Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft
File:                     gprYV1claHsfCkxV-UIq8zsA_LE.mft (raw, json)
Hash identifier:          Vjr5mErWEb7wbCbh3wqAxdSdjDtfLVxd2wX5usr3KgE=
Subject key identifier:   37:E7:DB:EB:C1:C1:56:ED:17:20:E0:34:6E:E6:4B:56:ED:D0:BA:E4
Authority key identifier: 82:9A:D8:57:57:25:68:7B:1F:0A:4C:55:F9:42:2A:F3:3B:00:FC:B1
Certificate issuer:       /CN=A916A511/serialNumber=829AD8575725687B1F0A4C55F9422AF33B00FCB1
Certificate serial:       E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gprYV1claHsfCkxV-UIq8zsA_LE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft
Manifest number:          E3
Signing time:             Mon 27 Oct 2025 07:38:16 +0000
Manifest this update:     Mon 27 Oct 2025 07:38:15 +0000
Manifest next update:     Mon 03 Nov 2025 07:38:15 +0000
Files and hashes:         1: gprYV1claHsfCkxV-UIq8zsA_LE.crl (hash: ZTPC4cGWSARWxqF3U9q96rot240Vf+U46qOB/mc/rdQ=)
                          2: C95F7472ABD411F08661983DC4F9AE02.roa (hash: k2YDwc03t3OBZ/zjfO15D6Psianh7LMJ/JmqviJo7uA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.crl
                          rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gprYV1claHsfCkxV-UIq8zsA_LE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Nov 2025 07:38:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A511, serialNumber=829AD8575725687B1F0A4C55F9422AF33B00FCB1
        Validity
            Not Before: Oct 27 07:38:15 2025 GMT
            Not After : Nov  3 07:38:15 2025 GMT
        Subject: CN=68ff2168-0f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:48:7d:e1:0c:e7:78:aa:6d:c8:42:11:44:8f:
                    66:89:89:71:e0:80:dd:63:6a:65:5e:09:7c:3a:b5:
                    1a:6a:c8:11:7b:29:bf:72:ce:fd:6c:18:fa:01:18:
                    3d:fd:3a:0e:28:e9:2a:65:05:21:a6:4c:c0:3e:98:
                    e9:c3:d1:45:b7:aa:13:58:50:fa:78:c0:16:9b:c7:
                    5c:5d:42:26:af:50:d8:05:fe:6b:cb:c0:20:94:a9:
                    d6:5f:bb:bc:2e:94:82:87:f0:91:31:b1:05:30:32:
                    ff:72:f0:d6:cf:7a:f9:f4:0a:ab:55:64:fa:de:3f:
                    2a:d1:a9:14:9b:48:62:88:ed:45:f1:01:83:f9:21:
                    d9:e8:84:3b:58:b6:2f:e2:c9:68:c6:e4:15:68:37:
                    1e:28:c5:d2:ee:23:b2:3e:66:d1:1c:45:3f:55:67:
                    27:5a:6f:9d:4b:68:2e:53:49:74:2c:5a:c0:4d:96:
                    65:57:ce:a9:44:22:5e:13:48:95:b6:c7:06:a3:86:
                    a7:03:8f:86:70:7b:cc:d8:d1:72:e4:95:c2:07:6e:
                    4c:9a:63:db:bd:ab:82:a0:c5:17:09:d6:32:85:b0:
                    da:7e:fa:6b:7d:1b:19:2d:9b:9b:0d:bf:4d:6d:56:
                    46:ad:07:b4:34:1d:16:6d:0b:a2:68:47:1c:23:4a:
                    a9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E7:DB:EB:C1:C1:56:ED:17:20:E0:34:6E:E6:4B:56:ED:D0:BA:E4
            X509v3 Authority Key Identifier:
                keyid:82:9A:D8:57:57:25:68:7B:1F:0A:4C:55:F9:42:2A:F3:3B:00:FC:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gprYV1claHsfCkxV-UIq8zsA_LE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A511/2DCFF6125B9E11EF9484635AC4F9AE02/gprYV1claHsfCkxV-UIq8zsA_LE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:b3:69:dc:46:3c:eb:fd:53:62:92:a7:eb:e5:df:8e:b7:4a:
         64:33:84:5a:cf:d4:0d:82:a8:b9:fe:37:e1:e8:8b:4f:d8:35:
         21:3c:98:68:0b:91:37:6a:92:1e:6c:90:fc:fb:c1:60:a1:ad:
         d2:83:20:22:7a:6f:6f:9c:4c:e1:e1:d3:f3:90:63:f9:04:41:
         2f:69:32:51:a0:2f:bf:1c:1d:11:75:64:e7:41:95:7f:bd:33:
         ff:d6:02:7d:06:b9:47:07:18:21:06:d7:9b:e7:4f:39:b3:73:
         89:dc:04:73:b4:ec:52:bd:9a:46:ef:8b:3c:a1:5d:55:92:c8:
         79:37:6f:93:d0:5f:b0:a1:11:c0:88:87:c9:c3:83:a3:6a:b8:
         92:0d:08:73:f3:79:06:d3:51:02:74:c0:9a:5c:e5:98:6b:12:
         11:0d:9d:7a:ad:db:75:3d:11:28:95:50:8a:95:10:30:15:10:
         fa:e1:e0:9a:13:5b:b2:a0:59:28:3e:cf:fa:d0:b6:e8:3c:55:
         ab:3d:17:76:b7:34:61:97:96:08:33:8b:10:79:46:b7:78:09:
         b2:cd:d4:da:bd:ad:a1:c5:21:e2:83:37:90:b8:9b:f0:3d:46:
         b5:2f:05:2a:09:05:79:e8:c9:32:89:a5:20:e1:83:f3:4c:ae:
         d4:3c:4e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:05:14 2025 by rpki-client