Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
File:                     gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft (raw, json)
Hash identifier:          tf/dWpdENtexbaGmjawIJv5nBQkO+DUXCfuUQM7EC/k=
Subject key identifier:   03:6F:53:8D:2A:9A:32:73:75:C0:77:68:B1:67:A2:3B:06:DC:96:41
Authority key identifier: 81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE
Certificate issuer:       /CN=A919D08A/serialNumber=816A478D86E7E21BF3178510B8585325583430EE
Certificate serial:       0174
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
Manifest number:          0173
Signing time:             Mon 03 Nov 2025 03:46:39 +0000
Manifest this update:     Mon 03 Nov 2025 03:46:39 +0000
Manifest next update:     Mon 10 Nov 2025 03:46:39 +0000
Files and hashes:         1: gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl (hash: vfDmdW+O1h0g4QrqVJTbStR2499EZ0uki3dsxdeFKpc=)
                          2: 2DBBD9E2788D11EEA502B350C4F9AE02.roa (hash: OAmPRTah7XdC92cyaOL1VT2tDGpsaJQwQAJo+nqjJlo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl
                          rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372 (0x174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D08A, serialNumber=816A478D86E7E21BF3178510B8585325583430EE
        Validity
            Not Before: Nov  3 03:46:39 2025 GMT
            Not After : Nov 10 03:46:39 2025 GMT
        Subject: CN=6908259f-61d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:68:d6:b2:14:e2:0f:72:df:79:33:5c:e0:a0:
                    26:4f:1c:6d:46:c2:72:98:3d:d2:86:61:36:42:da:
                    1b:3f:11:69:3b:15:8a:5a:7f:9d:c2:8b:01:c4:a8:
                    fe:aa:83:39:a5:7b:b6:f8:5a:17:d8:41:70:d6:ec:
                    36:27:51:12:47:bd:4a:05:3f:e3:c8:02:f2:f0:cf:
                    84:32:87:a5:02:e7:d0:c9:ef:0a:54:dd:38:f2:e2:
                    74:1f:e0:37:63:e7:12:49:7d:73:76:7d:58:26:77:
                    92:bc:f7:f3:10:ec:73:2b:59:f3:ef:48:dd:ea:9b:
                    b5:8c:83:67:a1:2e:d1:c1:5a:50:31:e6:af:8b:45:
                    10:cf:36:bb:06:c5:7c:73:2f:27:31:31:0f:e0:fa:
                    14:d9:1a:08:94:99:cb:df:04:f6:0e:fd:17:13:31:
                    9b:ba:95:eb:1a:fa:25:93:b6:a4:dd:4f:69:dc:78:
                    7f:53:21:ec:08:a6:5c:06:70:a4:59:3a:8f:40:ac:
                    ef:b1:cb:4e:14:de:1b:79:37:f6:1a:28:68:f3:5a:
                    8d:fe:42:73:1c:2f:f9:b4:76:b3:9f:fe:8f:c6:f5:
                    91:00:27:5d:16:0c:c5:86:60:75:78:b7:95:b1:b6:
                    09:da:16:47:2a:78:8f:11:f9:08:57:9c:03:79:74:
                    bb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6F:53:8D:2A:9A:32:73:75:C0:77:68:B1:67:A2:3B:06:DC:96:41
            X509v3 Authority Key Identifier:
                keyid:81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:d8:81:b6:ad:31:2b:71:ba:95:f9:79:ec:18:1f:d2:cd:4e:
         81:c6:3c:4b:46:43:ad:85:ba:e9:fa:b4:aa:d9:fd:58:9d:b3:
         c4:38:b4:bd:fb:9e:ee:81:77:fc:48:10:4a:6a:d0:99:16:80:
         70:78:22:94:83:2b:0e:cb:7f:9e:d5:c9:ae:3d:ec:05:5b:de:
         bd:dd:1f:90:b7:a7:9c:6a:c5:87:19:31:5a:de:cb:df:a8:01:
         0c:07:a4:10:66:a9:16:7d:d8:81:33:28:51:5d:09:97:6a:51:
         1a:21:23:33:f1:d4:83:1f:c2:f6:7c:e2:22:2b:4e:3e:e7:44:
         09:6a:57:e0:cf:79:18:c9:63:66:58:c9:a2:cb:c1:bb:8b:3f:
         61:d1:a6:df:c6:8f:42:48:8e:0a:48:f7:99:2f:23:03:d7:9f:
         4d:b8:82:e4:a7:2b:f0:9e:1f:5b:39:e8:4c:3d:34:0a:d9:ad:
         24:9e:91:57:8e:56:08:0c:c4:3c:c1:c4:54:14:44:d2:79:4c:
         7f:78:a0:28:d4:60:77:5a:fd:1a:9f:3a:4f:d2:11:51:f1:03:
         02:56:72:ac:51:2a:bc:03:38:f4:a1:5b:3b:25:2e:d1:e9:a1:
         16:a8:8f:06:23:66:ff:81:cd:df:79:33:29:3e:a5:6f:b5:7f:
         96:76:86:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:34 2025 by rpki-client