Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft
File:                     Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft (raw, json)
Hash identifier:          R3SlSmOaum9ujeD4SRXYtugMyfaUKtG8z37I2RQKv1Q=
Subject key identifier:   6D:8E:34:44:CD:6A:E1:BD:D7:80:C4:2E:BB:8B:DA:A5:61:74:25:CF
Authority key identifier: 1B:1A:F1:83:51:06:C9:33:9A:DD:31:45:E9:00:B0:6F:DA:9E:56:E7
Certificate issuer:       /CN=A915CE6F/serialNumber=1B1AF1835106C9339ADD3145E900B06FDA9E56E7
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft
Manifest number:          57
Signing time:             Sun 19 Oct 2025 10:33:41 +0000
Manifest this update:     Sun 19 Oct 2025 10:33:40 +0000
Manifest next update:     Sun 26 Oct 2025 10:33:40 +0000
Files and hashes:         1: Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl (hash: G3pxZ0UxchUULxYxCWkStVklivXBCiMiUWldN6FFZE4=)
                          2: D7605790272B11F08FF39632C4F9AE02.roa (hash: Fi0yCP05HdRSZdYqPkFnS/jg/xhA2BNVnmSoNmrn8ME=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl
                          rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:33:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CE6F, serialNumber=1B1AF1835106C9339ADD3145E900B06FDA9E56E7
        Validity
            Not Before: Oct 19 10:33:40 2025 GMT
            Not After : Oct 26 10:33:40 2025 GMT
        Subject: CN=68f4be84-5e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:64:ef:3c:ec:3b:e1:1a:64:ad:bf:4c:ee:7f:
                    8e:88:90:de:3d:61:fd:0a:23:23:bf:b3:6b:ca:56:
                    90:46:e4:37:4d:91:8c:d8:8f:33:ff:64:5a:a2:a8:
                    9b:5f:30:04:ce:88:ab:da:ad:64:a5:af:ff:5a:f2:
                    33:87:d7:41:67:a8:10:ea:ce:e4:f1:70:6c:b7:f4:
                    93:80:96:e0:eb:5e:be:e4:e0:d9:7b:84:5e:ea:02:
                    20:5c:e5:8f:44:99:90:b7:78:1a:89:dd:3a:e6:35:
                    c6:69:34:5a:67:51:b2:0f:7f:87:f8:06:ca:0f:fa:
                    dd:55:f4:e5:be:8b:92:4e:50:20:ff:ea:9c:ed:a7:
                    08:7a:d3:11:24:30:a0:e3:70:02:15:af:ef:92:ad:
                    f3:25:99:d5:88:ef:84:4b:3d:02:c0:3b:7b:25:c8:
                    73:97:ed:aa:cb:be:74:c3:a9:a2:35:73:4c:27:67:
                    f0:49:fb:3f:bc:39:21:ea:f1:5a:0c:20:49:dd:51:
                    fd:19:20:85:23:a7:2f:36:58:d3:96:d2:cf:dd:da:
                    5a:5f:a2:d9:f9:61:c6:4f:91:5d:60:a3:80:94:90:
                    c2:d1:f1:80:63:0a:80:83:70:41:71:7d:a8:92:65:
                    70:39:08:f9:67:0b:a8:e2:00:b1:ac:58:6a:4a:86:
                    3b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8E:34:44:CD:6A:E1:BD:D7:80:C4:2E:BB:8B:DA:A5:61:74:25:CF
            X509v3 Authority Key Identifier:
                keyid:1B:1A:F1:83:51:06:C9:33:9A:DD:31:45:E9:00:B0:6F:DA:9E:56:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:1c:67:7a:e6:e7:09:d7:c2:d9:46:1b:7d:78:60:aa:dc:a0:
         7e:a9:e2:64:53:bd:9d:77:c1:81:a5:52:97:83:e7:6b:10:b4:
         b8:b5:0b:55:a3:9c:4e:c7:71:b2:47:be:aa:da:1b:88:c4:51:
         f4:fe:18:66:5c:2d:e5:6a:cc:7e:60:52:fc:88:24:ff:53:38:
         d2:e0:8d:48:e7:ec:b8:88:44:04:84:10:91:48:31:e9:61:85:
         85:41:f7:3a:77:4a:09:16:2f:c8:69:40:40:8e:50:70:38:36:
         33:42:e5:1b:9b:cd:99:f6:16:cc:ea:af:3f:9e:58:db:84:bf:
         1c:4e:e0:dd:b2:f4:a8:10:de:52:78:f3:e9:31:d4:2a:c9:8c:
         e1:6b:8a:29:b5:67:da:f6:dd:8d:b0:a6:41:fa:7e:eb:e7:6a:
         d7:d6:6d:ec:40:c3:0c:85:b1:ab:e9:fa:a5:74:34:86:39:2e:
         67:fe:21:07:7f:5b:1c:9d:22:b6:ca:81:64:5a:ea:f1:63:61:
         d0:d7:f1:d3:b1:f3:89:03:5b:ec:17:59:53:ee:fb:68:b6:7b:
         4f:51:78:90:54:54:e3:e1:37:54:05:22:fc:77:9f:5d:5a:24:
         4b:10:be:99:b3:20:40:5d:76:f9:77:63:28:fd:42:f6:ca:b4:
         d7:9f:1e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:48:12 2025 by rpki-client