Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.mft
File:                     Gb2CLT62_26TcCRe6HS-qeuL7lU.mft (raw, json)
Hash identifier:          TfgIfDEjxSne69WVksL1rG9VvUnib038Rqfp7Ex822w=
Subject key identifier:   2C:83:29:C0:89:C2:28:99:45:5D:D9:AB:8C:3C:C1:25:B4:5C:D7:5C
Authority key identifier: 19:BD:82:2D:3E:B6:FF:6E:93:70:24:5E:E8:74:BE:A9:EB:8B:EE:55
Certificate issuer:       /CN=A91CA294/serialNumber=19BD822D3EB6FF6E9370245EE874BEA9EB8BEE55
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.mft
Manifest number:          10
Signing time:             Fri 17 Oct 2025 11:52:28 +0000
Manifest this update:     Fri 17 Oct 2025 11:52:27 +0000
Manifest next update:     Fri 24 Oct 2025 11:52:27 +0000
Files and hashes:         1: Gb2CLT62_26TcCRe6HS-qeuL7lU.crl (hash: IRzzLTt0u7JscPz+Syn2Wu3k2SamZXCUAjEI8161Lw0=)
                          2: 1EC99BBCA2F811F0ACA39B18C4F9AE02.roa (hash: OPNRGLnOYn0FnL/Q0g2b6h1BOq6mkXKBmGsTnzds7jI=)
                          3: 208EBFD6A2F811F0ACA39B18C4F9AE02.roa (hash: eFEue/RfyteO6Qa9ns27FA3e4ja3uTb1hbjiGbGNmwg=)
                          4: 1F8F98EEA2F811F0ACA39B18C4F9AE02.roa (hash: /KNy5MCRgQfgCQnLITh3QQ/nwilhQ6gGRg8j3dhXM+U=)
                          5: 1E0F8E02A2F811F0ACA39B18C4F9AE02.roa (hash: a9ce5XpTdFJn+nuz0UuFLj9iqDPeMhg24PniTTaMiuI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.crl
                          rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 11:52:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA294, serialNumber=19BD822D3EB6FF6E9370245EE874BEA9EB8BEE55
        Validity
            Not Before: Oct 17 11:52:27 2025 GMT
            Not After : Oct 24 11:52:27 2025 GMT
        Subject: CN=68f22dfb-243e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b2:f1:f5:95:23:e1:2c:8f:2c:5a:54:ea:ea:
                    f7:6a:64:7a:3f:a2:76:d2:02:42:87:bd:84:6e:14:
                    ec:be:76:c5:96:f6:33:3a:8e:38:16:c8:d8:f1:9f:
                    c3:c3:66:e8:79:40:63:a3:1b:c6:e3:25:1c:bf:e5:
                    aa:06:6c:1c:79:b2:5a:dc:c1:bc:4b:ae:1b:db:a8:
                    69:26:ff:6c:f5:85:1a:5a:c5:6c:7c:9f:8b:1a:1e:
                    c4:87:ad:e1:55:51:0a:eb:89:3b:ba:ea:5f:85:ba:
                    a3:7c:80:a4:e6:ad:9e:30:a7:e1:f1:db:d4:05:55:
                    d7:cf:b6:16:5e:dc:08:13:62:c5:0d:06:5b:3f:fc:
                    32:a4:2e:79:98:3d:77:a8:a7:f6:a7:fd:00:7d:b8:
                    a6:76:f2:31:08:a4:04:b5:f3:f4:90:82:d1:4a:f2:
                    33:ce:40:62:e8:fa:7b:82:9e:98:d0:e8:d9:49:b4:
                    d1:0c:f3:a6:85:2e:32:a5:13:bc:cf:51:b6:ba:ad:
                    83:c9:dd:8d:29:e3:b3:29:91:b5:9d:1a:1e:db:08:
                    e3:30:cf:09:c1:35:ba:2a:cc:4c:f5:e2:92:f8:de:
                    fe:a5:2f:1d:7a:ed:cf:49:7e:a8:40:d4:ca:39:f1:
                    9a:47:b0:03:44:57:b4:b1:e6:0e:fd:09:07:9c:65:
                    85:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:83:29:C0:89:C2:28:99:45:5D:D9:AB:8C:3C:C1:25:B4:5C:D7:5C
            X509v3 Authority Key Identifier:
                keyid:19:BD:82:2D:3E:B6:FF:6E:93:70:24:5E:E8:74:BE:A9:EB:8B:EE:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:61:98:09:24:dc:4c:6b:93:1a:3d:8d:0e:c6:2f:ce:75:3b:
         04:67:17:b7:a3:d0:fc:ba:32:1f:e0:ba:f8:94:66:34:ca:86:
         b8:35:ef:66:52:a5:53:8f:12:f1:77:e9:44:46:dc:bf:a4:23:
         65:06:25:0e:46:29:93:27:47:6a:13:c9:16:8d:7a:53:4e:10:
         3e:93:37:ed:8d:83:d1:5e:4e:2a:a8:b1:f5:64:55:e7:07:8c:
         5d:30:e2:68:ae:1e:3f:a9:36:d2:05:74:57:29:3a:7f:9a:b7:
         7f:f3:86:48:32:b4:9b:e6:12:5c:b3:de:40:2b:1a:d1:66:73:
         a9:7d:95:98:15:a7:c1:f5:47:0a:5c:ad:54:f2:f6:28:08:bb:
         fe:29:e7:52:37:9d:28:be:1d:14:05:6e:85:17:68:43:ac:61:
         f0:47:96:ce:42:12:51:b6:79:87:2f:05:36:62:7f:eb:ee:69:
         8e:1e:ef:ef:a0:87:9a:13:76:63:4d:e5:d4:da:80:fe:e9:5f:
         4f:02:d9:16:a7:2e:9a:e1:05:6d:bf:d2:77:56:35:4b:c1:81:
         db:06:b5:1e:ae:55:50:aa:55:d3:d9:58:02:de:a0:ea:d1:54:
         0d:e7:49:cd:cb:8d:47:d4:c0:71:f1:6a:e5:c8:e7:95:ad:97:
         de:2b:b7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 18:01:19 2025 by rpki-client