Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
File:                     G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft (raw, json)
Hash identifier:          imWagN9zDPkAtX7R9/EbnaJrza84JjQ4ZMBzGMQg3XU=
Subject key identifier:   9C:3B:2A:81:7D:AC:7D:FD:70:5C:F3:BD:32:2A:BC:58:7A:C8:87:BD
Authority key identifier: 1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40
Certificate issuer:       /CN=A91DF352/serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
Manifest number:          50
Signing time:             Sun 19 Oct 2025 10:39:13 +0000
Manifest this update:     Sun 19 Oct 2025 10:39:12 +0000
Manifest next update:     Sun 26 Oct 2025 10:39:12 +0000
Files and hashes:         1: G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl (hash: rxYl0DVSHPTjZA/OQOp7+ZlMmWr7eYuI/eAMSmRHMe8=)
                          2: BA3FE218315611F0951A037DC4F9AE02.roa (hash: qVVzOp455rcs6g+f/MmhYpdl/2N+Lt1OuCuyTK7KoGY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl
                          rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:39:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF352, serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40
        Validity
            Not Before: Oct 19 10:39:12 2025 GMT
            Not After : Oct 26 10:39:12 2025 GMT
        Subject: CN=68f4bfd0-9e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:83:07:ea:fa:bd:71:bf:02:79:7e:d4:9d:
                    38:f0:ea:67:85:4e:3e:40:6c:dd:1e:3d:4c:7a:f3:
                    fb:28:90:2f:67:21:a2:1b:fe:d6:a4:8d:bf:96:74:
                    e6:e7:c3:a6:d3:33:82:e2:e4:24:44:6d:6f:5b:94:
                    f4:18:1a:29:23:13:f2:60:b7:82:33:24:05:4c:bb:
                    45:8f:9d:62:26:f4:ad:f4:9c:6e:5d:23:84:45:4b:
                    9a:00:0d:38:75:f8:52:99:31:fd:98:0b:c5:5a:57:
                    66:6d:52:2e:b5:0f:3b:01:c3:b6:17:a7:3c:11:28:
                    4f:26:54:e1:b1:aa:b3:7d:3a:bf:df:dd:48:05:3c:
                    b4:ca:5a:c0:3f:51:2b:48:a5:13:8d:fc:0e:af:3f:
                    c2:7e:d5:53:40:90:3b:22:46:a3:e8:d4:dc:7d:b0:
                    9b:2a:fe:15:60:dd:17:6c:d1:db:c8:77:6e:ea:52:
                    b2:14:e8:97:5b:ed:c1:17:1c:95:6a:ae:4f:39:9a:
                    34:ab:f5:c4:bb:8b:2d:93:f7:05:c0:56:60:25:b8:
                    4f:a0:35:8b:7f:fa:e1:5b:97:61:9e:f3:a2:92:94:
                    31:31:86:16:20:07:8b:52:c0:d4:69:d8:d6:3b:79:
                    98:c9:39:e6:d5:a3:c5:1c:9c:fc:0d:2d:3e:94:29:
                    34:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3B:2A:81:7D:AC:7D:FD:70:5C:F3:BD:32:2A:BC:58:7A:C8:87:BD
