1C22722577296AB05783D755B116BD
        Validity
            Not Before: Oct 18 19:36:22 2025 GMT
            Not After : Oct 25 19:36:22 2025 GMT
        Subject: CN=68f3ec36-b2f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:44:d3:b3:46:a3:fc:23:9a:b6:a4:1e:08:
                    35:5b:bf:31:db:c9:aa:96:10:65:68:34:0b:58:ce:
                    3e:ce:af:30:f8:3a:69:bb:f5:be:d4:63:e6:7a:c7:
                    ab:6a:8a:0f:58:b7:10:50:2c:fd:21:93:0d:47:4e:
                    39:09:ec:84:41:bd:90:42:6c:55:2b:5b:fb:58:90:
                    f2:2d:a3:b2:3c:92:75:bf:9e:70:ee:25:ba:63:78:
                    d0:ad:d4:9d:c1:27:42:6f:7e:9d:5b:42:62:63:fd:
                    f0:11:f7:3f:33:f2:c1:30:6a:d3:53:5c:39:44:a5:
                    95:f5:a9:de:dd:4c:94:c4:2a:11:f1:6f:3e:8e:30:
                    80:c5:88:fc:25:b2:5f:a7:57:be:ee:bc:a7:9c:53:
                    c1:c2:be:bf:be:9d:6e:f7:7b:41:6d:32:bc:56:bc:
                    53:6b:b4:9c:b9:bf:a4:2a:90:3f:02:ba:84:f8:fd:
                    cf:b2:5b:55:fd:66:2f:ed:ff:03:02:31:db:a6:58:
                    e5:48:af:af:5e:fa:52:dd:82:49:40:a6:93:dc:2b:
                    44:9e:84:6f:df:43:4e:b0:a7:25:f6:8c:66:c9:2c:
                    87:a7:5a:04:ac:b5:3d:32:b3:6a:b2:e3:72:fa:36:
                    94:cd:e4:e2:8a:f8:3d:3c:91:7a:1a:ce:23:3e:16:
                    c7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D6:02:46:98:DB:2A:13:19:DE:B8:3C:34:29:D3:C4:B3:8E:D6:89
            X509v3 Authority Key Identifier:
                keyid:1A:7E:4C:A4:AA:1C:22:72:25:77:29:6A:B0:57:83:D7:55:B1:16:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:5f:4b:df:99:c1:9f:ea:d5:e9:50:c6:27:56:16:66:e3:ad:
         eb:ad:85:42:b2:b7:0c:7e:4d:da:42:4b:99:c4:99:14:d6:3b:
         85:ff:af:3c:fd:59:2a:03:29:89:04:3c:91:12:8d:41:33:92:
         89:f4:a7:52:82:6b:4e:4f:28:c7:71:74:9c:27:22:78:65:fb:
         41:74:8e:dc:b5:bc:bb:2f:d6:6b:d4:c4:1f:e8:c0:91:1b:da:
         91:54:b1:fa:66:b9:1e:a5:ca:c6:be:c9:c0:97:1b:0b:2c:27:
         05:1d:4f:d8:fb:43:3b:b2:6e:df:ed:e2:1e:7f:fb:19:b2:db:
         bd:02:b0:17:42:2e:0a:de:0f:15:4f:ef:62:e2:9d:bf:08:7d:
         9a:4c:fb:23:4b:c5:72:7d:ca:d9:50:14:41:fb:40:a8:02:57:
         fd:7f:00:08:7f:e8:95:c5:f8:fa:c4:6b:20:09:6d:ca:8d:99:
         cb:7c:16:87:26:6e:3b:9a:70:36:e7:a8:f9:35:45:7a:98:4d:
         56:96:43:1d:12:73:de:d6:0a:22:f4:2f:3a:3a:f1:ed:e0:08:
         07:bd:ed:d6:c2:53:31:40:5e:d0:99:41:33:58:c6:3b:b4:46:
         69:9e:df:fa:40:e2:0c:41:f3:66:e4:ad:8e:39:65:8c:28:59:
         f9:ce:4d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:01:31 2025 by rpki-client