Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft
File:                     Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft (raw, json)
Hash identifier:          NjduGqYQ8fYOFzkeIQ0xP9mNDodPIcffD/sQF2yFPho=
Subject key identifier:   C6:76:D7:4B:53:CB:F6:F9:EC:09:A6:76:53:99:FB:F9:8F:ED:65:4D
Authority key identifier: 1A:0D:0B:FA:19:19:11:F8:55:B5:BA:BD:FA:03:B9:C0:7F:DD:22:82
Certificate issuer:       /CN=A91D3834/serialNumber=1A0D0BFA191911F855B5BABDFA03B9C07FDD2282
Certificate serial:       0782
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft
Manifest number:          076F
Signing time:             Sat 18 Oct 2025 23:00:55 +0000
Manifest this update:     Sat 18 Oct 2025 23:00:55 +0000
Manifest next update:     Sat 25 Oct 2025 23:00:55 +0000
Files and hashes:         1: Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl (hash: QnjsnKee65tmqmUj62j2WbdAL1EtUqTnGhq86XZpuRg=)
                          2: F26505A6A7EA11EF8CBCCF2CC4F9AE02.roa (hash: EkwWJK2JMsgrSqPZGShXj+awl3UUP/bSxj5kv4pCabE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl
                          rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1922 (0x782)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3834, serialNumber=1A0D0BFA191911F855B5BABDFA03B9C07FDD2282
        Validity
            Not Before: Oct 18 23:00:55 2025 GMT
            Not After : Oct 25 23:00:55 2025 GMT
        Subject: CN=68f41c27-0576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:85:1c:9c:50:7f:c6:a3:b0:1d:22:38:a0:c3:
                    47:eb:32:fd:3f:16:17:68:e8:3d:90:cf:8e:a7:f8:
                    59:80:be:b2:88:fa:53:c3:fd:c6:5e:cb:09:58:04:
                    f5:4f:c1:f0:fc:27:72:e8:1e:37:c1:12:06:4d:19:
                    d9:07:49:e9:3c:10:b8:e0:8f:3c:c7:8f:b7:d0:1a:
                    dd:68:1e:13:f1:fb:49:8e:9d:0c:c2:be:ca:9f:d6:
                    54:ab:1f:65:53:77:e6:e6:06:f7:8c:e9:80:a9:a0:
                    78:6f:b6:39:91:4a:24:b2:a9:be:c8:1c:5f:ec:f4:
                    a6:91:3c:39:27:3e:f1:aa:5d:b1:f4:b2:b1:4f:cc:
                    a2:68:62:d9:49:a2:88:57:8a:d8:8b:d5:13:b2:0f:
                    63:d0:26:cf:c5:08:a6:7f:ec:cf:a8:da:c1:ea:3c:
                    95:7d:a8:7f:db:1e:23:9c:7d:62:c2:55:9d:26:ae:
                    9d:88:03:7d:24:df:5c:6a:b6:80:eb:8c:f8:6a:5b:
                    b3:46:b2:95:8c:70:b2:d5:77:43:01:6a:cd:0d:45:
                    61:07:54:6a:fb:d0:c7:44:38:c9:a6:b3:d0:4e:09:
                    cf:33:c8:de:3c:ba:09:d3:ad:b7:3f:7a:03:62:27:
                    c3:0a:f4:64:32:7f:4e:9a:c4:98:b9:74:5c:c0:8f:
                    45:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:76:D7:4B:53:CB:F6:F9:EC:09:A6:76:53:99:FB:F9:8F:ED:65:4D
            X509v3 Authority Key Identifier:
                keyid:1A:0D:0B:FA:19:19:11:F8:55:B5:BA:BD:FA:03:B9:C0:7F:DD:22:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:53:ae:16:75:98:6e:40:e9:ee:0f:bb:c0:59:d9:12:96:dd:
         63:e3:ac:3c:60:b4:e6:2f:b9:e1:d2:6d:86:85:5c:93:70:50:
         86:9b:88:b4:59:87:10:3f:e3:a0:09:63:03:09:88:df:55:bd:
         a5:77:4e:e2:02:cf:0d:43:cf:e6:85:80:20:36:83:b1:b2:e2:
         a2:fc:ff:5c:4b:5d:9d:f2:a5:c3:b0:94:50:ac:5b:cd:4d:c1:
         88:2f:36:8b:2c:0e:4d:03:f3:50:81:70:01:70:3a:ec:4b:4f:
         6f:69:2f:4f:91:4d:ee:8b:64:c3:ee:0e:99:2a:2b:72:e3:d6:
         30:f6:d6:05:bb:29:fa:12:d2:b9:69:d9:09:bd:32:76:59:e8:
         b1:91:8c:08:f3:79:3f:59:59:6e:80:55:d9:89:a8:dd:29:78:
         54:9d:8d:12:8f:bf:6e:29:4e:c8:8c:8d:e3:2b:2e:29:ef:75:
         74:9d:10:86:61:18:2c:7b:dc:88:5e:8c:cb:bd:31:13:61:72:
         7a:6d:64:0c:41:62:f4:f6:4f:38:19:e1:9c:af:7c:1e:6b:15:
         f4:40:ae:49:74:5f:c7:00:f4:b0:33:76:a0:31:68:f1:ab:63:
         df:0c:b0:35:af:95:2b:d0:9b:62:e4:78:a0:87:e5:31:73:82:
         54:c5:da:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:50 2025 by rpki-client