Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
File:                     GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json)
Hash identifier:          NMXqaWyHH85ILFu0W1VZXUWJkSyUPds5JWMK3wW2K4w=
Subject key identifier:   52:6F:41:8C:1B:4D:31:82:B9:41:04:71:69:D4:9A:02:53:05:D0:47
Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F
Certificate issuer:       /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F
Certificate serial:       09BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
Manifest number:          09B0
Signing time:             Sat 18 Oct 2025 21:03:50 +0000
Manifest this update:     Sat 18 Oct 2025 21:03:49 +0000
Manifest next update:     Sat 25 Oct 2025 21:03:49 +0000
Files and hashes:         1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: YVAvqIVzsOVKuT2wD++UMqdDbyhM8mDA/8x/ssCitVs=)
                          2: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: ofPWMxlhICdSKGTCU/b001ZJjB4sClqS+xTcAblTppI=)
                          3: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: fDW0xK38wNoRy+xNO++3QFj+gKi2Fx9Gapxzp38OmUQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl
                          rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2494 (0x9be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E0AC, serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F
        Validity
            Not Before: Oct 18 21:03:49 2025 GMT
            Not After : Oct 25 21:03:49 2025 GMT
        Subject: CN=68f400b5-30a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:eb:ff:f7:5b:21:c4:74:a7:1f:3b:81:f3:78:
                    5b:3c:4c:bc:d6:e7:de:c8:15:81:15:6e:34:fa:cf:
                    f6:8e:c6:87:05:62:ad:a5:72:72:26:84:8a:63:0b:
                    66:15:77:b7:48:45:59:f4:e8:15:ac:f9:b8:e4:02:
                    5c:e3:e1:8c:e2:b1:1d:fb:09:42:0b:59:d7:80:44:
                    e6:35:2a:82:5c:7e:72:0e:ab:52:cd:83:57:ff:64:
                    46:bb:60:2f:76:86:67:0f:55:12:b6:e3:e7:28:5d:
                    8f:86:21:4d:12:97:50:cc:d4:27:8f:ce:5b:e6:dc:
                    dd:d1:90:1d:1e:c8:4b:6c:5e:90:d4:db:cd:8e:5f:
                    db:e2:a2:58:bd:ba:7c:67:f1:76:3d:7d:a7:77:44:
                    5e:82:72:b0:42:51:f9:7a:b6:58:bd:20:28:b5:f1:
                    27:17:bc:c8:bb:10:17:8a:07:34:64:1b:b1:af:10:
                    dd:d2:4f:2a:75:e3:44:b6:0f:e1:04:1d:bf:60:45:
                    e6:b8:a1:b2:cb:07:ba:64:f9:9a:e5:b6:6f:44:12:
                    ed:60:a2:f5:dd:a6:17:22:79:6c:b1:6a:cd:3c:b2:
                    0a:ba:45:94:3c:0d:f6:f6:30:66:a9:22:1b:14:8a:
                    b0:b1:d3:e2:f2:36:b0:42:07:bf:ce:69:ab:ea:2c:
                    e7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6F:41:8C:1B:4D:31:82:B9:41:04:71:69:D4:9A:02:53:05:D0:47
            X509v3 Authority Key Identifier:
                keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:3f:e2:01:a3:88:bf:d3:be:12:b2:ac:2f:aa:9d:7d:08:bf:
         78:b4:b9:5e:a8:01:03:8d:f7:23:68:52:f1:d4:23:7d:ca:a2:
         19:5f:d4:d3:35:2e:40:01:97:f2:93:56:1a:96:08:d1:e4:c7:
         59:8f:94:9c:11:15:e9:53:3b:2e:97:2e:53:2e:22:01:69:81:
         28:ac:55:c9:eb:2b:3e:31:c5:fa:fb:d0:0f:14:52:6a:b3:0e:
         c4:41:9c:2c:3f:99:ce:d3:57:3a:ec:3e:b8:46:09:b9:b7:9f:
         e4:69:e8:c4:6b:0e:00:7f:0b:88:40:ef:9f:84:11:04:53:6d:
         92:9f:8a:57:d5:af:1b:ab:9e:0f:09:b5:3c:f9:8c:4d:2a:93:
         1d:5e:fa:a4:b4:68:f2:dd:ca:c3:77:ca:c9:ac:54:03:2a:a3:
         cf:0d:dd:39:f2:40:73:eb:3c:5b:8d:f8:0b:7a:09:74:83:6f:
         ed:b9:e5:60:c7:c9:e3:1e:2b:36:0b:55:45:49:11:f6:25:e4:
         81:b4:68:3d:c6:2d:5d:db:e6:1e:9d:ca:e5:70:c5:44:26:cd:
         44:9c:e3:a9:f5:d6:32:84:dc:69:45:61:b0:8b:d8:64:a4:d5:
         82:d6:cb:e2:18:58:95:3e:f6:b6:61:40:1b:3b:85:54:14:27:
         2f:ca:9b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:41:23 2025 by rpki-client