Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
File:                     Gv1CZeY9DL91I27ZaGrk8AFV_34.mft (raw, json)
Hash identifier:          dGdTwumq3lpoBhLEn/gvIZ+QxVqOaKVZN3V/oef1nnE=
Subject key identifier:   72:E7:4A:26:DB:54:8F:C9:1C:F4:66:6B:47:B1:40:44:8E:6A:AD:27
Authority key identifier: 1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E
Certificate issuer:       /CN=A91CBA26/serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E
Certificate serial:       197A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
Manifest number:          1967
Signing time:             Mon 20 Oct 2025 16:44:17 +0000
Manifest this update:     Mon 20 Oct 2025 16:44:17 +0000
Manifest next update:     Mon 27 Oct 2025 16:44:17 +0000
Files and hashes:         1: Gv1CZeY9DL91I27ZaGrk8AFV_34.crl (hash: YONKU1R5glvxy6tosDgKU/lDPoKUZwosXb/UiXY0Y5s=)
                          2: FFE0F998101511EDA7D8F271C4F9AE02.roa (hash: RnL32mbH2nfGSeBF5CgeDIySAoSrBSDNFXrw7LKGyjA=)
                          3: EFD9938E2FAF11EDBE0A8C10C4F9AE02.roa (hash: i9JFPAUn7PS/i/yxYDte5hNt2lU/GYfFJVKLS5WTzUc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl
                          rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 16:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6522 (0x197a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBA26, serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E
        Validity
            Not Before: Oct 20 16:44:17 2025 GMT
            Not After : Oct 27 16:44:17 2025 GMT
        Subject: CN=68f666e1-4281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:21:15:d6:e3:b9:a1:c0:82:df:ef:05:c0:df:
                    94:96:ec:6c:86:d6:14:44:3e:f6:9b:87:65:5b:e6:
                    6f:84:f4:13:0b:66:52:ae:1f:4e:39:64:ad:10:3b:
                    6f:04:f3:4c:ad:c2:b9:ed:57:a0:96:16:01:dc:1b:
                    2c:8f:54:b8:31:39:7c:a8:f8:a4:06:46:41:87:6a:
                    39:35:7d:29:0f:0e:e0:7a:64:be:43:11:13:26:ca:
                    bf:61:b3:f3:73:fb:80:8d:b2:87:81:b1:87:21:f3:
                    1a:15:34:61:01:54:41:74:86:58:3b:fc:82:fd:36:
                    14:ea:93:58:62:4f:8f:77:6f:e7:07:7d:2e:9c:56:
                    21:d1:58:61:6d:32:fa:03:4f:4c:c8:8a:f7:dc:d7:
                    78:f9:ca:bd:e3:a5:e4:41:d1:18:9a:d5:7b:6b:5a:
                    23:8f:68:5b:cd:d8:51:1e:a2:f0:2f:8a:65:34:7b:
                    d2:52:13:42:f4:4e:2d:ef:8c:58:c8:1f:c0:8c:27:
                    80:fa:41:d3:da:6a:e2:01:95:d2:42:e6:dc:63:45:
                    f6:76:54:42:52:80:39:93:86:22:30:c6:03:e6:81:
                    ad:ff:45:91:da:09:5b:68:ef:b0:e5:1b:40:2e:3a:
                    39:7c:b5:73:6f:20:45:7b:c4:2c:a0:31:cd:68:56:
                    40:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E7:4A:26:DB:54:8F:C9:1C:F4:66:6B:47:B1:40:44:8E:6A:AD:27
            X509v3 Authority Key Identifier:
                keyid:1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:a6:3f:ed:2a:02:eb:12:bc:7f:9e:65:d1:98:bc:af:14:51:
         53:6e:8a:7b:f2:55:47:1d:52:1f:42:62:99:a1:f6:80:2e:ff:
         7a:15:78:a7:e2:e9:ac:ac:c6:a4:fd:7f:d5:1c:0b:18:7d:5b:
         3b:82:53:a1:85:5f:3b:c1:2a:67:17:db:c4:67:3e:c6:c4:b1:
         4d:d1:50:e2:6d:da:f4:65:58:19:bd:be:53:b3:bc:a3:0d:40:
         57:23:85:44:4d:c8:7f:c4:4d:a2:cb:9f:9b:41:cf:98:54:7f:
         fa:16:8a:52:89:e2:ba:f9:7c:a2:dd:fd:46:56:a6:c9:4e:01:
         b0:b5:30:cc:f7:82:d9:7c:2c:63:99:ae:d9:cf:60:3f:c7:32:
         72:f3:a0:2e:fc:a7:4d:78:e6:17:95:e7:20:07:c5:15:8d:41:
         9d:96:1e:82:87:09:cf:e0:8b:88:78:91:6e:91:50:0e:55:26:
         c1:e8:7b:48:e6:61:c1:61:d0:aa:9b:66:07:6f:21:53:35:16:
         36:8e:79:72:29:86:fb:b0:aa:ad:b8:fa:90:b7:53:e5:3a:9d:
         75:60:6c:9a:53:2a:ff:bf:87:38:8a:fd:93:2d:d5:9d:d8:d9:
         08:4b:72:65:77:c2:9b:a4:0e:a6:39:41:2b:3c:23:b0:30:b7:
         0f:30:16:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 18:39:11 2025 by rpki-client