Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft
File:                     GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft (raw, json)
Hash identifier:          KuYzTNS4pIKRtnpmPSMZKqQIfWrUAExZFvjMB3YRQmw=
Subject key identifier:   22:57:D0:48:C4:26:47:A7:9F:75:CE:B7:70:5A:D2:12:C4:E6:79:50
Authority key identifier: 1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33
Certificate issuer:       /CN=A9174C93/serialNumber=1B041605D6D8386CF7225D679B410348991FE233
Certificate serial:       0C77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft
Manifest number:          0C6F
Signing time:             Sun 02 Nov 2025 18:30:27 +0000
Manifest this update:     Sun 02 Nov 2025 18:30:26 +0000
Manifest next update:     Sun 09 Nov 2025 18:30:26 +0000
Files and hashes:         1: GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl (hash: nhYWuy2ePvkdcTXQh1HP+11XN3G5dAoE2s1utFGp+bQ=)
                          2: C300B2460C2811EAA5153045C4F9AE02.roa (hash: NG87DnznnSO4SFH6RPE3pwKGFEdLouyBdOYhn2LMujw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl
                          rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 18:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3191 (0xc77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174C93, serialNumber=1B041605D6D8386CF7225D679B410348991FE233
        Validity
            Not Before: Nov  2 18:30:26 2025 GMT
            Not After : Nov  9 18:30:26 2025 GMT
        Subject: CN=6907a343-2919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6e:da:ee:11:a1:c5:32:f1:47:86:b4:64:87:
                    f1:a3:85:37:90:21:f5:0d:a6:8a:92:b1:cd:d7:da:
                    6c:60:25:b9:83:92:09:63:03:6c:cb:fd:ae:cf:00:
                    6c:df:f9:a9:a6:68:3a:ec:e4:3f:85:8d:88:e6:45:
                    1c:60:55:0c:49:89:84:2d:ec:7a:98:4d:86:a2:55:
                    d7:c0:dc:61:e9:c8:7e:c5:5e:8e:dc:dd:09:14:d3:
                    e7:30:67:62:13:ed:fc:31:b9:d0:0a:3e:99:b7:e0:
                    e7:78:68:7e:d5:a8:04:42:c3:ca:e8:94:f6:9e:95:
                    74:5e:36:89:06:d0:4f:ea:9d:82:53:51:b4:ec:5e:
                    d5:4a:01:fa:61:67:64:47:ce:fb:ab:2a:93:e5:75:
                    42:5a:01:64:7b:a7:54:1a:8a:9d:44:47:2b:43:0a:
                    45:e4:84:1d:dc:cd:16:53:bf:3f:2f:16:a4:0d:56:
                    eb:bb:02:d1:8b:8b:14:39:09:fa:25:74:ec:25:ea:
                    20:87:b1:e7:e9:a1:e0:d9:61:b8:21:a1:20:b9:4e:
                    1c:1b:46:9d:3e:21:ed:91:9a:e6:59:13:ce:d7:6e:
                    47:e3:e9:71:c0:e1:f2:5e:0f:ee:a5:07:1f:ce:81:
                    59:4f:3a:4f:9e:c3:bd:99:27:3f:be:f1:dd:15:98:
                    54:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:57:D0:48:C4:26:47:A7:9F:75:CE:B7:70:5A:D2:12:C4:E6:79:50
            X509v3 Authority Key Identifier:
                keyid:1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:37:03:ee:d2:cd:1f:36:ac:bf:1d:1f:bb:b1:98:e0:e3:df:
         f4:38:67:61:b3:45:64:4f:46:1b:c1:7f:69:2b:b3:a9:34:3a:
         33:57:2f:e1:a7:20:d0:99:82:c6:5a:7c:7b:23:0d:ec:68:20:
         5d:cf:4c:34:21:51:0c:79:2b:d9:cb:e5:cc:05:c9:73:51:65:
         02:39:c3:33:17:16:91:86:a4:19:ef:67:10:cd:07:d8:f5:ea:
         1d:03:0d:47:47:51:07:db:ed:82:f4:59:d6:fd:21:f6:30:12:
         fc:cb:e2:02:09:d6:55:62:52:4b:e0:80:2f:8c:c7:34:ed:fb:
         73:a5:6e:71:7b:28:a4:2e:ed:4f:8a:7f:67:12:c5:76:95:2a:
         63:3d:ee:30:53:81:24:a7:4b:e1:00:e6:1e:d9:7d:74:1a:06:
         00:72:bb:84:a9:51:02:33:c5:52:f0:ae:e0:f5:bd:c6:3d:04:
         ca:54:e0:e2:ca:d7:5b:74:24:02:47:b4:f0:49:59:90:2e:aa:
         5a:d1:44:4c:4c:51:34:a7:af:5b:ce:a4:b9:1e:87:e5:d1:6c:
         6e:35:7b:9a:80:2a:18:53:ca:e3:4a:a5:6a:9d:c9:ac:71:d9:
         22:44:ee:29:b7:b3:30:4e:a4:e2:4f:68:c0:52:2e:6e:05:6b:
         9f:76:85:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:04:09 2025 by rpki-client