Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
File:                     gpROaqVxwOs14nkbwVlvdyd6cyQ.mft (raw, json)
Hash identifier:          fUSnL7Nxu5Fx2A+pCzbGFjfm0Idh8PyH3f44lOt2KgI=
Subject key identifier:   97:73:52:C2:8F:CA:0F:AF:3E:82:7A:F5:6E:B8:BF:50:E3:D4:86:76
Authority key identifier: 82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24
Certificate issuer:       /CN=A91DE9CC/serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324
Certificate serial:       022F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
Manifest number:          0228
Signing time:             Sun 19 Oct 2025 04:13:53 +0000
Manifest this update:     Sun 19 Oct 2025 04:13:52 +0000
Manifest next update:     Sun 26 Oct 2025 04:13:52 +0000
Files and hashes:         1: gpROaqVxwOs14nkbwVlvdyd6cyQ.crl (hash: DeEvAPDlTpjM4p8/Ev03CM8oSBvtcNmyNVMltScLASU=)
                          2: 429AFADCF25E11EE9E1B8A09C4F9AE02.roa (hash: 7FN0HyYzJH1Qv9Jl9oBRZAPnuS+2hOq+lQ7L65dqdMM=)
                          3: 5DB7C89AF25E11EE9239B009C4F9AE02.roa (hash: B1VfNamwZjoBuA0I3go0fA0eDoMIpEkKXlp9PXUA+js=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:13:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 559 (0x22f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE9CC, serialNumber=82944E6AA571C0EB35E2791BC1596F77277A7324
        Validity
            Not Before: Oct 19 04:13:52 2025 GMT
            Not After : Oct 26 04:13:52 2025 GMT
        Subject: CN=68f46580-f675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:96:60:35:80:81:e3:bb:67:13:17:f6:87:04:
                    e0:75:23:74:91:07:e5:61:7c:7e:41:d4:8d:3a:cf:
                    eb:fd:5a:79:35:04:38:29:c1:2d:19:a0:e4:d8:92:
                    b3:9e:3d:52:86:29:c6:96:cf:84:91:a1:33:88:c8:
                    03:75:c3:fb:d7:09:b2:d8:d2:5d:35:d3:f1:24:41:
                    b3:bd:b5:40:44:16:6e:19:c8:eb:43:82:68:2d:73:
                    a1:8f:f1:2b:2b:88:24:0d:49:b1:7c:73:36:63:9e:
                    4d:5e:42:91:86:2e:b5:02:a0:7d:d4:c5:90:d5:c6:
                    95:59:cc:d6:97:9f:ff:44:0f:c4:a6:52:3d:73:64:
                    4b:85:de:e3:5b:72:60:18:e9:a5:e2:e3:09:cd:11:
                    b5:87:43:b1:51:49:13:55:bd:34:ab:a1:c3:30:f0:
                    37:e5:22:7f:b8:a8:5e:9e:ee:ca:79:ed:2f:77:84:
                    73:70:5d:ac:bd:6d:9b:66:56:97:16:33:6f:fe:a2:
                    98:c8:fb:5b:f5:0d:07:ca:6e:85:21:44:7b:ee:3b:
                    c0:c0:f5:68:0b:c5:bc:e6:5e:44:e7:2e:a0:f9:65:
                    83:d3:d7:2b:26:41:40:b6:9e:cf:7b:ba:6c:75:96:
                    5d:b3:bd:9a:4c:bd:f7:06:4b:86:91:2d:cd:0c:a8:
                    22:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:73:52:C2:8F:CA:0F:AF:3E:82:7A:F5:6E:B8:BF:50:E3:D4:86:76
            X509v3 Authority Key Identifier:
                keyid:82:94:4E:6A:A5:71:C0:EB:35:E2:79:1B:C1:59:6F:77:27:7A:73:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gpROaqVxwOs14nkbwVlvdyd6cyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE9CC/60B447BA5F4A11EDAD68657EC4F9AE02/gpROaqVxwOs14nkbwVlvdyd6cyQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:03:da:8f:cd:b8:a2:9e:f2:09:dc:df:fc:c4:c2:b8:3b:9a:
         ab:7d:50:94:cb:7c:7c:b9:ec:55:2c:44:0d:29:44:42:68:09:
         c8:4b:f1:e3:4c:ec:40:57:4c:b3:3a:d4:2c:5e:f6:72:10:30:
         76:fb:a7:17:92:73:2a:e2:1c:be:7d:39:51:2f:09:07:f4:d3:
         ac:c8:e5:90:53:47:00:c1:17:31:0e:26:36:a7:52:57:93:24:
         cb:c4:22:00:94:49:4e:5a:ba:43:e4:74:b0:68:79:04:df:db:
         42:6a:6e:ea:d5:87:5b:f5:7c:df:9b:0c:71:80:d4:0e:d7:1a:
         b2:79:26:22:3a:2a:7c:f2:74:2b:b3:72:7f:22:57:51:c0:91:
         58:d6:6b:7b:74:31:96:2f:99:10:4c:b7:84:06:ee:32:2c:74:
         81:13:9a:bc:af:68:a7:63:ea:f3:f4:92:38:5f:9c:a6:7f:78:
         a9:eb:b4:ac:8f:7c:83:a8:f3:1c:b9:a0:ac:b2:c3:45:c4:af:
         d5:82:17:f0:e8:57:89:b2:84:0c:48:8f:58:3e:32:91:ef:fd:
         cd:a4:14:9c:0d:1f:de:44:02:54:0f:3b:0a:48:e6:45:9d:3b:
         5d:1e:0d:a2:c4:6b:37:de:97:2f:94:c6:a1:fb:7b:59:71:21:
         97:e8:a7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:34:43 2025 by rpki-client