Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
File:                     GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft (raw, json)
Hash identifier:          pIbgOTQNQs4+cf9DyRqky/vA3BZH/Pf1cq98ceaegNM=
Subject key identifier:   FD:DB:AB:99:08:E4:5F:9B:72:27:92:5C:77:E9:62:01:20:DE:FE:25
Authority key identifier: 1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84
Certificate issuer:       /CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
Certificate serial:       02DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
Manifest number:          02CA
Signing time:             Sun 19 Oct 2025 03:37:46 +0000
Manifest this update:     Sun 19 Oct 2025 03:37:46 +0000
Manifest next update:     Sun 26 Oct 2025 03:37:46 +0000
Files and hashes:         1: GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl (hash: aZQIJ49LIqanIM+n4NJXau0rmJ9+i5jEQv5J//ioR5k=)
                          2: CF0D85CEFE5211EFA5AB8F82C4F9AE02.roa (hash: gpdjBjddXDySP7XwpO7PUD9YoIqfcH1r8H5PmyuUxoY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl
                          rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 732 (0x2dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187F7E, serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
        Validity
            Not Before: Oct 19 03:37:46 2025 GMT
            Not After : Oct 26 03:37:46 2025 GMT
        Subject: CN=68f45d0a-4f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b4:68:f1:f5:d6:e9:fc:1a:79:c8:35:cd:c1:
                    50:21:71:d3:24:44:19:b0:7e:89:8a:2b:73:2c:5f:
                    b4:05:f9:13:11:59:1f:73:c9:d7:98:88:2f:e9:d1:
                    33:02:e1:7b:56:35:84:85:fb:ca:fe:c1:c5:9f:f3:
                    fc:cf:b2:db:b5:47:8a:de:94:82:6e:80:04:7e:16:
                    32:23:f5:1b:b9:f6:58:2e:0d:ff:ae:b5:fc:c4:69:
                    6a:95:bf:96:51:9b:b8:39:ac:53:75:48:1a:89:7d:
                    0c:49:f9:dc:58:62:b8:52:3c:4d:08:61:5c:37:f2:
                    e6:bd:98:a4:5a:2f:d2:47:ee:52:1f:81:11:0f:e0:
                    dd:7f:40:52:ea:52:55:5c:a9:31:b3:f4:1d:84:fc:
                    e4:5b:85:00:a1:ac:d3:5c:25:61:b5:ca:63:a5:7c:
                    91:08:14:99:d2:44:57:68:70:3a:1d:6e:d4:2f:4c:
                    ee:ad:64:4f:8d:2f:4b:40:89:f4:93:fc:92:b7:36:
                    22:7d:dc:cf:9e:85:c6:c1:26:a4:ca:1a:ed:de:f6:
                    d4:02:7d:70:ff:0b:59:01:76:a3:55:de:65:19:d5:
                    03:9e:0e:46:9e:2e:28:99:6c:e0:c8:7b:e5:6d:eb:
                    30:9e:44:44:24:16:7a:de:f2:bb:85:d6:d9:cc:d6:
                    e9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DB:AB:99:08:E4:5F:9B:72:27:92:5C:77:E9:62:01:20:DE:FE:25
            X509v3 Authority Key Identifier:
                keyid:1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:b1:95:58:ba:60:ac:27:1a:84:af:7a:e7:28:ef:74:a3:fb:
         78:d1:1f:d1:02:06:ac:2d:97:22:71:73:25:25:28:b1:6d:15:
         c4:40:b4:b1:17:a3:5d:f9:cf:7c:8f:b5:6a:21:d3:2c:09:bb:
         40:03:16:e7:5e:a8:c9:b4:b0:aa:07:68:09:cc:eb:8a:4a:1c:
         96:4d:2a:49:a5:8b:59:bd:39:b5:b9:4c:2d:1a:ff:f6:7d:62:
         6d:86:21:f1:dc:2e:1e:bb:ef:46:3f:db:b1:d2:6d:9d:4b:5b:
         3a:de:98:7f:c7:32:63:b8:f0:06:ad:c3:f3:b3:3f:b1:95:2f:
         7c:a6:c4:2b:29:54:92:50:9d:7b:e5:b8:83:d4:61:09:ba:39:
         76:ff:f5:45:c1:47:7f:59:c6:2e:b4:85:b0:bb:47:bb:2f:8b:
         03:b0:4f:1d:d3:36:90:5a:b0:c9:fd:08:2a:c7:69:28:4b:a1:
         eb:14:f5:7b:e4:21:24:f0:32:40:a1:c4:0b:e6:66:3f:cd:2d:
         a3:82:57:2f:1e:22:09:81:04:46:b9:ac:0d:43:eb:66:8a:20:
         95:49:4a:ec:65:f9:c1:c4:59:d7:78:59:a6:ac:b2:13:ea:d4:
         21:fc:b7:03:d9:04:b6:c5:ac:d4:3b:00:df:5b:af:c3:33:3b:
         ae:e1:b5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:04:05 2025 by rpki-client