Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
File:                     gnj0fexbetwgGJf5m8xuK_qI0BU.mft (raw, json)
Hash identifier:          w6c6Ke2yBEhlAQ03N9QuRlW2vINz7HzMB9PvCcLs2O0=
Subject key identifier:   3B:B2:44:6A:CD:21:F4:6B:3C:E3:2B:52:6B:0D:18:00:7E:83:64:1D
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       3FB5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
Manifest number:          3B42
Signing time:             Sat 18 Oct 2025 14:21:19 +0000
Manifest this update:     Sat 18 Oct 2025 14:21:18 +0000
Manifest next update:     Sat 25 Oct 2025 14:21:18 +0000
Files and hashes:         1: gnj0fexbetwgGJf5m8xuK_qI0BU.crl (hash: lSdn1+98Jfo9EpysDTDKNVOXaSbxbysdsyCUMHkSss8=)
                          2: F0F17BEC9D5911EEAA9F0413C4F9AE02.roa (hash: zIbTXKElzSRDJDgFmgpHOKMMizwQLMFjRvUcTHCmSxI=)
                          3: EF57185A9D5911EEAA9F0413C4F9AE02.roa (hash: +mgdTNP414SUTOGaWf8OsfORlNcz2M/R4gZld0HJ9Ck=)
                          4: F025BAB69D5911EEAA9F0413C4F9AE02.roa (hash: zGDGvlgT7VbRq78nqt2KCJawvdgk5RBzL4wyIDNIpkw=)
                          5: 9703DB3A870311F099FAB64CC4F9AE02.roa (hash: o3x3WNu8DVpOALptWI63rwh2Z21Ks2owpGrEUHSGlCk=)
                          6: AF4D576AC55E11E9A634E487C4F9AE02.roa (hash: TQSzjpxrOYYy8gpn8cpyl7UgdqE6NAtOL8QTPBk1Mrs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
                          rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:21:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16309 (0x3fb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E, serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: Oct 18 14:21:18 2025 GMT
            Not After : Oct 25 14:21:18 2025 GMT
        Subject: CN=68f3a25f-0041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e8:13:4e:7e:4c:cd:01:ad:f2:ab:48:11:5e:
                    a4:ad:46:70:51:78:40:c9:bc:91:ec:2d:4e:ad:d5:
                    4d:6e:d2:36:ec:c6:8b:28:23:4b:7f:55:8f:12:22:
                    0d:cb:31:78:db:2b:1c:35:f1:e9:1d:aa:7a:68:43:
                    7a:d3:19:10:14:df:3e:01:d1:5e:7c:04:bb:76:4b:
                    84:b1:2e:5a:04:52:69:1d:ea:9d:2a:01:9b:f6:81:
                    b8:dc:ae:01:9e:2d:24:45:79:59:e2:25:0a:85:d8:
                    e1:9d:0b:b4:3c:cb:91:de:25:53:7f:3c:38:a9:c9:
                    1c:76:a8:40:66:d8:74:03:89:da:b4:f4:31:c7:3d:
                    f7:2b:c3:76:ea:2b:43:4b:b9:99:6e:a8:a3:a5:59:
                    9a:7b:b8:e6:fe:be:54:1a:98:ac:b8:79:74:6f:af:
                    1e:c8:f1:33:af:92:a3:2b:71:0d:4a:22:5b:3b:5a:
                    4b:e9:5c:f3:b7:8f:2b:8b:45:02:61:d4:5b:03:3c:
                    7f:a9:8f:77:6b:8b:ef:e3:c7:6f:79:15:df:6c:6f:
                    c0:27:42:8a:1b:1d:54:2a:ee:e0:6a:3a:ee:c4:89:
                    a9:91:02:28:49:12:38:be:f4:5f:ab:a6:57:cb:d6:
                    dc:a2:10:91:78:b1:dc:58:f6:a2:c1:21:24:4b:81:
                    4e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B2:44:6A:CD:21:F4:6B:3C:E3:2B:52:6B:0D:18:00:7E:83:64:1D
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:29:69:8b:cd:54:ec:18:ee:33:b2:5b:8f:db:1c:8b:5c:6f:
         82:87:2d:a3:bb:cf:23:9b:87:df:d1:22:1e:7c:9d:1a:de:1e:
         8d:30:41:35:2e:55:b6:b7:5c:38:c2:26:68:69:2c:09:12:fd:
         39:6c:dd:85:6c:0b:0d:93:cc:52:e5:aa:d5:2c:bb:8c:f7:c2:
         e4:b0:cd:93:bc:ac:14:94:85:bd:31:7f:3e:b0:2f:38:1e:64:
         b8:da:59:e5:79:82:1d:c8:2c:c0:0a:14:5a:a9:c6:e4:3f:db:
         24:e6:0e:84:0f:1f:db:f4:af:32:a9:e4:4b:af:5e:8b:74:f4:
         2c:c1:df:bb:89:65:8e:20:f0:91:fe:0d:df:47:16:b9:37:93:
         67:b5:be:c2:7b:1f:67:2b:69:da:16:47:b7:0d:e4:19:37:5b:
         db:31:9b:c4:01:3c:3f:70:15:c0:f2:ce:96:53:d3:a9:ac:b6:
         7e:24:42:44:e0:30:13:fe:ae:ea:88:31:30:08:f0:8a:48:1d:
         d9:be:e7:4a:f0:e4:54:78:9d:dd:dc:a0:f3:0a:7f:3a:60:8f:
         f0:70:99:80:b4:57:5e:06:27:fa:b8:4a:8e:f5:87:e7:e1:99:
         70:8d:97:bd:65:1d:36:07:4e:a6:cd:ae:cd:47:cd:c3:b3:86:
         22:c7:70:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:26:02 2025 by rpki-client