Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
File:                     gqPk4CGF_7caxsaYwGdUjZzBhxA.mft (raw, json)
Hash identifier:          tXlb4u2n5zF0jekMvDU5krQ2FKhMZwZLYR/iEIPSUgI=
Subject key identifier:   B7:F6:8A:B8:16:C4:75:33:88:53:08:7B:D2:E3:86:5A:A9:6F:2D:F3
Authority key identifier: 82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10
Certificate issuer:       /CN=A91F33D6/serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710
Certificate serial:       06B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
Manifest number:          06A7
Signing time:             Sat 18 Oct 2025 23:44:35 +0000
Manifest this update:     Sat 18 Oct 2025 23:44:34 +0000
Manifest next update:     Sat 25 Oct 2025 23:44:34 +0000
Files and hashes:         1: gqPk4CGF_7caxsaYwGdUjZzBhxA.crl (hash: 10JtS3evqpfBbnZOZW/L7uobRXlXA1vP/Uc3mGhJzuw=)
                          2: 9C53117E83FB11EBB159507AC4F9AE02.roa (hash: vkyP11luhnXeWA23/INygAjf676dmOUmLr8+nJsgHpw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl
                          rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:44:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1716 (0x6b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F33D6, serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710
        Validity
            Not Before: Oct 18 23:44:34 2025 GMT
            Not After : Oct 25 23:44:34 2025 GMT
        Subject: CN=68f42663-5817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:41:65:06:74:59:6c:2a:eb:88:9c:b8:f8:61:
                    e9:e9:5d:b5:4c:a5:56:6e:8f:5c:95:df:fb:b6:14:
                    52:36:19:73:60:4e:12:50:3e:38:a1:0e:59:a5:79:
                    88:1e:cc:5a:ba:57:f8:8c:79:24:57:48:7e:aa:cf:
                    a7:62:a1:5b:6c:68:9a:dc:f2:7f:3a:84:bf:2b:2a:
                    3a:f0:e0:21:e1:1f:8b:7d:24:2b:c7:00:1e:50:ae:
                    6d:f1:14:99:33:c8:09:80:4d:ff:81:30:10:95:6e:
                    e2:a2:e5:ff:f4:5c:6a:c0:8d:43:06:75:29:87:e6:
                    3c:74:3c:08:1e:bc:40:3e:74:3e:31:f6:15:5a:bc:
                    39:dc:0c:6d:dc:23:53:54:b9:55:fe:39:b8:00:91:
                    c9:59:7d:9a:8e:e5:a5:be:32:e7:d0:c0:03:74:01:
                    b0:12:75:cf:56:cc:a1:ea:bf:f9:ed:4d:d6:62:09:
                    7c:88:c2:5a:d0:e0:1d:50:af:5d:82:f7:34:3a:b8:
                    44:5b:1d:56:6b:04:44:f9:03:6f:f7:b6:87:d3:99:
                    cd:7c:4e:2b:67:5e:e0:f7:6d:9c:d1:3e:d3:5d:95:
                    bc:4e:7b:3a:07:cb:aa:c1:d4:b1:e7:f8:b8:c9:6b:
                    3f:b1:48:89:fb:3a:01:90:6b:5b:cd:c0:3e:4b:8f:
                    7e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F6:8A:B8:16:C4:75:33:88:53:08:7B:D2:E3:86:5A:A9:6F:2D:F3
            X509v3 Authority Key Identifier:
                keyid:82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ec:4f:90:24:bf:38:81:ff:a0:e9:bf:79:47:84:67:80:8d:
         2c:98:71:2b:1d:16:87:9d:4c:10:df:2a:85:18:40:15:ee:a4:
         f3:5a:d4:04:51:b0:d4:9f:47:6c:96:aa:26:3a:eb:cc:0a:09:
         73:ac:c3:b3:bb:70:96:a1:7c:c1:bd:37:ed:56:24:6b:a8:1c:
         0c:0d:17:3d:05:d9:4b:3a:43:fe:e6:ab:9f:83:5f:31:f9:c8:
         88:54:aa:e2:8d:10:02:05:c2:6f:4f:7a:a2:5a:9f:80:39:6e:
         b4:2b:7a:7c:92:30:42:f6:d7:b6:37:b3:7a:74:31:4e:7c:75:
         69:a3:c8:03:02:b3:ff:ef:3e:f3:17:7f:18:4e:5a:46:ea:50:
         62:fd:56:7d:7b:88:eb:57:f3:b6:21:74:4e:e0:d0:97:80:22:
         be:ff:44:68:ef:e7:c1:06:3f:0b:53:b5:25:c6:34:dd:97:a5:
         4b:69:12:7f:c1:83:6c:2d:12:64:e1:17:b5:ed:d1:62:32:67:
         b8:a6:63:0e:34:7c:b4:89:66:99:6e:0f:09:72:e5:d0:62:e0:
         5d:36:86:c1:7b:5d:ad:fe:aa:99:39:ed:e1:9f:64:ac:f6:40:
         0d:e7:3e:fa:64:56:7b:f3:86:04:5f:f5:4e:8b:5c:1f:16:91:
         cf:63:a7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:23:48 2025 by rpki-client