Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft
File:                     gjEAt15d1BoefDKBw1cT9EvobJg.mft (raw, json)
Hash identifier:          hY6lB/l4+tHvQCr/kkR5pi7/nBPrd7Ha7UfDdKHZZ0k=
Subject key identifier:   3F:4A:5B:8D:D2:7F:71:D2:48:2D:47:B4:24:87:AD:44:65:56:0F:A8
Authority key identifier: 82:31:00:B7:5E:5D:D4:1A:1E:7C:32:81:C3:57:13:F4:4B:E8:6C:98
Certificate issuer:       /CN=A91A2E6A/serialNumber=823100B75E5DD41A1E7C3281C35713F44BE86C98
Certificate serial:       0104
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft
Manifest number:          0101
Signing time:             Mon 03 Nov 2025 05:04:50 +0000
Manifest this update:     Mon 03 Nov 2025 05:04:49 +0000
Manifest next update:     Mon 10 Nov 2025 05:04:49 +0000
Files and hashes:         1: gjEAt15d1BoefDKBw1cT9EvobJg.crl (hash: lKQkHlXfUCx5O91rrvaPhAUFupJ2wZ+6ybdgL8kdTQU=)
                          2: BF466AE8325611EFA462C323C4F9AE02.roa (hash: KhqMoTs+Qi/II5aRP9wPpcsu1xRmCyMAj25hDB2Fy0c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.crl
                          rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 05:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260 (0x104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2E6A, serialNumber=823100B75E5DD41A1E7C3281C35713F44BE86C98
        Validity
            Not Before: Nov  3 05:04:49 2025 GMT
            Not After : Nov 10 05:04:49 2025 GMT
        Subject: CN=690837f2-bce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:69:0d:15:de:7d:e3:ad:70:0a:ef:06:62:85:
                    75:72:1b:7b:23:96:75:a1:49:04:32:6f:d0:74:f0:
                    99:2a:e6:28:00:cc:90:89:56:b1:67:23:89:27:95:
                    85:60:3b:bd:e5:27:15:65:aa:a8:8a:f6:00:f6:e0:
                    8c:e3:22:7b:4a:1a:6c:45:d6:9c:3f:84:f1:e4:d5:
                    3b:e7:0b:d3:a5:c8:94:2f:f2:c3:4f:93:f5:11:1d:
                    81:18:41:42:f1:7c:6e:c6:2f:98:1c:6f:46:6d:1b:
                    bb:ec:39:ce:9e:56:3f:d6:ac:9a:2a:bc:e3:fb:7a:
                    15:17:2d:c0:49:0c:9b:e5:70:ed:29:73:58:a5:ba:
                    c1:92:49:cb:fc:2d:55:d5:79:04:f8:69:5c:81:38:
                    ff:3f:0a:87:eb:06:09:cf:2f:26:41:61:7d:24:36:
                    10:a8:1a:96:a1:bc:7e:03:54:f6:0d:ea:39:2e:93:
                    e2:aa:12:b9:b8:ba:c2:3a:98:e1:9c:ea:d6:33:5f:
                    18:1a:70:00:84:1c:dd:4a:96:45:80:2b:3c:db:5e:
                    82:9a:c6:18:ba:0a:9b:7d:11:d3:f4:c6:5e:f3:d3:
                    25:fa:b6:44:74:56:78:60:77:a8:44:c8:f5:7e:e2:
                    27:d7:a2:56:87:7d:f7:52:0e:3f:ff:6b:27:4c:a5:
                    1e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4A:5B:8D:D2:7F:71:D2:48:2D:47:B4:24:87:AD:44:65:56:0F:A8
            X509v3 Authority Key Identifier:
                keyid:82:31:00:B7:5E:5D:D4:1A:1E:7C:32:81:C3:57:13:F4:4B:E8:6C:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:fd:44:a7:88:4c:80:61:7e:5a:39:5b:f0:69:55:96:a0:bb:
         ce:31:d6:1e:5d:b8:16:62:c2:3b:09:6c:ff:59:f6:5d:3b:69:
         b9:cc:7d:16:99:68:58:b1:fb:2a:36:54:c8:b4:29:f8:7c:ea:
         22:35:80:94:4f:64:e9:3e:57:2d:cf:46:57:57:8b:14:15:7a:
         7b:26:eb:c9:57:81:55:d2:65:b9:7c:05:ca:cc:c8:91:e9:6d:
         2d:6c:8a:c6:85:62:56:2c:e6:2b:20:38:42:38:b3:49:5f:1a:
         46:a5:08:06:ba:6f:7d:15:79:b4:56:eb:f2:a7:39:cc:20:b4:
         c0:59:bf:e6:1b:81:3c:b2:20:94:70:d0:14:e5:d4:48:ea:98:
         a7:5e:21:22:03:d4:7a:f0:f7:ab:d9:c3:cd:75:ba:40:3c:01:
         66:05:75:29:ed:06:5a:01:02:71:8f:b0:e1:7d:54:ba:0a:3d:
         24:08:58:61:c4:91:ad:c1:17:66:94:1a:77:5c:ac:8d:86:b8:
         ee:4d:31:5b:fc:7d:cf:2c:f0:b8:30:7f:79:83:af:08:39:3f:
         34:fa:b9:da:62:6b:59:57:55:4c:af:42:29:99:e6:b9:da:dc:
         bb:19:66:9f:d6:50:e9:04:57:2b:18:72:4c:5b:d4:fc:db:72:
         b5:4a:b7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:06:08 2025 by rpki-client