Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft
File:                     GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft (raw, json)
Hash identifier:          +rdaEo9u9lxqmiXM8fXXjSW1fFlVXRehHD/4gpP7gZM=
Subject key identifier:   A2:59:56:75:60:0E:F0:F4:30:BA:BD:1D:0D:D2:95:01:6E:0A:3D:72
Authority key identifier: 1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D
Certificate issuer:       /CN=A91B0720/serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D
Certificate serial:       03FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft
Manifest number:          03D2
Signing time:             Sat 23 Aug 2025 01:00:26 +0000
Manifest this update:     Sat 23 Aug 2025 01:00:25 +0000
Manifest next update:     Sat 30 Aug 2025 01:00:25 +0000
Files and hashes:         1: GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl (hash: EsCI1aoJu7l87gY3iR0kOjjiCqqQz17SYX+o2mEztQM=)
                          2: 3D3FCB5EC8F911EFA0603266C4F9AE02.roa (hash: 8BJmRiErzxldmGuPcVm3YUprnJm+HfKbTIGSnCrNI1I=)
                          3: F0223A56C8F711EFB2542D5FC4F9AE02.roa (hash: slEYVdAk6tIbZpblC8w7KpBF1oowZxGxHf1f2574AkA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl
                          rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1021 (0x3fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0720, serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D
        Validity
            Not Before: Aug 23 01:00:25 2025 GMT
            Not After : Aug 30 01:00:25 2025 GMT
        Subject: CN=68a912aa-6e20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ba:74:a4:0c:ff:3d:b1:46:f1:43:62:96:a2:
                    ea:17:60:c0:8e:56:e2:6c:e5:c4:c3:a3:3c:da:cf:
                    11:6a:fa:92:3d:67:31:42:ce:4d:9d:22:17:cc:6f:
                    b6:d3:b2:03:31:f9:f6:cb:63:0f:cd:1e:55:03:36:
                    a9:7a:01:2e:8a:e4:46:49:63:da:ee:87:54:e3:79:
                    20:e2:16:ed:ed:75:18:99:88:15:bb:5e:b5:82:55:
                    2c:58:7d:63:a6:28:70:1e:20:52:2f:0e:1a:7f:9c:
                    7e:bd:b4:af:2a:29:ae:f0:42:9d:7a:59:f1:40:b7:
                    34:b6:ec:e8:28:62:ae:36:26:26:1c:48:e0:3a:3a:
                    58:05:4d:0f:5d:80:b4:0f:ce:9e:89:0f:a9:21:db:
                    8c:da:b5:a2:b2:25:84:fd:8b:00:5a:39:cf:30:0b:
                    a0:ff:91:26:bf:93:66:53:64:f2:66:16:af:6c:0c:
                    b8:82:6e:ef:e0:33:df:5d:24:c8:dd:20:34:5d:5d:
                    75:25:6f:71:45:09:f1:c5:86:87:25:d6:d1:57:d7:
                    46:ce:4f:67:57:7c:ad:e5:01:50:d8:56:a9:bf:6a:
                    18:56:2e:c3:22:fe:b9:df:da:f3:0a:55:50:e8:a2:
                    d1:f9:ec:72:88:bb:b6:82:61:b1:2e:b0:9c:12:fa:
                    67:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:59:56:75:60:0E:F0:F4:30:BA:BD:1D:0D:D2:95:01:6E:0A:3D:72
            X509v3 Authority Key Identifier:
                keyid:1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:37:76:61:09:18:67:b8:64:f4:a5:7e:60:12:a9:63:3b:52:
         e4:c6:cc:54:86:80:44:cb:2b:07:80:44:86:50:0a:a4:37:a5:
         ba:e0:d5:95:bf:3f:bf:1e:08:4b:94:2f:81:90:de:ec:56:7c:
         c6:14:31:f5:40:1a:db:84:6b:8d:2b:8f:f3:52:48:12:04:e7:
         bc:a0:94:bf:79:24:f5:bc:66:50:d8:e0:71:55:3b:d4:37:72:
         0f:79:1f:bb:d9:69:c0:49:ba:0b:96:6d:50:5a:f2:2d:de:e6:
         05:95:df:74:97:64:61:78:2e:bf:af:c5:cd:34:0d:3b:5d:39:
         42:6b:c1:9a:b0:7b:bb:2c:87:e7:c5:3a:52:51:f4:6f:b7:99:
         79:9b:31:b4:53:b9:2d:a1:ca:02:ba:35:a1:ee:a5:ed:93:fa:
         08:1a:aa:a1:9d:9a:2d:6a:9a:20:5c:c1:96:f2:a9:c8:38:f6:
         f5:63:fb:30:2b:45:55:cf:93:37:ff:7a:2d:4d:ee:45:50:d6:
         c6:81:c5:f6:8c:4b:97:47:eb:9c:7d:ac:43:f2:24:20:40:7d:
         54:2e:be:a7:f4:38:a3:47:a6:3c:9c:8d:8a:cb:d4:92:e7:cd:
         fa:5d:e0:d2:83:82:6b:63:8f:8d:70:cf:d4:90:93:72:70:9b:
         44:37:76:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 22:20:56 2025 by rpki-client