Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft
File:                     gprYV1claHsfCkxV-UIq8zsA_LE.mft (raw, json)
Hash identifier:          ac1KlkXMFdq+5GIHBTBa0wddFioQQUlT28VMs8DzI+g=
Subject key identifier:   CC:1C:1B:B0:16:22:60:45:82:2F:2D:74:D4:43:F1:8C:EF:E5:9B:AE
Authority key identifier: 82:9A:D8:57:57:25:68:7B:1F:0A:4C:55:F9:42:2A:F3:3B:00:FC:B1
Certificate issuer:       /CN=A916A511/serialNumber=829AD8575725687B1F0A4C55F9422AF33B00FCB1
Certificate serial:       C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gprYV1claHsfCkxV-UIq8zsA_LE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft
Manifest number:          C1
Signing time:             Sat 23 Aug 2025 06:02:48 +0000
Manifest this update:     Sat 23 Aug 2025 06:02:47 +0000
Manifest next update:     Sat 30 Aug 2025 06:02:47 +0000
Files and hashes:         1: gprYV1claHsfCkxV-UIq8zsA_LE.crl (hash: f49soZW9TUUuAh/8ghPZNZnl5sXZkW/2eLUvki7uWgY=)
                          2: 833934745B9E11EFA7D10E5BC4F9AE02.roa (hash: Z7ymI4gwgufBDRVS5UuVZ13UBlK2Svt1pgBpOJn+u0U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.crl
                          rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gprYV1claHsfCkxV-UIq8zsA_LE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A511, serialNumber=829AD8575725687B1F0A4C55F9422AF33B00FCB1
        Validity
            Not Before: Aug 23 06:02:47 2025 GMT
            Not After : Aug 30 06:02:47 2025 GMT
        Subject: CN=68a95987-fdef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:67:37:6a:43:1b:c8:f8:df:8e:7e:b1:71:b9:
                    c2:49:2d:64:bf:32:84:e0:a1:5a:89:cd:c3:e1:2a:
                    a0:ff:5b:1b:e0:2c:ae:82:37:de:0d:2c:62:42:18:
                    32:8c:90:b7:e2:92:be:2c:39:34:dd:89:f2:d7:f0:
                    f0:a9:0c:24:a6:b2:ff:b0:85:6a:12:85:ea:11:5a:
                    47:b6:20:74:95:81:df:d8:32:be:44:45:88:7a:50:
                    3e:59:19:e0:98:ac:01:8e:b7:22:92:14:ba:79:72:
                    b4:88:e5:c7:d3:27:45:93:f7:f7:d4:48:a4:d4:80:
                    cd:ff:b1:10:3e:14:fb:0e:e2:59:eb:cd:de:29:0e:
                    4d:e2:35:ad:1f:59:80:2d:a2:29:3f:56:03:8f:20:
                    15:d4:0a:5e:0c:a8:83:65:7b:50:16:95:0e:45:86:
                    77:d0:09:8c:98:aa:6e:c7:be:38:c9:42:53:89:47:
                    17:8e:cf:4a:f8:2a:3f:cc:75:f0:9f:81:63:05:66:
                    20:b5:a7:31:32:53:b0:ac:9e:86:30:02:5c:ff:8d:
                    6f:0b:44:49:b6:94:cf:2b:23:13:c0:ce:e0:c3:20:
                    9e:b8:53:83:cf:4c:e6:22:eb:4c:a7:68:b6:d5:07:
                    d6:95:41:f0:5e:b6:79:b5:1a:41:d2:c7:f1:53:ae:
                    d9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1C:1B:B0:16:22:60:45:82:2F:2D:74:D4:43:F1:8C:EF:E5:9B:AE
            X509v3 Authority Key Identifier:
                keyid:82:9A:D8:57:57:25:68:7B:1F:0A:4C:55:F9:42:2A:F3:3B:00:FC:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gprYV1claHsfCkxV-UIq8zsA_LE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:30:fc:ad:5f:63:08:d6:d6:8e:15:18:90:28:42:61:94:82:
         13:e4:86:22:46:ed:30:e9:78:0d:fd:86:f2:df:3f:db:98:3a:
         82:5e:bf:b7:c0:64:d7:ab:9d:b1:86:b6:ea:5c:aa:64:7f:b3:
         67:3f:b1:7a:86:0d:8b:e0:97:17:eb:7e:77:bb:41:71:17:ad:
         59:80:e2:fe:3f:90:41:c3:55:14:e9:ea:40:d4:e1:d2:9e:8b:
         e7:d2:6c:7a:41:93:ba:65:9d:2e:49:a7:e3:81:48:87:32:5f:
         74:6f:e4:90:9a:ff:cd:08:86:34:a2:6e:9e:fd:e7:d2:ac:90:
         98:3c:02:06:4b:f2:04:48:bb:fe:95:6e:44:c8:d5:0d:a3:c0:
         05:42:cd:57:0a:c4:1d:c7:d6:d4:69:eb:5e:1d:ed:ef:22:4e:
         4c:af:52:1c:07:72:39:5e:1f:d3:a3:ff:de:d1:d4:1b:0f:bc:
         43:ce:01:8e:83:dd:71:ae:3a:ee:3f:ed:75:ce:da:87:fa:c7:
         31:57:46:67:3f:0a:90:85:b0:1b:04:44:5d:a2:83:6d:06:e6:
         6c:2f:f1:03:ab:95:75:a5:5c:70:ac:c8:2a:da:97:71:10:b9:
         c8:fc:6c:5d:a7:4c:55:63:42:c9:df:52:83:6d:af:fa:9d:41:
         bf:45:8f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:12:17 2025 by rpki-client