Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
File:                     GWhCPtbSSViApWptsCvGcpjF5oY.mft (raw, json)
Hash identifier:          Obnpv3W24kqYcsI4YtetknV6kUSAvRPtaxbNEtOWmns=
Subject key identifier:   F0:38:A2:7D:9E:69:4C:4D:A6:B3:60:E8:95:DC:CA:E2:22:08:AA:D9
Authority key identifier: 19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86
Certificate issuer:       /CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
Certificate serial:       10BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
Manifest number:          10A2
Signing time:             Sat 18 Oct 2025 17:55:25 +0000
Manifest this update:     Sat 18 Oct 2025 17:55:24 +0000
Manifest next update:     Sat 25 Oct 2025 17:55:24 +0000
Files and hashes:         1: GWhCPtbSSViApWptsCvGcpjF5oY.crl (hash: PEe8nPmQ0OHTPVMYjrMD84IR4UGA/k1QQE8rJkExu3U=)
                          2: D4F3A2B4DBCD11EE9B6F4669C4F9AE02.roa (hash: EHJm/HiHyHS2wDLaVYk3k6uReoau+etZZWwlwm0AUaM=)
                          3: 2884888A717011E99BA2FB3DC4F9AE02.roa (hash: vyuDgVud8VeU+L1s3GBCpzmY/+n8YurORFgDE2x/P9Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl
                          rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 17:55:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4284 (0x10bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D3A9, serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
        Validity
            Not Before: Oct 18 17:55:24 2025 GMT
            Not After : Oct 25 17:55:24 2025 GMT
        Subject: CN=68f3d48d-8faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:69:46:c7:6e:b9:03:da:f1:68:d6:a2:26:7c:
                    f1:04:02:1f:dc:ba:c0:79:71:1d:98:1f:d4:a7:93:
                    41:58:e7:76:54:91:30:8c:96:d2:3a:46:72:db:4c:
                    fc:df:20:41:9e:14:9d:b1:9e:2c:55:f5:ef:00:53:
                    2b:b9:a4:a2:1c:9f:01:82:c3:eb:4c:0c:09:24:24:
                    3a:85:25:02:83:c4:61:ce:5b:5d:be:6a:52:68:06:
                    5f:0c:77:da:fa:af:5d:09:a9:56:1e:ca:28:f8:45:
                    63:d5:ca:28:d1:3b:57:25:a2:cf:c6:40:ce:32:68:
                    44:f4:27:d3:b5:c7:08:02:e5:6e:26:63:b6:0a:44:
                    76:6b:b0:f7:e3:dd:47:34:86:1f:d9:ef:d5:9e:4f:
                    a6:c4:3c:99:12:2d:b6:13:bd:c7:8f:8f:44:17:3b:
                    b7:da:33:e4:83:02:67:23:3b:3a:15:49:0c:35:dc:
                    fa:d9:92:60:c6:02:f9:a6:51:dd:a5:b1:bd:9c:70:
                    03:a2:27:fe:61:8a:57:87:4c:3d:92:19:e8:d8:ee:
                    c3:79:cc:5e:38:93:20:95:e8:5e:81:10:c6:97:30:
                    9e:be:91:86:15:95:48:93:40:d5:73:b7:71:67:6b:
                    e2:bd:30:fa:2a:22:ee:26:4a:db:f1:db:58:5e:49:
                    60:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:38:A2:7D:9E:69:4C:4D:A6:B3:60:E8:95:DC:CA:E2:22:08:AA:D9
            X509v3 Authority Key Identifier:
                keyid:19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:8a:ae:68:2d:b6:45:06:d0:9a:fe:db:3e:f6:40:35:e8:50:
         62:f5:a2:e5:0e:95:f4:a9:82:62:d0:e1:18:7b:1d:12:72:24:
         c9:4e:99:77:7d:27:5a:f3:9b:a0:a2:58:36:83:94:a9:04:b9:
         ea:b4:e8:97:c2:07:a5:40:5d:d5:8b:5e:05:5c:ac:36:33:d0:
         67:ff:31:83:aa:ec:63:db:bf:35:3a:70:2a:f4:6e:f4:67:7d:
         9b:3c:1d:94:c8:b5:73:14:9f:53:68:22:3b:a7:63:8e:27:6a:
         7a:c4:40:0a:d3:a6:3f:bc:de:18:0c:c2:92:c7:57:1c:b1:08:
         0a:f2:4e:db:77:5e:dc:8d:b7:26:f3:70:1a:84:00:b3:27:1b:
         72:e6:a4:05:45:10:7d:9b:20:7d:7b:22:84:3d:1f:e8:6b:e8:
         bb:62:88:4f:06:5a:d0:3b:78:5b:0e:01:20:24:03:97:5c:db:
         17:26:aa:c2:a9:59:51:ca:3e:64:4c:4c:e0:1a:6a:fc:89:51:
         79:a2:2d:1e:b8:10:e7:c2:e8:67:2e:ac:30:cb:df:4a:1d:de:
         50:cb:b8:7a:7a:9a:ef:2b:5b:f8:26:21:e3:09:cf:2b:6a:da:
         f0:cc:7b:93:61:37:ce:88:33:3b:ff:e1:99:8b:00:b5:07:64:
         c8:fc:ac:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:49:52 2025 by rpki-client