Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.mft
File:                     gyMz5kxMiwtYbe-Te7liSCG4wd8.mft (raw, json)
Hash identifier:          qlp8k5ctAe2c1P5+7cqWDV9hfdGM70VlOOskhWigWK8=
Subject key identifier:   88:37:A0:1C:2B:15:16:0F:0D:8E:FA:92:32:5D:35:5B:0B:5F:69:E7
Authority key identifier: 83:23:33:E6:4C:4C:8B:0B:58:6D:EF:93:7B:B9:62:48:21:B8:C1:DF
Certificate issuer:       /CN=A915DB55/serialNumber=832333E64C4C8B0B586DEF937BB9624821B8C1DF
Certificate serial:       08B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMz5kxMiwtYbe-Te7liSCG4wd8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.mft
Manifest number:          08AA
Signing time:             Mon 20 Oct 2025 21:24:54 +0000
Manifest this update:     Mon 20 Oct 2025 21:24:54 +0000
Manifest next update:     Mon 27 Oct 2025 21:24:54 +0000
Files and hashes:         1: gyMz5kxMiwtYbe-Te7liSCG4wd8.crl (hash: nKWTWhCupNrVme+Y3+MIjSJstZWY64mrIryyvnYhx3w=)
                          2: 8479151EC72011EA8062547CC4F9AE02.roa (hash: zvA6nn6pR2vh2EORIjGvhMyUwOGcEaYAyPuniRtqvy0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.crl
                          rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMz5kxMiwtYbe-Te7liSCG4wd8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 21:24:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2224 (0x8b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DB55, serialNumber=832333E64C4C8B0B586DEF937BB9624821B8C1DF
        Validity
            Not Before: Oct 20 21:24:54 2025 GMT
            Not After : Oct 27 21:24:54 2025 GMT
        Subject: CN=68f6a8a6-5568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:be:2a:66:89:35:db:f5:1b:7b:60:d6:c0:f5:
                    ea:ca:d7:b7:30:05:1a:b0:65:5a:97:e3:b1:4a:78:
                    45:6f:de:02:de:82:58:ff:9a:e0:64:bc:66:8d:49:
                    35:fa:a8:c7:d4:c2:09:1a:22:87:3c:fb:c6:bb:78:
                    fd:7b:c0:ab:43:d2:68:de:bb:aa:e3:02:06:ad:ed:
                    6a:c6:a9:de:0c:47:da:c4:ee:a9:9e:6e:7f:94:e6:
                    c2:02:60:77:17:3a:ee:35:03:e6:fd:77:5f:92:e2:
                    7a:fd:1c:bd:2e:4c:26:2c:16:7c:ef:49:2d:a9:c9:
                    1b:44:a2:bd:db:95:ed:d4:35:dd:60:5c:21:bf:db:
                    7c:21:97:3d:98:3a:c8:48:0f:f8:79:11:5f:81:fa:
                    ed:27:7b:6a:a7:23:da:d9:b0:2d:bd:e5:bd:a8:6f:
                    6d:f1:48:7c:92:08:8c:97:5a:b9:81:71:5e:c8:aa:
                    0a:7c:7e:b0:47:f6:24:a4:6d:33:0b:e8:39:a5:eb:
                    19:bd:26:96:3f:67:08:d2:2b:dd:a2:d5:5b:7e:ab:
                    e5:d5:32:fb:2d:52:94:22:46:7a:62:66:cc:10:84:
                    d0:b3:05:ad:77:9b:4e:e2:c9:83:99:95:60:4b:1e:
                    94:33:4e:e4:a1:2b:5f:e1:9c:1d:9e:a4:83:c2:46:
                    97:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:37:A0:1C:2B:15:16:0F:0D:8E:FA:92:32:5D:35:5B:0B:5F:69:E7
            X509v3 Authority Key Identifier:
                keyid:83:23:33:E6:4C:4C:8B:0B:58:6D:EF:93:7B:B9:62:48:21:B8:C1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMz5kxMiwtYbe-Te7liSCG4wd8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:0c:e4:ae:74:77:7d:57:02:3c:6c:25:7a:41:32:88:a9:08:
         bb:8f:74:56:71:d3:fd:73:e1:b2:bc:cf:65:d9:14:87:e2:f4:
         59:5a:af:a7:40:55:66:45:1b:f9:d8:96:67:55:a1:c1:ec:c2:
         ee:26:df:57:ac:70:fc:79:00:69:6e:23:09:48:20:9c:8c:f0:
         98:f4:46:9e:7f:6f:56:78:76:db:a0:05:df:0d:b5:85:93:2a:
         7e:f4:ce:2c:78:bd:e3:86:cd:41:61:29:a4:c3:36:a2:35:21:
         f7:95:07:1a:84:4e:e5:dc:f6:c2:ae:e6:37:6e:7e:9b:0e:11:
         33:c2:bd:f1:8a:05:9d:21:5b:b2:dc:82:50:ca:37:b4:9e:f2:
         95:5e:5e:1f:d9:85:54:d4:7e:59:6c:c0:93:96:0c:a5:8b:fb:
         c0:98:a1:d8:b6:5f:f5:4d:ea:77:9d:c0:c0:56:ce:4a:0d:18:
         bb:be:4b:5d:11:da:70:38:03:f9:ca:79:a0:94:ce:33:d7:b9:
         9f:1f:b5:1b:cb:97:04:b5:3b:f5:68:49:e4:a3:da:40:38:c2:
         30:57:03:e0:5d:d1:bb:02:b1:66:3e:57:10:81:72:b1:19:23:
         8f:15:45:16:93:b7:87:27:39:2f:d8:19:61:de:7b:6f:7f:6b:
         f5:53:b0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:04:06 2025 by rpki-client