Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
File:                     GWhCPtbSSViApWptsCvGcpjF5oY.mft (raw, json)
Hash identifier:          3hLdoz8XQgN4Dahj2LB6Nz/24ZUZf9AFcujqKuph13k=
Subject key identifier:   EE:2E:EC:0E:8D:57:C8:DC:55:45:AB:38:23:72:5F:5F:7D:36:C3:C0
Authority key identifier: 19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86
Certificate issuer:       /CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
Certificate serial:       109F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
Manifest number:          1085
Signing time:             Fri 22 Aug 2025 17:30:21 +0000
Manifest this update:     Fri 22 Aug 2025 17:30:21 +0000
Manifest next update:     Fri 29 Aug 2025 17:30:21 +0000
Files and hashes:         1: GWhCPtbSSViApWptsCvGcpjF5oY.crl (hash: m2ZnLTYz4+7Co+h9qEtR8YMlj7V5CLaRPml5+zrj9JQ=)
                          2: D4F3A2B4DBCD11EE9B6F4669C4F9AE02.roa (hash: EHJm/HiHyHS2wDLaVYk3k6uReoau+etZZWwlwm0AUaM=)
                          3: 2884888A717011E99BA2FB3DC4F9AE02.roa (hash: vyuDgVud8VeU+L1s3GBCpzmY/+n8YurORFgDE2x/P9Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl
                          rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4255 (0x109f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D3A9, serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
        Validity
            Not Before: Aug 22 17:30:21 2025 GMT
            Not After : Aug 29 17:30:21 2025 GMT
        Subject: CN=68a8a92d-7d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:22:f5:a5:1b:2c:ab:37:12:73:a2:62:18:d2:
                    c4:e1:51:d1:cf:46:6d:a0:45:e5:07:21:4a:10:d7:
                    5a:52:85:ba:28:1b:7e:7a:2f:d8:41:a9:ba:63:3b:
                    76:e5:80:33:58:6b:26:3a:9a:a3:59:b3:93:71:e1:
                    69:2f:e2:b7:52:82:d2:fb:08:bf:98:e1:cb:2f:4c:
                    f8:5c:0e:4a:85:a8:82:16:d1:fc:b4:28:20:39:a4:
                    b2:57:28:9b:4f:fb:71:e5:48:2e:08:5f:01:d5:38:
                    2f:7c:f9:2e:78:cb:61:e2:f4:76:36:f8:9b:aa:44:
                    65:a8:b6:e9:c6:cf:50:b6:75:22:37:03:69:f9:97:
                    0b:59:bc:35:0e:a8:45:1c:95:34:fc:54:5f:0d:cf:
                    97:d1:7e:1a:3d:e9:37:ce:bf:0f:c7:a6:40:dd:ce:
                    fb:b7:bf:c6:f7:28:40:0d:d5:b1:91:59:e5:df:14:
                    0e:48:31:9b:87:07:90:38:68:fa:fa:79:af:79:b5:
                    30:33:3e:00:a7:0a:1e:c4:e5:09:52:16:05:00:82:
                    f2:a2:4d:d6:40:71:3d:07:ce:2d:5a:32:41:fc:04:
                    c7:df:47:c1:bf:7e:8c:bd:d7:95:63:35:00:53:32:
                    37:19:67:ac:54:03:94:19:e5:ba:bb:46:4d:c7:45:
                    74:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2E:EC:0E:8D:57:C8:DC:55:45:AB:38:23:72:5F:5F:7D:36:C3:C0
            X509v3 Authority Key Identifier:
                keyid:19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:c0:a2:39:29:2b:8b:ac:ec:be:9d:27:90:ae:22:de:cd:0a:
         b0:3f:08:72:2d:3c:7f:1a:fb:19:94:25:13:0a:c1:97:88:f1:
         1f:33:b6:a5:28:6f:b3:9b:63:da:63:85:f7:19:60:9b:6e:fa:
         14:95:52:42:0a:e9:db:92:bc:c6:36:db:e3:12:7e:67:b0:25:
         57:60:2f:26:6e:39:e8:3a:8a:05:fd:13:2b:20:24:0d:fa:a4:
         20:0a:76:8c:07:67:cc:9e:60:07:1c:55:8f:17:5a:bc:08:e3:
         e3:31:9e:34:5c:2c:22:00:9f:34:ae:96:8f:ef:2b:c5:65:21:
         21:8b:b1:18:26:d7:48:12:13:36:87:08:a8:5b:39:64:3c:2f:
         39:0d:99:de:4d:77:01:37:e2:11:25:57:88:78:ec:d9:68:94:
         be:68:5b:d9:93:30:a7:94:a7:51:a5:1b:1f:aa:6b:73:0b:57:
         aa:21:d8:09:4e:cd:8a:05:72:66:7c:71:34:2d:df:4e:c7:ec:
         ad:97:fa:43:31:28:a3:54:07:22:b0:52:38:03:52:44:55:73:
         ac:ea:b9:f6:6b:2f:55:b6:8e:3e:2f:90:d8:03:04:f4:2b:18:
         94:3f:c4:1c:52:81:45:30:74:58:25:82:66:bb:5c:e0:7e:d8:
         d2:7b:8e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:09:15 2025 by rpki-client