Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
File:                     gp8PQIhN2ZESEAWwfQmiy_-03sY.mft (raw, json)
Hash identifier:          4JKfZUCQLP5Zdv9Z//Yh/5GMo7MZiLrqTVwkfFHhSmc=
Subject key identifier:   A8:65:DF:17:06:67:5C:26:FB:3D:20:FF:AA:FC:3B:06:6F:57:83:84
Authority key identifier: 82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6
Certificate issuer:       /CN=A91A16CF/serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
Certificate serial:       0C44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
Manifest number:          0C31
Signing time:             Thu 30 Oct 2025 18:41:00 +0000
Manifest this update:     Thu 30 Oct 2025 18:41:00 +0000
Manifest next update:     Thu 06 Nov 2025 18:41:00 +0000
Files and hashes:         1: gp8PQIhN2ZESEAWwfQmiy_-03sY.crl (hash: vngImmQzCH0rGFoWELstpK7VIMVkPKMybuiLCSWPa/8=)
                          2: 46D7B1B468F911EFAB3D9424C4F9AE02.roa (hash: onDSKcNFc/pDMIziyGqjtuK2E8Imk/xI2T23hdeIbB0=)
                          3: 13DE95F668FA11EFAE700D5FC4F9AE02.roa (hash: CWmRoXyI8djvZbQWvBLpL+DLa+AiV1dhvDwiE3HLKt4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl
                          rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 18:40:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3140 (0xc44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A16CF, serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
        Validity
            Not Before: Oct 30 18:41:00 2025 GMT
            Not After : Nov  6 18:41:00 2025 GMT
        Subject: CN=6903b13c-8224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:aa:58:e0:76:69:17:da:29:66:89:26:67:f5:
                    33:9f:60:32:24:cf:d7:8b:1a:c1:a4:ca:d3:8e:3e:
                    bd:01:23:c6:ad:e7:f4:a9:da:1b:83:f1:18:e8:21:
                    6a:ea:f6:ec:39:95:cb:a3:85:be:5a:f1:55:a5:5a:
                    7e:2c:67:70:fe:bd:c7:8c:fd:91:02:86:ea:4c:f0:
                    71:54:ed:c7:d3:a7:e8:ff:ad:4f:69:7f:72:ef:2b:
                    08:52:cf:64:19:09:77:02:e8:17:d9:7a:d5:28:2d:
                    ca:1b:d2:3d:b6:53:d2:a4:f7:a6:0c:f3:5f:46:12:
                    d2:68:fe:21:7b:09:66:28:7a:b3:b7:1d:1e:99:73:
                    7b:a1:eb:15:e7:41:71:6d:f1:3a:0d:3f:c9:60:6a:
                    50:73:18:99:8a:f3:18:b6:a4:78:da:c7:e4:01:bf:
                    18:26:50:93:9e:cb:1e:11:c5:37:df:4a:09:1e:ce:
                    f3:a1:e3:85:4e:2e:e1:c8:91:11:82:7f:c1:b2:ab:
                    af:b8:d9:0c:76:b0:23:ef:2d:cc:ab:13:d5:14:9e:
                    91:27:4d:73:5d:82:a6:d1:69:db:4f:a0:a8:3c:40:
                    c8:10:58:9c:c4:32:2d:71:36:8e:21:47:37:44:a4:
                    e8:7a:bf:42:c7:8f:81:0b:50:85:c1:08:c6:a8:40:
                    98:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:65:DF:17:06:67:5C:26:FB:3D:20:FF:AA:FC:3B:06:6F:57:83:84
            X509v3 Authority Key Identifier:
                keyid:82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:e5:ef:9e:67:75:ec:ed:2c:9f:1a:13:31:41:f5:85:14:0c:
         42:6b:0e:02:5d:72:5a:8f:3a:6e:3a:e3:f9:92:70:0f:1d:99:
         ed:2a:fc:e8:91:e9:ad:ec:49:97:66:1c:eb:45:30:f1:ed:1d:
         1f:b4:9c:5d:a1:34:f6:39:d6:a2:af:a2:aa:ce:fd:9e:3c:97:
         80:5e:f6:ab:3b:29:58:d4:2f:a3:6d:70:09:fe:c8:c4:c3:56:
         e8:63:c1:03:d3:ac:6b:70:4a:5d:7d:16:70:6d:42:db:4f:a5:
         ca:c0:2b:5e:b7:50:23:e8:f0:16:0e:6d:a9:30:e6:c2:41:2b:
         39:b8:cb:27:20:75:a6:09:f9:35:a1:1f:c4:73:40:e9:6a:f4:
         48:69:7a:3c:62:b3:eb:5c:a4:be:1d:43:f3:75:ee:f6:61:9d:
         b6:3d:a8:70:d7:bb:f3:de:40:bc:ac:0c:8d:9d:79:40:6d:59:
         e2:33:b1:be:fb:9a:a4:b8:aa:b7:e9:d0:f0:bb:8f:ae:e6:d1:
         de:50:69:10:8f:f5:6b:4d:de:06:6e:bd:ae:6b:ce:b1:b8:e9:
         7f:fd:f6:29:bd:7d:cf:b3:73:0d:33:99:a7:94:1b:ac:8d:06:
         0f:89:28:4b:c1:c9:58:86:6f:d4:30:93:6a:68:c5:30:b7:27:
         d2:82:87:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 06:35:33 2025 by rpki-client