Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
File:                     GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft (raw, json)
Hash identifier:          PHobPu3eyF6UUzZOinYINSr/XWDQNogwPgRccxIevxg=
Subject key identifier:   F2:63:CA:D8:A1:E6:6E:49:32:FE:A7:9A:A5:7D:33:F3:9D:35:99:D5
Authority key identifier: 18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77
Certificate issuer:       /CN=A912A5D4/serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
Manifest number:          6B
Signing time:             Wed 17 Sep 2025 07:40:33 +0000
Manifest this update:     Wed 17 Sep 2025 07:40:32 +0000
Manifest next update:     Wed 24 Sep 2025 07:40:32 +0000
Files and hashes:         1: GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl (hash: EzL+QJWoXQuIwsWjKBMzCx5C3xl1D5djDyv9O0Hs3e4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl
                          rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 07:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A5D4, serialNumber=183A9867F2E3B373162BEFA6B86E81BD8C868877
        Validity
            Not Before: Sep 17 07:40:32 2025 GMT
            Not After : Sep 24 07:40:32 2025 GMT
        Subject: CN=68ca65f0-1237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fe:2f:46:51:47:dd:65:b2:90:9e:9c:78:d6:
                    9b:a9:19:9a:89:02:76:b4:57:22:42:4b:49:b1:b0:
                    74:95:d1:b0:39:2e:51:70:99:f4:f5:ec:7e:29:72:
                    24:87:2a:fc:57:04:89:4b:ef:c5:ed:25:3d:61:f5:
                    62:88:f7:13:39:eb:8d:d0:12:ee:a0:88:fa:da:4d:
                    a2:ee:bd:17:c8:4f:dd:0a:92:e0:99:61:f0:e5:4e:
                    64:a7:9b:35:8e:55:88:bf:b2:1e:12:1c:3b:a4:8a:
                    44:20:b5:13:da:5e:7e:54:f0:6e:58:b3:95:49:24:
                    03:c3:8a:df:aa:3b:b4:3c:17:bd:ea:0a:1f:84:be:
                    28:55:b0:40:dd:38:44:00:f9:96:03:c5:30:30:af:
                    c7:fb:30:42:e0:86:4c:c3:9a:2a:f8:92:06:ec:53:
                    d5:24:90:8d:93:ad:13:7f:28:33:7b:56:e2:06:06:
                    5f:c9:53:e2:e1:36:df:1e:92:fc:52:27:22:5e:41:
                    2c:aa:9f:16:3f:96:c9:b6:07:79:d3:10:be:13:2b:
                    d3:ba:f9:01:21:d8:97:46:7e:01:52:f8:9b:f2:1b:
                    95:25:e0:66:b8:11:f6:f7:6e:31:95:15:e6:bc:c5:
                    e4:17:a2:2b:45:ca:70:44:55:0f:70:a1:18:96:06:
                    a6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:63:CA:D8:A1:E6:6E:49:32:FE:A7:9A:A5:7D:33:F3:9D:35:99:D5
            X509v3 Authority Key Identifier:
                keyid:18:3A:98:67:F2:E3:B3:73:16:2B:EF:A6:B8:6E:81:BD:8C:86:88:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDqYZ_Ljs3MWK--muG6BvYyGiHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/6E0F2EA0F3CE11EF914EF644C4F9AE02/GDqYZ_Ljs3MWK--muG6BvYyGiHc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:c4:a2:49:c4:13:17:f3:e3:70:6d:b2:89:22:3b:ba:36:fe:
         c6:8e:83:0b:d6:a2:cb:ab:41:b7:ca:ef:a6:50:97:a3:4c:7d:
         3f:f7:ef:d9:f8:e0:cd:16:68:e1:22:40:25:bb:c8:d4:d3:67:
         a6:1d:a3:2e:4c:86:91:7f:fe:13:eb:a2:a2:f5:c2:f9:65:11:
         a2:72:4b:cd:1c:0a:15:2c:13:d8:73:2f:42:06:ce:b4:50:1f:
         fd:ea:bc:35:32:d0:dc:23:36:f8:cf:82:27:08:17:46:bf:dd:
         84:67:dd:75:f8:cc:e3:47:2f:da:07:da:8e:05:31:ab:73:81:
         ba:09:8a:67:5a:ea:9a:f5:ec:83:03:a3:73:31:05:eb:d5:39:
         01:82:c6:2a:1b:36:dd:43:7e:f1:51:7b:34:7c:08:90:0e:1d:
         66:8a:8b:b3:bf:f1:fb:74:79:46:02:26:bd:ea:fb:6a:0c:86:
         a4:9a:af:15:78:e8:79:0e:bc:f8:96:6b:b8:f1:6c:9b:95:b3:
         f8:dd:f9:ac:69:68:87:8a:a0:79:1f:f7:b0:ce:e5:4b:01:15:
         0f:8f:dd:37:69:d8:28:00:05:dc:64:90:a1:bb:df:03:be:92:
         5b:37:95:52:3e:f8:78:e4:8b:62:ab:69:00:d0:77:bf:12:56:
         37:6f:58:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 03:49:13 2025 by rpki-client