Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
File:                     gOPDrlGaTxg3WsakP1N6hf96KoI.mft (raw, json)
Hash identifier:          NQj7VoSBcxMxTkMR7Py/4l49I9iiaKVIsr5pzcIURbA=
Subject key identifier:   BE:41:02:55:26:51:07:CD:65:E4:C1:63:6B:49:13:19:F4:CF:0D:A1
Authority key identifier: 80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82
Certificate issuer:       /CN=A9177358/serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
Certificate serial:       128B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
Manifest number:          127B
Signing time:             Sat 18 Oct 2025 17:36:35 +0000
Manifest this update:     Sat 18 Oct 2025 17:36:34 +0000
Manifest next update:     Sat 25 Oct 2025 17:36:34 +0000
Files and hashes:         1: gOPDrlGaTxg3WsakP1N6hf96KoI.crl (hash: ysQaibwURBRIBnQunW8rqnICYfpuDVpIqbblc3KOG+I=)
                          2: 98281C68C74D11EFBDEB795AC4F9AE02.roa (hash: AIVNJI4ml2hm0sk+tjU7ezgPrM6ruoUwi1BLVLUi/kc=)
                          3: 54EA0F76D36B11EBADF6AD2CC4F9AE02.roa (hash: kdp5b4Y2u+teTC9uos3HG7iOUgfSi1ENZs4RBMTxPNs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl
                          rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 17:36:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4747 (0x128b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177358, serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
        Validity
            Not Before: Oct 18 17:36:34 2025 GMT
            Not After : Oct 25 17:36:34 2025 GMT
        Subject: CN=68f3d022-7c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:24:12:23:af:8e:29:3b:b0:f4:50:29:cc:c3:
                    0a:f7:03:8b:a4:b2:03:d5:f2:3f:ec:b0:03:9d:f2:
                    55:68:1e:30:81:76:d0:a3:18:ae:78:f3:d2:1a:70:
                    88:9c:bc:c6:5a:d6:01:86:3b:4e:4c:5d:0a:c4:d7:
                    71:31:2a:f8:4d:b6:b3:9f:b2:82:aa:97:e0:72:68:
                    4c:06:69:3d:d6:10:3e:05:a1:fa:87:61:6e:04:bd:
                    54:de:1c:d8:ad:68:ba:b1:17:95:0a:d0:5a:de:a5:
                    f3:66:57:02:3d:f8:60:3a:f6:3a:03:ff:7b:a4:9f:
                    e0:a7:3a:0d:5c:26:7f:56:94:a8:26:c4:36:ec:1b:
                    32:6f:59:f3:2c:ab:40:58:a2:04:46:2b:a5:bf:cb:
                    15:b4:aa:11:83:e5:e5:62:c9:9d:76:ed:61:e7:82:
                    e0:7b:45:6f:c1:d5:68:5c:51:6e:21:86:bb:c2:75:
                    59:9f:9d:67:2b:03:0f:32:30:a6:0e:40:b9:89:b7:
                    20:31:70:3d:a7:e3:4a:0d:cf:29:44:ba:de:08:21:
                    1b:4e:4f:de:53:18:25:1a:c7:80:b6:2d:70:0d:25:
                    4d:50:f0:c4:df:97:7d:97:c7:b8:fd:16:d0:bd:58:
                    91:cb:47:2a:e3:98:3a:74:f3:9e:5a:21:28:bf:ec:
                    bb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:41:02:55:26:51:07:CD:65:E4:C1:63:6B:49:13:19:F4:CF:0D:A1
            X509v3 Authority Key Identifier:
                keyid:80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:54:b9:63:94:53:e7:33:cd:84:2b:1b:a2:6b:0f:bc:59:6d:
         bd:85:1f:a2:a7:5d:6d:67:80:ee:4b:2b:3e:07:74:45:00:4c:
         07:8a:fa:f1:21:a7:fa:ee:b7:1f:a0:62:7a:3b:ae:d3:61:df:
         41:3a:c3:80:4a:06:71:cf:50:66:7f:1a:47:e7:e4:9d:65:5e:
         ae:bc:bd:ae:de:39:91:07:70:00:c6:d0:b1:a7:63:26:bf:7f:
         e7:00:4f:0b:02:6e:fb:ce:a4:12:f1:5d:cd:26:eb:ae:41:ba:
         d2:99:6b:f9:53:de:8c:e2:71:04:e0:6f:f2:a8:ca:d9:89:e4:
         9f:0a:c9:58:fb:3a:54:87:73:d4:01:c5:0b:b7:7b:2e:dc:3c:
         b6:d6:a4:76:33:00:24:e8:88:de:e5:9d:d1:42:57:dc:c9:6d:
         f7:74:da:f4:28:b1:ac:4c:3f:ae:a0:44:b2:1d:cd:5e:a3:30:
         be:86:17:ec:5f:b3:ae:53:f8:3f:15:bb:2d:2a:8b:2d:a0:8d:
         8c:65:fc:c8:29:20:c0:2d:49:5c:49:60:d7:e7:3a:74:7c:1b:
         a2:62:db:95:bc:fa:0d:a0:15:b2:4a:7c:df:ec:86:2c:f7:48:
         59:55:3d:17:e2:2e:43:01:3f:cb:70:98:22:f9:c5:8f:ad:5e:
         96:fb:3d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:40:19 2025 by rpki-client