Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
File:                     gpROaqVxwOs14nkbwVlvdyd6cyQ.mft (raw, json)
Hash identifier:          s0JVE5Cz4x9VCWoPABT512hUsDc9aIM9NjeSyftwrQM=
Subject key identifier:   D8:63:C5:BC:E4:0D:AF:4B:9F:DA:BC:DF:4E:7C:69:C7:9F:A8:C2:A4
Authority key identifier: 82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24
Certificate issuer:       /CN=A91DE9CC/serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324
Certificate serial:       0212
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
Manifest number:          020B
Signing time:             Sat 23 Aug 2025 02:20:24 +0000
Manifest this update:     Sat 23 Aug 2025 02:20:23 +0000
Manifest next update:     Sat 30 Aug 2025 02:20:23 +0000
Files and hashes:         1: gpROaqVxwOs14nkbwVlvdyd6cyQ.crl (hash: X5KcG5HqeqSc+KF+hHEqI5FvkN76hU+EvdkiWP39Cxg=)
                          2: 429AFADCF25E11EE9E1B8A09C4F9AE02.roa (hash: 7FN0HyYzJH1Qv9Jl9oBRZAPnuS+2hOq+lQ7L65dqdMM=)
                          3: 5DB7C89AF25E11EE9239B009C4F9AE02.roa (hash: B1VfNamwZjoBuA0I3go0fA0eDoMIpEkKXlp9PXUA+js=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 02:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 530 (0x212)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE9CC, serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324
        Validity
            Not Before: Aug 23 02:20:23 2025 GMT
            Not After : Aug 30 02:20:23 2025 GMT
        Subject: CN=68a92567-f401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:98:1f:bd:97:eb:60:04:ac:94:94:00:fc:f0:
                    fd:31:cf:bd:a5:c6:7f:90:f3:e8:fa:73:e3:d0:a9:
                    e0:06:e1:53:a2:05:82:99:52:cb:49:89:b0:53:f5:
                    fa:72:dd:44:bd:ac:58:4d:6e:24:3c:4c:39:14:6c:
                    52:89:25:4f:9a:82:6c:62:dc:f7:3d:a7:e0:8c:46:
                    d9:7c:3b:88:d9:74:50:4e:6a:39:d9:35:9c:cb:e6:
                    5e:9f:1a:d9:67:72:d5:43:9e:1c:48:97:b8:1a:9c:
                    00:cf:23:22:f5:1a:8e:78:78:d0:ad:67:27:e3:23:
                    ec:6d:f4:63:dd:db:15:e8:c4:2f:d9:1f:6e:d4:36:
                    f5:e6:43:c5:2e:34:dc:36:59:97:71:fc:e9:0c:6c:
                    d8:c0:29:d1:2a:b1:0d:03:5e:48:fc:60:d9:a9:48:
                    bc:9e:d8:a2:eb:39:e6:c4:1f:14:07:b4:eb:38:41:
                    5e:fe:43:a9:fa:a9:28:f4:2d:db:6d:d9:10:91:25:
                    e6:08:b9:cb:00:0b:67:04:b7:f1:38:bf:26:ff:63:
                    a7:33:40:f9:13:ea:38:3e:e1:0d:11:35:69:3f:bb:
                    70:95:a9:21:88:0d:bc:76:d5:9e:bb:ee:5d:2a:5c:
                    df:12:81:b3:c9:48:c2:2d:ce:6b:5c:b9:34:3e:72:
                    cc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:63:C5:BC:E4:0D:AF:4B:9F:DA:BC:DF:4E:7C:69:C7:9F:A8:C2:A4
            X509v3 Authority Key Identifier:
                keyid:82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:8b:5f:d2:e8:3e:10:39:2c:9d:f2:ed:2a:ab:81:1e:84:e4:
         4b:aa:ac:5f:59:67:a6:ca:5b:c4:4d:6a:0b:86:76:c5:62:3c:
         95:b1:e7:5b:c5:50:ad:ca:1b:8e:50:db:d8:8e:b3:71:f9:93:
         9d:58:94:46:8c:5b:8b:3b:dd:35:56:63:e8:33:ec:00:0d:9c:
         1e:76:1d:61:29:8d:dc:06:60:ad:db:bf:af:80:04:f7:14:88:
         fd:8d:ec:a9:5a:c7:74:4f:b7:57:99:8e:1f:16:f3:32:02:ad:
         2a:12:b7:c5:99:c8:7d:f7:41:bd:d6:dd:a8:a4:9e:40:90:23:
         ad:cd:0c:f5:17:f1:fc:80:b3:58:92:35:4f:1b:8e:a6:40:fc:
         e8:0a:e2:73:11:7b:90:44:e7:ea:6d:76:51:1d:4b:f7:1e:5a:
         39:c6:bc:7c:a1:31:81:fc:d4:4b:c2:3f:7a:5c:a3:37:1a:8e:
         7d:8a:37:68:9c:46:85:c6:46:a0:46:d8:5c:c1:ac:5e:21:f8:
         02:4a:9a:ad:f3:e5:37:f4:ca:b5:04:7a:ec:eb:bb:77:bb:36:
         df:c4:8a:3c:a1:e0:a6:14:41:20:e6:37:bc:c6:07:28:4f:1b:
         24:00:67:95:d8:ad:3f:5e:46:b9:21:2c:8b:65:34:cd:83:4f:
         d4:6b:90:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:39:01 2025 by rpki-client