Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft
File:                     Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft (raw, json)
Hash identifier:          otXqZ7DFFWDSqBQvD8EjVxYmdG5ql1iVBqLbG3JpsS8=
Subject key identifier:   47:FE:3C:06:A1:FE:37:F3:2B:75:51:61:63:B4:DC:2D:B4:E9:DE:B2
Authority key identifier: 1A:4D:31:4C:1F:D0:10:62:2E:87:49:1C:E4:82:7B:62:39:66:70:9C
Certificate issuer:       /CN=A917B4EE/serialNumber=1A4D314C1FD010622E87491CE4827B623966709C
Certificate serial:       0678
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft
Manifest number:          0673
Signing time:             Sun 19 Oct 2025 00:02:31 +0000
Manifest this update:     Sun 19 Oct 2025 00:02:31 +0000
Manifest next update:     Sun 26 Oct 2025 00:02:31 +0000
Files and hashes:         1: Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl (hash: KieRyR38Kl8j/iaj8LPfBI5Eg7jcckexLjt7wwMnZ2U=)
                          2: 851D827C977511EBA99DCE72C4F9AE02.roa (hash: hQ/sXLdGqM267Zz0nlBpIRPhMJ+xIknpNjyonr+GXWA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl
                          rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1656 (0x678)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B4EE, serialNumber=1A4D314C1FD010622E87491CE4827B623966709C
        Validity
            Not Before: Oct 19 00:02:31 2025 GMT
            Not After : Oct 26 00:02:31 2025 GMT
        Subject: CN=68f42a97-fc51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:35:86:a2:81:b0:da:57:2f:ec:76:f8:43:b8:
                    f5:a8:b2:a0:1e:1c:77:d3:9f:fa:ad:01:e2:11:5a:
                    76:23:f1:d8:7f:d5:32:a8:bf:91:f5:23:d8:8d:99:
                    ef:c4:c7:ea:df:6c:dd:fa:56:32:c3:33:bb:f0:e3:
                    f7:fe:9a:01:26:ce:84:e4:8b:44:18:93:ca:97:59:
                    58:14:37:78:5f:78:b9:36:a4:88:e0:5b:b9:e0:d8:
                    5e:6c:97:33:e8:7e:ac:2b:f8:15:9d:72:71:b8:63:
                    ef:2e:07:2b:64:88:56:9b:9a:5f:4e:1b:af:d5:08:
                    e2:63:fa:80:a9:fb:b1:7c:53:7d:4b:6a:64:7c:f6:
                    db:b6:fd:14:79:90:f6:65:c1:23:14:7e:62:d2:f6:
                    7f:6e:e5:52:f0:e0:ef:ac:fd:7b:2a:f6:16:dc:d4:
                    0a:ab:90:c8:2e:d4:27:63:e0:02:ee:40:2f:ca:cd:
                    a1:f0:2d:b9:87:7c:9d:90:b8:c3:ef:9c:f9:94:c9:
                    8c:21:d9:5d:b5:d2:dc:13:b3:a7:0b:f6:52:80:1c:
                    71:c6:8d:6f:89:9a:c5:71:ee:d7:d5:33:c6:70:d8:
                    e9:03:75:90:50:47:44:ce:67:5b:85:16:eb:88:ba:
                    08:85:fe:d2:4b:1e:df:be:cb:d4:e9:0d:85:42:0d:
                    84:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FE:3C:06:A1:FE:37:F3:2B:75:51:61:63:B4:DC:2D:B4:E9:DE:B2
            X509v3 Authority Key Identifier:
                keyid:1A:4D:31:4C:1F:D0:10:62:2E:87:49:1C:E4:82:7B:62:39:66:70:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:75:78:75:c6:fd:54:ef:87:a0:ea:0c:15:d5:44:81:a9:e4:
         24:ff:03:10:57:bd:79:ad:16:a0:82:47:9e:d4:99:e3:ac:bc:
         df:0b:7f:a1:71:d4:37:ed:0b:38:61:18:b5:8d:f5:21:22:cb:
         35:97:13:15:7f:dc:8f:03:e4:19:67:89:c9:8f:c4:ab:a5:ea:
         cf:79:44:6e:0c:92:e3:b7:3c:01:75:f5:57:51:e9:ee:aa:f7:
         88:c5:f8:06:5e:d3:aa:93:14:15:65:02:9f:b5:44:72:dc:55:
         f8:f2:7b:65:b2:95:d0:a9:6d:88:62:0c:0e:19:67:14:61:1d:
         20:ca:d7:9f:a4:b7:31:76:23:a8:d3:02:33:ee:df:33:94:12:
         7e:83:34:d0:b1:8a:7b:85:86:10:f4:be:7a:58:3f:dd:90:a9:
         bb:10:07:2f:22:94:61:5d:35:fa:41:a8:dd:ca:b8:92:c6:93:
         ca:e0:2b:f3:01:e7:59:c0:de:21:77:cc:71:f2:56:3a:b2:10:
         31:6e:52:83:1e:51:47:9e:f8:d5:9f:c5:19:6c:50:87:e0:c6:
         16:00:82:bb:af:56:e7:5f:9b:07:22:73:4c:13:e6:a5:cb:12:
         19:7d:90:3d:1e:f5:b6:c2:2b:72:20:a2:82:29:f7:94:4a:d4:
         73:78:d6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:49:35 2025 by rpki-client