Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
File:                     gyzAVuI-OIrjeBpSC92RFpY25Zs.mft (raw, json)
Hash identifier:          yIrUmw+62iJcfoONGMKWX4ppgeazFvQ7zEqmZqBJ1tk=
Subject key identifier:   47:29:03:A4:C2:8E:FF:2C:BB:36:DE:8E:98:C9:5A:B1:F2:EC:46:C0
Authority key identifier: 83:2C:C0:56:E2:3E:38:8A:E3:78:1A:52:0B:DD:91:16:96:36:E5:9B
Certificate issuer:       /CN=A91F1029/serialNumber=832CC056E23E388AE3781A520BDD91169636E59B
Certificate serial:       0762
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
Manifest number:          075C
Signing time:             Fri 22 Aug 2025 21:47:15 +0000
Manifest this update:     Fri 22 Aug 2025 21:47:14 +0000
Manifest next update:     Fri 29 Aug 2025 21:47:14 +0000
Files and hashes:         1: gyzAVuI-OIrjeBpSC92RFpY25Zs.crl (hash: 6RRlQiBmrhKA0sqSoA/yVc5+JBVGHvSDlnK2bxNPEBM=)
                          2: B2790B3C2FB111EB89A04D37C4F9AE02.roa (hash: cbi8nIiFu7yZyu87usC4sqYN/jQpg6I6lG7FiVSdUVI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.crl
                          rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1890 (0x762)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1029, serialNumber=832CC056E23E388AE3781A520BDD91169636E59B
        Validity
            Not Before: Aug 22 21:47:14 2025 GMT
            Not After : Aug 29 21:47:14 2025 GMT
        Subject: CN=68a8e563-c87a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:65:96:ac:5c:7b:60:55:21:d7:e4:62:b1:0e:
                    73:db:c8:1b:e5:08:36:08:42:ae:0d:67:91:00:a3:
                    20:98:ac:6c:66:c4:cc:71:1a:21:65:b8:f9:66:99:
                    2e:a0:4c:c9:0c:57:8f:a6:28:5f:09:60:70:3d:76:
                    38:2e:bd:83:b7:29:ce:cc:b3:ee:e0:2a:3a:e3:b3:
                    b2:67:06:f0:69:75:33:3f:ea:16:88:63:47:2f:df:
                    48:cd:59:0c:b0:a2:4b:58:fb:e5:6a:99:7f:84:07:
                    15:50:00:dc:74:1a:c9:a3:88:c3:22:d4:ea:3f:d0:
                    9e:f7:e7:d0:55:5e:9a:0c:0d:f6:9d:e6:75:f0:1a:
                    ae:19:f9:64:8f:53:94:75:a0:88:34:ba:fe:b1:d8:
                    b8:a7:99:eb:9e:aa:6e:65:f2:d7:48:7f:0f:30:5c:
                    cf:6a:8c:48:45:43:5b:66:59:6c:52:14:e4:75:f7:
                    8d:2a:1c:af:33:01:61:02:a1:4f:17:27:5d:4e:9f:
                    81:f7:7b:3e:60:6e:28:01:02:c9:d6:a1:d7:20:0b:
                    b5:61:be:04:b3:51:07:3c:76:81:27:81:8c:eb:56:
                    91:89:7b:3f:1c:46:a7:4a:75:81:b6:b8:84:6c:de:
                    5e:9b:a2:43:ba:fd:8f:54:17:44:48:14:e0:fa:d2:
                    6c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:29:03:A4:C2:8E:FF:2C:BB:36:DE:8E:98:C9:5A:B1:F2:EC:46:C0
            X509v3 Authority Key Identifier:
                keyid:83:2C:C0:56:E2:3E:38:8A:E3:78:1A:52:0B:DD:91:16:96:36:E5:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:56:e2:1d:8e:08:49:cf:b6:3e:d5:0d:2c:f3:00:7f:f9:8a:
         07:9e:fe:69:06:35:f3:ae:0e:a1:ee:dc:23:83:27:9c:25:6d:
         88:44:6b:bc:a2:0a:41:c9:0a:57:c4:dc:41:36:fa:f2:7e:22:
         ae:21:c6:e3:4b:5e:d1:9e:87:3a:cc:1d:42:c1:09:dd:c5:b2:
         c4:e6:50:88:88:6d:75:4d:d7:ad:38:79:28:8e:9b:fc:0b:b7:
         c4:f6:6c:28:ea:e4:52:95:be:ae:58:22:e0:ac:8b:8d:22:2e:
         62:b1:ea:fc:65:2a:36:4a:29:f6:46:1f:63:84:49:fe:d8:34:
         0c:16:d2:82:ed:6c:31:37:5c:0e:d6:c7:65:1e:05:9b:68:49:
         b0:99:ce:65:3e:2f:18:ab:ff:7b:79:fc:77:2f:6e:0a:17:88:
         25:a4:8a:d9:af:61:ba:5b:9f:5c:9c:f3:90:2d:ce:59:c0:7c:
         fb:f3:51:60:6c:27:ef:f3:c7:53:0e:d8:36:ea:8f:b7:51:d0:
         38:74:86:75:1d:69:f7:40:80:e9:1a:33:8e:9f:97:c5:50:3f:
         34:a3:56:f6:32:09:45:08:09:b0:61:cd:a6:89:f1:dc:07:bb:
         fc:15:f2:d6:56:26:a4:03:a6:b5:1a:a9:07:39:9e:f3:fd:0a:
         16:96:f6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:36:12 2025 by rpki-client