            X509v3 Authority Key Identifier:
                keyid:1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:7b:8a:62:2d:f9:11:6f:b2:64:75:ec:9e:45:8e:49:b8:a4:
         10:7e:3e:5c:48:b8:8e:1a:2c:6f:94:d9:66:c7:d2:d1:38:97:
         be:02:c4:82:38:8c:f5:1c:d6:f5:54:06:4d:11:76:e7:5b:14:
         e1:d2:cd:f3:15:78:28:9b:03:06:79:52:c4:68:3f:a6:ac:89:
         c7:44:6c:dd:33:73:01:f8:8e:5c:1b:c0:2b:1d:e2:af:8e:cc:
         7f:ba:d4:eb:f2:09:7f:80:5b:c3:72:73:f7:3d:5a:2f:bb:b8:
         36:e4:b9:9d:98:25:94:bf:6f:71:25:c0:f4:82:a0:ff:cc:19:
         41:8f:17:fa:31:80:b0:9c:98:91:74:75:ac:6b:78:7c:8c:5a:
         be:55:46:df:5c:9e:68:87:c7:a2:0d:8d:c0:59:2f:8e:97:95:
         fd:2f:55:7a:1a:a1:b6:ad:fb:f2:e1:bf:28:c5:db:5c:19:2c:
         ea:b0:dc:42:f5:4b:7d:dc:3a:84:d9:4d:87:49:38:df:d5:00:
         2e:29:bd:45:3a:06:b6:20:aa:5c:35:38:df:cb:af:ef:b8:0c:
         7f:13:85:39:01:46:19:3f:08:42:d6:ed:4b:9c:37:8f:54:44:
         0e:54:4f:a4:61:8a:c9:db:8b:69:fb:7d:b4:89:6c:7f:6d:dc:
         7f:d0:19:9f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
RjM1MjExMC8GA1UEBRMoMUJBNUFDRkU0RUNFOTlFQUJCNkU1NDE0NjUzMkZEMTM3
MzVDRUY0MDAeFw0yNTEwMTkxMDM5MTJaFw0yNTEwMjYxMDM5MTJaMBgxFjAUBgNV
BAMTDTY4ZjRiZmQwLTllNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC1LoMH6vq9cb8CeX7UnTjw6meFTj5AbN0ePUx68/sokC9nIaIb/takjb+WdObn
w6bTM4Li5CREbW9blPQYGikjE/Jgt4IzJAVMu0WPnWIm9K30nG5dI4RFS5oADTh1
+FKZMf2YC8VaV2ZtUi61DzsBw7YXpzwRKE8mVOGxqrN9Or/f3UgFPLTKWsA/UStI
pRON/A6vP8J+1VNAkDsiRqPo1Nx9sJsq/hVg3Rds0dvId27qUrIU6Jdb7cEXHJVq
rk85mjSr9cS7iy2T9wXAVmAluE+gNYt/+uFbl2Ge86KSlDExhhYgB4tSwNRp2NY7
eZjJOebVo8UcnPwNLT6UKTR9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnDsqgX2s
ff1wXPO9Miq8WHrIh70wHwYDVR0jBBgwFoAUG6Ws/k7Omeq7blQUZTL9E3Nc70Aw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMzUyLzgyOTM4MDQ2MzE1
NTExRjBBNzJGQkY1QkM0RjlBRTAyL0c2V3NfazdPbWVxN2JsUVVaVEw5RTNOYzcw
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRzZXc19rN09tZXE3YmxRVVpUTDlFM05jNzBBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG
MzUyLzgyOTM4MDQ2MzE1NTExRjBBNzJGQkY1QkM0RjlBRTAyL0c2V3NfazdPbWVx
N2JsUVVaVEw5RTNOYzcwQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAIJ7imIt+RFvsmR17J5Fjkm4pBB+PlxIuI4aLG+U2WbH0tE4l74CxII4
jPUc1vVUBk0RdudbFOHSzfMVeCibAwZ5UsRoP6asicdEbN0zcwH4jlwbwCsd4q+O
zH+61OvyCX+AW8Nyc/c9Wi+7uDbkuZ2YJZS/b3ElwPSCoP/MGUGPF/oxgLCcmJF0
daxreHyMWr5VRt9cnmiHx6INjcBZL46Xlf0vVXoaobat+/LhvyjF21wZLOqw3EL1
S33cOoTZTYdJON/VAC4pvUU6BrYgqlw1ON/Lr++4DH8ThTkBRhk/CELW7UucN49U
RA5UT6Rhisnbi2n7fbSJbH9t3H/QGZ8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:46:14 2025 by rpki-client