Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft
File:                     GmByWuQEWJbjBAgwAyE-6pUmfs8.mft (raw, json)
Hash identifier:          xQW0WJ2QzAhO+ZZilaDc3/2TSXLwTOWGlG+iLUrXOIg=
Subject key identifier:   BF:A6:48:75:BF:93:D6:F8:6B:FD:33:80:50:6D:98:F6:48:36:5C:3B
Authority key identifier: 1A:60:72:5A:E4:04:58:96:E3:04:08:30:03:21:3E:EA:95:26:7E:CF
Certificate issuer:       /CN=A91BB35A/serialNumber=1A60725AE4045896E304083003213EEA95267ECF
Certificate serial:       0180
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmByWuQEWJbjBAgwAyE-6pUmfs8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft
Manifest number:          017D
Signing time:             Sat 23 Aug 2025 03:48:22 +0000
Manifest this update:     Sat 23 Aug 2025 03:48:22 +0000
Manifest next update:     Sat 30 Aug 2025 03:48:22 +0000
Files and hashes:         1: GmByWuQEWJbjBAgwAyE-6pUmfs8.crl (hash: mmqMLBkZBb7uAGnICdD3WyVhno13UK92LjjMzjEHRuc=)
                          2: 1779BD7C3B2311EE91010B3EC4F9AE02.roa (hash: ++SEuifHIWAk3FJLbuooJEG4UII9ZGtzJgkMFEUrXTc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.crl
                          rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmByWuQEWJbjBAgwAyE-6pUmfs8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB35A, serialNumber=1A60725AE4045896E304083003213EEA95267ECF
        Validity
            Not Before: Aug 23 03:48:22 2025 GMT
            Not After : Aug 30 03:48:22 2025 GMT
        Subject: CN=68a93a06-73f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1f:f5:5f:24:5b:ea:4d:84:b5:5c:41:48:e6:
                    02:53:7b:04:b4:0b:7c:46:6b:87:30:9e:e9:53:e9:
                    e6:c7:49:f5:03:fa:7c:70:62:aa:1a:22:d6:fb:85:
                    14:27:08:c6:96:9e:e0:93:03:c8:b9:94:7d:f1:5a:
                    0f:b2:fb:32:1c:cb:37:8b:b2:7d:e6:f7:56:f7:98:
                    6e:87:fd:3e:fd:cd:91:4d:11:3c:ac:49:9b:fc:42:
                    3e:49:93:26:b3:10:d2:a1:11:bc:b3:6b:fb:e7:5e:
                    f5:1f:2f:7a:9b:0f:b0:b2:3d:af:91:ff:f4:97:bd:
                    01:2b:73:01:14:39:a9:bb:0b:a4:04:fa:ab:f4:ee:
                    d4:5f:0d:78:15:8c:20:15:75:5f:19:37:d0:05:18:
                    99:73:cd:df:33:53:79:6c:c1:25:24:f1:27:88:89:
                    c8:c8:fc:8a:e1:73:a4:27:f2:17:25:09:85:a0:e0:
                    95:6a:02:0f:a9:57:39:5c:41:66:69:09:ab:52:8c:
                    f7:9f:c8:c6:aa:38:1d:71:6c:14:c8:d9:20:b3:e5:
                    f9:d4:1a:c5:27:1f:7f:f9:c9:b6:73:6f:1c:1a:2c:
                    f4:cd:aa:92:86:f1:3b:c1:7c:78:a0:7e:ec:8f:56:
                    f8:76:e6:b2:5d:0a:b9:ce:c4:ae:8d:a6:43:2e:06:
                    61:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A6:48:75:BF:93:D6:F8:6B:FD:33:80:50:6D:98:F6:48:36:5C:3B
            X509v3 Authority Key Identifier:
                keyid:1A:60:72:5A:E4:04:58:96:E3:04:08:30:03:21:3E:EA:95:26:7E:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmByWuQEWJbjBAgwAyE-6pUmfs8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:3d:71:80:3d:2c:f9:bc:1b:ef:54:e3:a6:66:30:24:bd:28:
         bc:3e:bc:2f:c7:8e:d7:84:09:79:9a:73:4b:a6:9b:ed:67:f5:
         01:cd:8d:dd:af:8a:7c:34:69:04:08:cb:f9:7a:fc:5e:a1:ae:
         11:ec:d8:08:9e:dc:9c:40:41:ff:29:c4:46:b7:99:96:86:60:
         9c:9e:31:2e:9c:37:8b:6e:eb:74:59:04:5f:a1:fc:8c:31:ac:
         e1:09:93:2c:1b:58:93:f4:7d:24:54:c2:ee:51:2d:54:b4:ab:
         ad:2c:b3:be:24:c5:41:96:a2:c1:9b:9b:47:71:4e:89:09:6b:
         10:62:d2:f5:a8:76:ca:d5:5c:ff:07:82:f1:f8:79:15:d1:4b:
         f0:57:67:0b:19:81:5a:9d:ed:30:cb:94:f8:cd:c8:24:22:76:
         bd:7f:23:a4:0a:9e:a5:88:aa:5e:05:27:fc:e5:bd:34:8f:c6:
         6f:fa:bb:87:0d:da:bf:c7:83:e1:ba:9d:84:51:6e:84:e8:bd:
         3d:b3:7c:49:82:a0:9b:c8:b9:b5:57:49:f3:e1:44:37:28:59:
         54:b8:56:53:d9:b0:e0:4d:75:b2:04:15:58:d8:5a:1a:d4:ab:
         83:b8:97:ef:98:47:1e:1f:b7:47:eb:86:39:7c:9d:7e:ad:82:
         45:9e:5d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:34:05 2025 by rpki-client