Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft
File:                     E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft (raw, json)
Hash identifier:          bJ9tdp32cV15K5RP9cm0pFsxx/pXqXpAZzLokQHlqMQ=
Subject key identifier:   C4:7E:E4:D5:86:81:DD:C3:6E:D2:ED:AA:77:89:4D:B4:2C:08:CE:99
Authority key identifier: 13:E1:89:9C:23:FE:B0:7F:E1:31:62:EB:10:3C:C3:C0:38:D7:08:24
Certificate issuer:       /CN=A9192B60/serialNumber=13E1899C23FEB07FE13162EB103CC3C038D70824
Certificate serial:       02CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft
Manifest number:          02C3
Signing time:             Fri 19 Sep 2025 01:53:37 +0000
Manifest this update:     Fri 19 Sep 2025 01:53:36 +0000
Manifest next update:     Fri 26 Sep 2025 01:53:36 +0000
Files and hashes:         1: E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl (hash: frpwc/itVq5qoXe0XQD2roLohEFVfLraQZ4VJe2X2pg=)
                          2: 2475821008E611EDA969EC24C4F9AE02.roa (hash: E9ZjpImIHc/AMVAiU1odnwPjIMCn1I66wy3ctNd9d5E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl
                          rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 01:53:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 714 (0x2ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192B60, serialNumber=13E1899C23FEB07FE13162EB103CC3C038D70824
        Validity
            Not Before: Sep 19 01:53:36 2025 GMT
            Not After : Sep 26 01:53:36 2025 GMT
        Subject: CN=68ccb7a1-f67e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c3:59:e2:6f:69:2a:70:85:bd:1f:cc:4e:7d:
                    6d:a2:d7:97:67:52:7e:bc:33:50:40:a2:43:9c:16:
                    be:70:fa:84:7d:ba:19:61:84:b2:77:d2:6e:b1:c4:
                    16:71:6c:25:87:12:c8:e2:49:51:41:1f:23:51:10:
                    3f:e0:3e:6c:6c:b5:46:55:11:58:ad:68:67:3d:80:
                    75:ca:a5:a1:df:c4:49:eb:af:33:7b:cc:55:95:f7:
                    fe:9f:cb:a9:14:f1:91:a8:3e:f0:04:aa:50:bf:40:
                    6e:b3:47:24:29:07:c9:bf:b0:4b:00:f9:10:13:92:
                    ee:6b:80:2c:3f:23:31:f3:bc:6f:2a:1f:cb:d6:7a:
                    54:f8:0c:2e:99:2d:c0:32:fc:95:06:20:40:83:42:
                    06:a8:61:1e:a7:59:0c:87:db:26:58:f2:86:a0:ea:
                    68:8a:34:69:71:ca:d8:1c:0a:51:bf:84:c5:e8:1d:
                    46:1b:52:d1:69:85:4c:7b:2d:40:53:50:96:8c:42:
                    5c:e3:34:ca:ce:4e:53:82:e1:86:8d:fb:29:19:34:
                    17:44:65:3d:de:25:08:2a:dd:88:bf:86:62:6e:0c:
                    1c:7a:3c:80:5d:de:41:31:b5:77:3d:4b:30:e6:0e:
                    32:8e:23:56:19:5d:a5:db:8a:5e:73:1a:9a:78:0e:
                    76:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7E:E4:D5:86:81:DD:C3:6E:D2:ED:AA:77:89:4D:B4:2C:08:CE:99
            X509v3 Authority Key Identifier:
                keyid:13:E1:89:9C:23:FE:B0:7F:E1:31:62:EB:10:3C:C3:C0:38:D7:08:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:6f:0c:7c:ef:30:20:89:4a:57:df:26:c8:46:e7:5d:01:9f:
         af:dd:2a:a5:38:32:71:96:14:ba:6b:7d:31:5d:c5:8c:03:4d:
         12:04:41:4c:ac:06:ad:7b:c3:ca:c9:49:7c:3e:46:9d:c1:15:
         76:fa:43:32:80:79:03:1c:78:3c:8a:2b:e7:1d:13:49:58:89:
         41:af:d0:24:6e:f4:45:fa:e3:77:ad:87:8c:38:11:97:33:6d:
         18:fc:43:3f:3e:1c:f3:90:2c:42:93:15:9b:98:e4:41:c3:e6:
         5d:9c:03:53:ee:00:3b:98:c8:61:85:84:47:3e:de:f4:2d:8d:
         9e:12:2b:13:e4:49:cd:28:fa:0a:28:d2:45:9d:86:de:d2:95:
         13:6e:12:68:b2:6d:fc:4b:70:84:2c:25:2c:dd:cc:68:ce:11:
         13:8a:05:04:b2:ce:bc:ef:91:7c:2d:42:2b:4e:78:68:9f:02:
         03:44:c5:33:ff:96:a8:f1:0c:41:c9:e4:80:b3:e2:41:3d:0a:
         26:ea:f9:a4:f7:75:39:31:31:69:90:b3:c1:0d:47:e8:e0:61:
         a0:db:fc:08:96:53:ff:eb:80:34:94:09:42:34:30:4f:5a:90:
         e5:76:f4:78:18:d6:4e:b6:60:49:ba:df:d5:a4:ec:0a:2d:29:
         68:d4:4c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 09:25:00 2025 by rpki-client