Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
File:                     GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft (raw, json)
Hash identifier:          pFDHOeFGUg+gMbWp2QoFZbE7DtuMLSkIbRsAka13jWs=
Subject key identifier:   7D:D8:B0:9E:20:CF:A6:86:FE:98:66:8D:65:74:E8:AE:7A:45:44:3C
Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B
Certificate issuer:       /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B
Certificate serial:       06F5
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
Manifest number:          06E7
Signing time:             Mon 20 Oct 2025 21:27:52 +0000
Manifest this update:     Mon 20 Oct 2025 21:27:52 +0000
Manifest next update:     Mon 27 Oct 2025 21:27:52 +0000
Files and hashes:         1: GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl (hash: 1XJwmA32tZgSA3ohenb/d1JPcmF0HeyEkeRiTJVBU7g=)
                          2: 48D65BC2D28F11EB9F83683DC4F9AE02.roa (hash: 8hBGvOyNwxB7qMibVDGpuRU5HevQ+Tcv9ZjJM79y8+w=)
                          3: 00756F7E63F011EC987F5B19C4F9AE02.roa (hash: s8i5IxWnvTImsz9H5D4MuEQAm14mPHlkRay9ZZj+Qsc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl
                          rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1781 (0x6f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCB6, serialNumber=18DC531D44F05962E97F23845736141D3E02681B
        Validity
            Not Before: Oct 20 21:27:52 2025 GMT
            Not After : Oct 27 21:27:52 2025 GMT
        Subject: CN=68f6a958-e719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d5:14:80:7d:17:d9:9b:3f:25:0a:57:e5:b2:
                    fe:eb:54:85:0b:8c:f8:b8:0a:ff:1c:2a:90:f1:85:
                    0e:7e:d1:f5:cc:29:2e:19:e2:a4:2f:0e:c5:bb:fe:
                    cf:e1:8f:09:79:e8:fd:cd:72:e7:fe:3e:88:fd:54:
                    f2:ba:07:06:55:c8:be:1b:2b:44:23:b2:5f:b7:2a:
                    be:7c:e4:00:d7:27:77:d5:08:ca:a2:8e:9f:c6:e6:
                    31:cb:6a:ef:23:43:95:05:d2:36:9e:71:52:46:fe:
                    44:3d:cf:72:67:7d:79:0c:45:f4:7f:39:05:3f:66:
                    6c:9d:03:75:b7:0c:6a:95:0a:60:fc:2a:57:4b:33:
                    e9:3f:26:b6:ff:1e:d3:91:6e:22:f8:2c:c3:47:a3:
                    61:98:18:0b:c3:19:13:6f:11:7e:1a:b5:da:9c:4a:
                    85:64:17:c4:d5:72:3c:21:13:b4:46:ee:49:10:f6:
                    a4:ab:a9:2a:b5:fa:91:ee:c0:90:de:a5:a0:6c:49:
                    8f:4b:24:cc:ca:2c:78:60:fb:ab:9e:af:5e:5c:86:
                    4a:e0:08:58:10:1f:6d:27:44:0f:ad:06:69:1e:e6:
                    c5:42:ae:c9:df:75:4f:39:34:d6:24:02:4d:c6:b2:
                    8d:e1:e1:45:0a:e6:0d:4f:16:30:a9:63:64:8b:7f:
                    46:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D8:B0:9E:20:CF:A6:86:FE:98:66:8D:65:74:E8:AE:7A:45:44:3C
            X509v3 Authority Key Identifier:
                keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:46:6d:0e:5c:aa:7d:8a:eb:36:85:ba:da:72:fb:d6:6d:48:
         eb:ec:e2:97:e6:e3:94:7b:7b:d0:7d:b6:51:44:e1:02:ef:61:
         1f:f0:e4:fa:39:53:64:22:ea:bf:2d:38:fb:62:c9:40:ca:62:
         96:4d:6a:9d:2c:8b:d0:a3:97:0e:8b:44:d2:6c:9f:b5:8f:9c:
         52:56:5b:7e:9b:4e:a5:3a:49:5d:c0:f3:b0:b0:66:8d:92:1c:
         f2:5f:32:20:6e:f4:cd:d3:34:d7:b6:f7:31:48:4f:1e:1b:30:
         f5:5f:a7:29:a6:01:cb:11:a4:a5:de:57:00:68:55:c4:80:50:
         56:a9:46:fa:96:7a:26:fe:52:18:21:71:94:0e:e5:56:21:a3:
         e1:ce:06:43:bc:6d:fa:0d:ad:f8:59:dc:3b:42:4e:a5:ff:3c:
         25:90:24:16:8b:90:d8:a8:da:db:4c:dd:fc:b6:06:8d:f1:59:
         e5:0f:70:26:5e:41:01:90:b7:16:0d:ef:74:f0:72:fa:d0:81:
         79:73:1d:0e:7b:5d:0b:4f:b4:c2:29:ca:ca:38:03:02:9e:44:
         80:b6:73:24:8e:f5:8f:1c:48:34:4f:7b:0b:d9:0d:4b:b4:83:
         5a:35:b6:1a:97:cd:a9:7b:f8:e9:24:a6:0d:05:ed:ee:a9:82:
         64:67:ea:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:01:59 2025 by rpki-client