Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft
File:                     Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft (raw, json)
Hash identifier:          2E5397h1IHEViK7vjJ2cJWhf2P253VuyYgpLHy4eWdA=
Subject key identifier:   E2:AA:76:D5:7A:74:DA:FF:B8:BC:B3:43:F1:9E:5A:4E:C4:34:27:75
Authority key identifier: 1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4
Certificate issuer:       /CN=A9184017/serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4
Certificate serial:       050C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft
Manifest number:          0500
Signing time:             Sun 19 Oct 2025 01:26:51 +0000
Manifest this update:     Sun 19 Oct 2025 01:26:50 +0000
Manifest next update:     Sun 26 Oct 2025 01:26:50 +0000
Files and hashes:         1: Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl (hash: jVQ4syT7NBQhvTqlq03S62s0AFpE0U30v7mwEKSslSI=)
                          2: A6DC22C63C7D11ECB08DFD13C4F9AE02.roa (hash: OgxkGLoBh6HGvCB/fRUVvIfnQUfu5bCnmyvUAGDoCoM=)
                          3: 0F8709542D6E11EC8327E321C4F9AE02.roa (hash: 7kV6yNtY0OEuz4gBv/+8ihVZGqJgfv8o7qKBHm8GmBs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl
                          rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1292 (0x50c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184017, serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4
        Validity
            Not Before: Oct 19 01:26:50 2025 GMT
            Not After : Oct 26 01:26:50 2025 GMT
        Subject: CN=68f43e5b-8a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9f:30:75:94:7c:c2:b7:1a:06:88:74:cb:f1:
                    6c:33:d2:0b:44:3a:c8:14:2c:10:f9:a9:49:a2:6f:
                    c8:2d:c4:69:71:df:28:e6:a3:84:a7:c3:d0:88:f4:
                    15:26:31:45:be:5e:32:71:ec:bd:46:3c:bc:41:b0:
                    4b:1a:a4:69:70:b5:25:ac:8b:99:c4:bf:70:c4:e6:
                    1b:89:78:7b:79:72:3f:2e:27:46:f7:1f:77:e0:dd:
                    5d:66:a9:65:00:50:60:18:2c:72:d9:88:05:d7:b1:
                    f7:35:49:73:0f:f8:c7:b1:81:18:9f:29:05:4f:c3:
                    f0:5a:14:e4:ef:3f:c7:a7:22:fd:b1:c4:3d:29:54:
                    3b:5a:e3:0a:da:85:38:83:32:e5:fd:f4:e7:3f:ad:
                    0d:95:10:62:11:e8:57:dc:e0:cf:d6:4a:cb:b7:52:
                    b3:7a:e2:93:50:d5:61:79:c6:36:c1:d1:b4:35:c4:
                    c2:77:4e:6c:26:c0:22:c4:aa:44:1a:6f:e5:8a:bf:
                    43:4d:cf:f5:8c:ee:aa:0c:9a:1e:e1:06:bb:d8:eb:
                    78:12:d1:d8:73:e3:f5:44:38:41:20:08:fc:e4:b7:
                    84:3f:9e:8f:a2:e3:34:af:0a:ea:cd:6f:18:8c:27:
                    28:0c:ee:91:87:58:d1:e8:36:9e:22:25:b7:a3:1d:
                    1a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:AA:76:D5:7A:74:DA:FF:B8:BC:B3:43:F1:9E:5A:4E:C4:34:27:75
            X509v3 Authority Key Identifier:
                keyid:1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:67:0c:bf:67:df:69:66:1c:ad:bd:b0:37:92:91:0c:3b:dd:
         1c:5e:ea:49:27:b6:ca:dc:32:81:c1:a1:d4:57:c4:6c:49:e5:
         db:b5:47:58:00:e9:8d:39:24:27:2a:de:c4:12:a5:2d:14:63:
         3e:2d:66:be:8c:1e:e3:eb:4f:bc:e5:1f:a5:60:05:bc:fb:10:
         f2:67:58:5b:b1:60:13:cc:66:c0:33:4e:1e:ad:1c:d7:67:f9:
         c0:79:3b:40:4c:75:7d:1c:7b:c9:d0:e4:f3:69:dc:ad:d6:3d:
         0f:c3:9e:91:5d:73:c8:fa:7f:71:19:c2:b8:9d:57:35:20:0b:
         d9:87:d9:48:68:3c:af:47:d7:65:57:b3:0c:18:9f:63:72:06:
         61:02:6d:09:47:ac:76:14:6a:59:3f:31:be:60:45:18:33:60:
         8b:b1:e8:cb:26:7a:4a:70:f5:e1:a6:6c:4f:2b:0a:de:e2:73:
         97:82:9e:ab:65:f0:2f:17:ed:f5:22:53:f1:7a:60:c8:17:92:
         9b:09:65:96:9d:b7:37:06:80:d6:ad:f7:72:60:0d:6c:71:bb:
         8b:b7:8a:c1:2c:f5:e0:bb:c3:bc:d4:d1:24:97:42:05:3a:f0:
         70:52:75:b2:98:c6:85:08:c4:11:8d:cb:f5:47:fc:85:c4:5e:
         6d:f9:36:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:32:54 2025 by rpki-client