Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
File:                     GkAQC15dw00ay1htJzOQptUXff8.mft (raw, json)
Hash identifier:          7PX/y3ucSnxY6byR7i3f7IX12/wP9RAkH1gd3dRKdZs=
Subject key identifier:   BD:49:29:66:10:37:5F:FF:27:0A:D0:1C:4A:DF:B7:82:3E:69:23:31
Authority key identifier: 1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF
Certificate issuer:       /CN=A9194C99/serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF
Certificate serial:       0402
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
Manifest number:          03FD
Signing time:             Mon 03 Nov 2025 00:25:08 +0000
Manifest this update:     Mon 03 Nov 2025 00:25:08 +0000
Manifest next update:     Mon 10 Nov 2025 00:25:08 +0000
Files and hashes:         1: GkAQC15dw00ay1htJzOQptUXff8.crl (hash: LTvOqw8lNdjlGp/nQ780jCND/l1xYwsu7++UTyF+W8k=)
                          2: 8AB545D294A711ECA073AB56C4F9AE02.roa (hash: Vcf2mCMS48B4jAqDXmFIESOPS9I9k4iNYocNkMUmAvc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl
                          rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 00:25:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1026 (0x402)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194C99, serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF
        Validity
            Not Before: Nov  3 00:25:08 2025 GMT
            Not After : Nov 10 00:25:08 2025 GMT
        Subject: CN=6907f664-634e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8c:31:93:cd:34:4c:9b:6d:51:8f:3f:ae:af:
                    93:ed:b7:fa:36:f4:b2:64:29:6f:da:8f:20:e7:3f:
                    96:49:fe:a9:71:37:89:f0:c3:0d:04:3e:0a:d4:56:
                    c2:d9:0d:c7:13:91:a9:59:d1:79:e3:3b:90:b6:6e:
                    be:ad:27:7f:70:ca:8f:94:87:88:e7:94:59:dc:e7:
                    19:05:2e:ca:2e:a9:c7:12:fa:df:fd:af:cf:c7:09:
                    2d:7b:94:fc:28:6c:e0:d5:b1:c7:76:67:12:54:3b:
                    79:49:7a:74:63:c9:e0:30:86:c4:2c:2b:d1:97:94:
                    b3:93:cc:5e:8d:00:cd:28:e5:0e:9a:ce:f7:9c:15:
                    f1:ba:a2:ee:eb:19:1a:dd:ce:fa:99:48:ec:14:76:
                    59:27:b2:e7:06:50:9e:89:19:a1:2c:8f:3d:79:5a:
                    6f:e8:61:4b:51:38:79:c4:94:ed:57:cd:b9:b3:3b:
                    d3:70:13:e5:6b:23:27:d0:0f:5e:72:8c:55:aa:79:
                    6d:73:64:60:18:eb:68:97:88:9b:7f:0d:93:37:e6:
                    7e:d7:cb:1b:cf:38:78:2e:b4:06:b0:7e:26:6d:84:
                    3f:4b:1b:04:36:28:6a:e5:04:e4:49:58:3a:3b:3c:
                    c5:3f:01:50:b1:b9:e3:ba:3a:1b:c2:9c:1e:20:a2:
                    3d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:49:29:66:10:37:5F:FF:27:0A:D0:1C:4A:DF:B7:82:3E:69:23:31
            X509v3 Authority Key Identifier:
                keyid:1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:f2:01:0a:58:cd:b4:73:4e:08:99:89:4e:18:2e:27:b7:9c:
         98:00:ab:2b:88:07:c5:26:d7:40:d6:22:08:67:98:07:fc:44:
         57:48:fa:02:59:e8:0e:dd:d7:d8:89:00:b7:88:12:e3:3b:96:
         11:9f:e2:85:fe:9b:30:1b:42:3e:88:47:23:6b:71:48:71:a9:
         5c:f0:a6:8c:f6:3a:6b:6d:af:77:52:30:68:11:67:69:cb:0c:
         ad:e5:10:c3:b0:0b:48:94:9c:98:8b:90:2b:5c:4c:dc:93:78:
         f7:5b:52:5e:21:dd:79:b2:81:75:84:82:d1:50:4e:56:3f:2e:
         37:2b:e5:e7:1b:15:68:3a:ae:74:3c:b4:5c:ba:a8:8d:20:3a:
         87:4f:8c:9e:40:99:24:85:9e:af:ff:8f:a7:99:bb:3a:95:31:
         df:2c:23:f7:99:e7:e7:b3:9d:a0:c6:a9:ae:e7:36:73:fe:f4:
         a6:30:32:a2:80:29:ad:da:e5:22:f0:89:88:cc:fe:d4:bf:fb:
         fe:83:1b:2d:ee:0c:8c:54:76:83:1a:d8:97:a3:d0:bc:f0:e2:
         a8:a5:f8:af:05:65:8a:62:3d:dc:78:23:9f:27:12:9d:ba:ea:
         3e:e1:1a:7b:bb:ea:39:d5:4a:a5:5e:c0:22:28:9d:1a:11:fd:
         4e:a6:34:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:11:53 2025 by rpki-client