Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
File:                     4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft (raw, json)
Hash identifier:          dLdsc+fPQMm7gHqSPJfnKrdrhbTPoSLrnxBjoqRCctA=
Subject key identifier:   13:85:F7:CD:48:75:75:C0:65:5D:B8:07:C4:BA:2B:E1:42:6C:80:14
Authority key identifier: E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62
Certificate issuer:       /CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162
Certificate serial:       0139
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
Manifest number:          0130
Signing time:             Sun 19 Oct 2025 07:28:09 +0000
Manifest this update:     Sun 19 Oct 2025 07:28:08 +0000
Manifest next update:     Sun 26 Oct 2025 07:28:08 +0000
Files and hashes:         1: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl (hash: LF/7VhK/Dv/WvUyEbXstxH4OWWFdzkghgluF/tqPn9E=)
                          2: DAEB24B0176111EFAB2AD122C4F9AE02.roa (hash: Sbd7uixAB+aEWkmSGOrUVMGizlHems1ClmWbyRlTiKs=)
                          3: A475B3E000B511EF96C1B911C4F9AE02.roa (hash: dfJCTgGMLuVcX+tEuN4HdomKZZyzPfpEj+AQkrGQApI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl
                          rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:28:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD8BE, serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162
        Validity
            Not Before: Oct 19 07:28:08 2025 GMT
            Not After : Oct 26 07:28:08 2025 GMT
        Subject: CN=68f49309-1a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:af:a9:aa:a8:3b:76:42:75:07:78:25:10:e9:
                    ac:5f:91:34:f4:58:4a:27:59:51:92:e1:5d:8b:46:
                    4f:8f:64:55:88:42:3b:4d:64:43:50:db:cc:92:f6:
                    bb:fd:5c:a2:70:c1:d6:3a:90:7a:37:32:43:95:d2:
                    e2:ea:bd:81:31:43:84:8f:00:72:1b:5d:3b:9f:51:
                    1c:d3:24:7f:6a:96:04:cc:20:ec:37:4c:61:cc:04:
                    0a:90:de:21:d3:8a:c9:f6:f7:90:63:08:dc:f9:84:
                    11:6f:7a:ac:ae:73:23:de:02:b7:de:87:70:21:29:
                    81:a3:98:5a:e0:cf:f6:ac:b0:e2:c0:15:72:bc:e3:
                    5e:ed:f4:70:71:8c:41:8c:3a:ca:29:d0:ed:3b:0d:
                    7f:b2:58:d8:a0:03:0f:16:68:a9:71:4a:e7:13:1e:
                    86:1e:2c:c0:e7:12:bc:31:de:82:8a:11:23:20:43:
                    2e:87:21:5d:b0:88:81:54:cd:ef:c8:04:4a:86:01:
                    90:12:d8:47:57:20:b7:44:06:cb:c3:eb:ee:96:22:
                    7c:44:d8:6c:cc:50:c3:2b:fa:01:f8:76:e3:8a:09:
                    e0:c6:1e:e6:e4:48:56:13:53:dc:a5:6a:c6:2d:44:
                    95:f2:52:d1:c2:30:da:a4:19:be:2c:8e:8d:17:53:
                    32:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:85:F7:CD:48:75:75:C0:65:5D:B8:07:C4:BA:2B:E1:42:6C:80:14
            X509v3 Authority Key Identifier:
                keyid:E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:87:44:44:65:dc:a6:06:b3:28:13:34:44:f1:ea:1d:d2:2e:
         77:82:44:32:68:1a:69:2a:b9:ee:da:45:07:8f:71:06:43:0f:
         bd:96:f7:a4:69:c4:6f:93:a1:25:6c:80:89:7f:a0:54:aa:36:
         da:a3:5d:55:27:ba:b6:c6:8c:8d:83:7c:78:8c:ce:ef:f8:23:
         dc:8f:51:78:04:f1:24:2a:7f:42:5d:87:5f:92:67:da:75:f8:
         33:86:2f:79:ab:db:bd:d1:dd:05:88:92:85:7a:bb:b8:42:a5:
         c6:d4:a5:13:9a:05:23:43:d3:6d:3a:c6:9e:79:c8:37:78:96:
         e3:46:ea:af:53:e8:96:77:70:e8:ed:d8:48:e4:34:56:89:8a:
         3e:5e:17:a6:e1:cc:47:08:d5:38:02:5c:7b:43:a0:13:e8:4c:
         d6:b2:05:9c:51:ab:62:13:94:96:9e:32:ad:f6:af:e0:99:c2:
         e7:8f:39:be:29:68:39:f7:8e:a7:dd:aa:87:fd:97:05:f8:69:
         aa:9d:cc:e8:bf:e8:ea:4b:27:19:f8:6b:0b:f7:04:da:bb:78:
         d4:a8:44:dd:32:00:9c:d1:74:27:8a:93:f8:47:a9:c6:7a:35:
         3b:8a:8d:21:d1:b5:d9:d7:64:b9:fb:16:58:1b:bb:41:22:99:
         d6:f0:5c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:30:59 2025 by rpki-client