Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft
File:                     GzpBGgdaXbGixkL41KG8PLW8uxw.mft (raw, json)
Hash identifier:          Wm4VQK1m0aXIGdYmCTwRYCCrs4tEg3oRXfgO5Rv/a7w=
Subject key identifier:   78:70:A3:60:7B:44:78:42:83:06:D4:21:1F:24:8D:C9:05:37:05:CB
Authority key identifier: 1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C
Certificate issuer:       /CN=A916C3CC/serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C
Certificate serial:       0241
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft
Manifest number:          023C
Signing time:             Sun 19 Oct 2025 04:02:34 +0000
Manifest this update:     Sun 19 Oct 2025 04:02:33 +0000
Manifest next update:     Sun 26 Oct 2025 04:02:33 +0000
Files and hashes:         1: GzpBGgdaXbGixkL41KG8PLW8uxw.crl (hash: QrxKLpQ4H68aM0MTye/h9AOx3FwNIUEhh1/5stScqZc=)
                          2: F1F8A98442D811ED854B9670C4F9AE02.roa (hash: 77+2jyZbjFuOwQaQ18eSMUiIbLupIdmVr2AiPrnK1EI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl
                          rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577 (0x241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C3CC, serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C
        Validity
            Not Before: Oct 19 04:02:33 2025 GMT
            Not After : Oct 26 04:02:33 2025 GMT
        Subject: CN=68f462da-ac2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ca:5c:83:93:c2:2f:35:c7:6f:06:db:5d:64:
                    ae:b7:17:51:2b:29:3b:37:2c:c4:af:25:5b:8a:b4:
                    20:5c:03:af:ce:9f:59:62:54:30:63:a0:b9:28:1a:
                    d5:23:a1:3a:b2:ba:57:f2:76:aa:9d:5f:4a:2a:f9:
                    4e:1e:d9:72:12:ad:f5:e9:c5:66:90:4c:a8:5e:75:
                    0f:15:80:b4:f3:8e:dc:73:c0:19:cf:fb:80:45:56:
                    26:7e:a5:51:7d:53:6a:b3:f5:b8:47:d6:85:14:be:
                    3b:93:e5:dc:0e:d3:27:2c:ec:50:91:ca:2b:74:c8:
                    b2:bd:55:bc:06:d5:e8:39:05:1b:1f:0f:d7:de:16:
                    7a:c1:a2:32:00:ac:0d:d5:0e:40:16:04:a3:7b:1a:
                    fc:0f:b0:f0:42:b1:d2:76:3c:af:bc:0a:fe:53:5b:
                    a0:0a:44:7e:21:99:30:5a:3a:56:e2:dc:3f:75:1b:
                    46:ae:a7:8a:41:01:2d:2a:b0:4f:18:66:ad:b1:e6:
                    bd:85:0e:fa:9f:5f:5a:08:97:4a:e5:98:8d:01:5a:
                    d0:a2:3b:98:76:9d:aa:73:59:4c:2e:cf:a2:68:86:
                    a8:ea:16:40:ad:d0:ec:4d:ca:2b:95:61:3a:ea:c7:
                    f7:dd:d3:2e:06:07:75:2b:0d:4d:11:7b:9a:20:1b:
                    f2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:70:A3:60:7B:44:78:42:83:06:D4:21:1F:24:8D:C9:05:37:05:CB
            X509v3 Authority Key Identifier:
                keyid:1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:82:3f:4c:9f:ec:65:60:f8:d5:e8:bb:7c:4c:0d:05:4c:00:
         9f:75:95:f1:93:1f:83:99:ad:f3:79:ca:91:14:b3:c3:70:91:
         24:11:18:68:4f:ab:fa:99:a0:c9:8d:3e:4e:ac:4c:91:9b:1d:
         11:62:3a:7d:d5:4c:53:0e:f3:6f:37:96:94:0e:ee:a0:c0:06:
         14:b0:7a:5c:74:43:23:cc:85:62:4d:52:5c:f1:43:38:c7:bb:
         54:f4:8a:fa:14:c5:c4:34:cb:48:e4:13:fe:17:f2:0c:07:fd:
         c7:39:2e:3b:bf:7e:da:c0:17:07:88:6e:62:19:40:ce:77:82:
         36:dc:20:60:e4:db:3f:e8:c2:47:21:1b:9a:2b:8d:2f:66:cc:
         18:c0:bd:9d:10:bd:2c:f9:fa:9e:2f:63:1d:ee:20:75:4e:31:
         66:29:16:72:e6:39:1a:98:d5:81:b7:80:0d:cf:70:2f:c8:2a:
         84:4d:d1:60:5f:fb:e1:81:c1:97:e0:6f:88:da:a4:45:d5:7e:
         87:82:81:7b:c9:a3:10:d4:0f:af:04:5e:99:61:da:0b:a6:a3:
         85:c6:3f:b4:6a:bb:4f:43:21:1a:e0:67:73:05:bf:78:57:5c:
         15:21:30:15:c8:69:d2:92:7c:89:bf:db:b5:98:c0:8f:d9:52:
         79:c9:eb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:48:10 2025 by rpki-client