Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft
File:                     gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft (raw, json)
Hash identifier:          Y5s3d0ASJh1XRtUGUb6qJNx34xdhxK/izCwZZ6YgfDM=
Subject key identifier:   4C:2F:68:20:F0:42:82:C9:24:CE:D7:B7:13:53:A9:96:66:5A:33:D1
Authority key identifier: 83:23:18:23:0E:25:82:20:A7:CE:E4:2E:09:7D:19:AE:99:76:13:A3
Certificate issuer:       /CN=A917E4CB/serialNumber=832318230E258220A7CEE42E097D19AE997613A3
Certificate serial:       0519
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft
Manifest number:          0514
Signing time:             Sun 19 Oct 2025 01:21:00 +0000
Manifest this update:     Sun 19 Oct 2025 01:20:59 +0000
Manifest next update:     Sun 26 Oct 2025 01:20:59 +0000
Files and hashes:         1: gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl (hash: urN052KAwpWm+3Jeh43aE+vckaGRnYUxcTuWg4W+FfM=)
                          2: 81764BC4235511EC976AC464C4F9AE02.roa (hash: Rcq5Nuqy/+xp1XYE1j9Q0LkOQi0P9qH6hEu8LNDUE2U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl
                          rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:20:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1305 (0x519)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E4CB, serialNumber=832318230E258220A7CEE42E097D19AE997613A3
        Validity
            Not Before: Oct 19 01:20:59 2025 GMT
            Not After : Oct 26 01:20:59 2025 GMT
        Subject: CN=68f43cfc-fe0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a6:32:78:20:27:aa:69:04:1e:bd:fc:52:6e:
                    8c:b3:1e:20:77:6e:a8:b1:6f:6f:71:ad:7b:00:64:
                    f1:c0:77:f3:aa:f6:c8:33:f3:39:1a:0e:6a:3e:3a:
                    d6:1f:ab:0a:27:1c:a3:06:1d:50:01:8c:3b:6d:77:
                    84:63:8e:86:3f:92:49:d4:57:85:1b:fe:8c:b9:ee:
                    04:bc:51:f3:65:d7:a4:7b:ec:e1:ad:c3:8f:cb:a2:
                    9d:21:e4:b7:61:b0:de:73:7d:b2:fb:79:52:6d:e7:
                    c1:35:eb:1f:30:f5:54:8c:50:d6:5e:76:da:a3:ad:
                    40:db:5e:29:9b:a1:b2:0b:c2:eb:8f:86:b3:2a:ea:
                    af:7f:98:21:21:1d:9b:18:3f:01:6b:04:f7:d8:de:
                    d5:49:8e:8b:86:08:b9:6b:73:48:16:34:00:1f:16:
                    06:0b:a1:7e:28:cc:98:48:91:38:86:2b:16:78:50:
                    02:6c:9f:b2:e7:fe:17:7d:aa:53:c8:e0:7a:1a:84:
                    df:a6:e4:e4:fc:db:b4:bf:82:2f:2f:cb:ae:af:af:
                    b1:b6:d4:b2:85:f3:a0:4b:9e:5f:55:21:5f:af:0f:
                    a3:2c:22:29:bb:e3:16:cd:35:bb:55:5f:69:d7:9c:
                    ea:8b:78:fd:67:b0:2f:6b:7e:1b:56:3d:37:98:4e:
                    d0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2F:68:20:F0:42:82:C9:24:CE:D7:B7:13:53:A9:96:66:5A:33:D1
            X509v3 Authority Key Identifier:
                keyid:83:23:18:23:0E:25:82:20:A7:CE:E4:2E:09:7D:19:AE:99:76:13:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e6:c5:e4:bc:84:34:6f:d0:24:25:2e:01:7e:9e:a6:7f:84:
         2c:d4:56:7f:43:65:ce:2f:61:84:26:f3:cb:9f:be:16:2e:08:
         1f:e0:4d:21:7f:67:3f:6d:da:da:47:af:7e:c5:b2:4e:b0:dd:
         f9:1c:37:c6:3b:d2:72:1c:1a:e9:b5:32:63:5e:42:f7:2c:fb:
         db:8a:59:19:84:a2:89:8a:26:b3:ed:92:40:4e:58:d8:42:a4:
         e4:c3:26:17:9a:36:6c:a1:af:bf:49:5c:67:87:66:82:3d:a7:
         79:e6:df:50:7e:70:1c:2a:be:50:e1:5f:7f:8f:27:03:d3:04:
         5a:e2:d8:40:69:18:fb:9d:88:a5:78:cc:18:e0:88:7b:54:e1:
         af:11:86:64:71:36:fb:57:f4:ad:b8:bc:09:2f:8a:1d:c5:19:
         10:c8:69:2a:b6:9a:38:a0:1f:14:90:4b:47:70:41:f7:b2:64:
         db:a6:de:d6:1d:29:9e:28:32:b1:d8:ee:9c:ac:50:df:46:1e:
         7d:96:dc:e1:46:d3:75:54:0a:a3:22:13:d5:53:a5:f5:b9:35:
         07:64:f3:7e:41:5f:b9:b8:3b:01:bb:eb:d0:c0:41:1e:21:af:
         87:91:c1:4c:ac:3b:5e:26:6a:4b:09:69:69:43:89:3c:1f:e3:
         dc:8d:9e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:25:24 2025 by rpki-client