Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
File:                     GvPInPFH8v61HarolX25nThyY7g.mft (raw, json)
Hash identifier:          Zod7QBZ+lEL42gLW0590Nc56GZDwRSiUzb0JNKETgXE=
Subject key identifier:   7C:6A:8A:E5:98:E1:D6:18:F3:45:77:D7:58:5A:89:51:A8:BA:28:6F
Authority key identifier: 1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8
Certificate issuer:       /CN=A91AD09B/serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8
Certificate serial:       019D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
Manifest number:          0192
Signing time:             Sun 19 Oct 2025 06:14:48 +0000
Manifest this update:     Sun 19 Oct 2025 06:14:47 +0000
Manifest next update:     Sun 26 Oct 2025 06:14:47 +0000
Files and hashes:         1: GvPInPFH8v61HarolX25nThyY7g.crl (hash: m0npofljYQLfHLn88AY6GgbJUkca1QJhpwNzqtZ0DM8=)
                          2: 3763B68C774C11EE81607E76C4F9AE02.roa (hash: UJJG1UL9HoDl6QIw7eUsq+CXxe1yKgi6+x82OgA5hEc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl
                          rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:14:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD09B, serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8
        Validity
            Not Before: Oct 19 06:14:47 2025 GMT
            Not After : Oct 26 06:14:47 2025 GMT
        Subject: CN=68f481d8-8e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:3c:63:fa:c0:0e:07:86:1b:21:5e:14:6a:
                    02:76:56:8a:0f:b6:e1:17:03:a1:55:ee:26:69:2b:
                    f0:e0:4f:3d:b7:3e:fa:98:46:39:db:a2:84:4c:13:
                    8b:8e:de:9f:41:21:80:27:5e:d8:02:b5:4a:18:40:
                    6e:25:91:af:4e:aa:a2:a9:d0:cd:8e:d4:4d:96:e2:
                    51:52:48:1d:a6:fd:0b:6b:9c:3a:ef:8c:9f:27:16:
                    12:ec:1d:eb:01:d8:f4:8e:f1:d8:5e:12:0a:d9:ab:
                    2a:5b:d5:79:5d:60:75:7e:e3:d0:9c:ea:1f:86:81:
                    eb:88:66:d0:53:69:ef:bd:8a:f6:f0:ce:1a:36:ed:
                    7c:e4:7f:7e:63:59:70:97:b9:f2:23:f2:ae:78:9c:
                    eb:39:81:0d:8c:0f:d1:2e:e5:20:a8:27:59:1c:d8:
                    29:d1:a1:65:9c:59:6f:0c:ed:ad:55:ac:4a:4c:77:
                    50:65:87:00:90:5c:ad:ab:35:4b:01:67:bc:e0:06:
                    93:ae:26:c4:9d:36:e7:f0:73:a8:ca:7d:dd:24:a4:
                    c4:af:b0:25:16:79:06:ff:7b:3d:2a:9a:bb:89:02:
                    c1:db:87:1d:8d:cb:03:e6:e2:7a:04:18:b0:ed:1f:
                    60:27:f2:47:38:58:8b:c6:8c:37:bf:6b:51:aa:87:
                    10:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6A:8A:E5:98:E1:D6:18:F3:45:77:D7:58:5A:89:51:A8:BA:28:6F
            X509v3 Authority Key Identifier:
                keyid:1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:80:c8:d1:0a:11:3c:3f:fc:6c:04:ad:36:c7:73:e8:48:cf:
         7e:71:c8:c6:a3:dc:f8:ec:19:77:ca:64:eb:2b:e3:bb:c3:1e:
         ae:28:cb:98:15:41:be:37:90:2b:cf:28:2b:91:cd:71:06:51:
         ca:72:70:0a:4d:c5:1f:72:c9:f0:77:27:b5:63:96:16:42:c3:
         b1:1a:89:d4:1f:f0:e2:66:4e:6e:36:ce:12:b2:f2:33:a1:1a:
         8f:48:24:3c:cd:ac:ab:38:f6:86:c2:31:d3:eb:bf:a9:b5:4b:
         3d:4d:cc:69:01:fd:cc:bc:03:4d:18:7c:ee:83:e0:ad:5b:9d:
         1c:d6:f3:ae:bd:26:96:dc:77:85:b2:4f:5a:d0:ef:8d:f7:c7:
         c2:fe:03:c7:26:6f:00:7b:76:9f:32:ba:43:a0:ec:c8:9d:78:
         b9:b5:9e:64:9a:0e:2c:13:70:09:3f:90:b9:bb:c8:78:55:60:
         74:92:86:1e:58:36:be:c8:38:3d:8f:82:be:f0:b1:06:4b:b9:
         d3:c9:d0:cc:44:a0:6c:00:bc:4f:49:9a:25:61:4a:10:9a:19:
         aa:03:fe:ce:34:99:73:e4:e4:45:24:0f:bb:47:2a:1b:4b:03:
         d9:df:c4:a9:a9:41:07:48:cf:95:98:f1:09:7e:c0:1f:8d:3b:
         49:db:d2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:27 2025 by rpki-client