Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
File:                     gyzAVuI-OIrjeBpSC92RFpY25Zs.mft (raw, json)
Hash identifier:          x12z7fsnXE5kDdNG9Xsu9WHFKjUwTtGvWQakRU8jrT8=
Subject key identifier:   7B:CE:C4:E8:3B:6F:84:98:46:92:80:C5:0B:F9:3E:43:5D:B8:48:EF
Authority key identifier: 83:2C:C0:56:E2:3E:38:8A:E3:78:1A:52:0B:DD:91:16:96:36:E5:9B
Certificate issuer:       /CN=A91F1029/serialNumber=832CC056E23E388AE3781A520BDD91169636E59B
Certificate serial:       078B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
Manifest number:          0784
Signing time:             Tue 04 Nov 2025 21:37:41 +0000
Manifest this update:     Tue 04 Nov 2025 21:37:40 +0000
Manifest next update:     Tue 11 Nov 2025 21:37:40 +0000
Files and hashes:         1: gyzAVuI-OIrjeBpSC92RFpY25Zs.crl (hash: 8xJxgN6bsGKhbHsXBN9IF/pgVT5w3kMmis+sVqvN0w4=)
                          2: B2790B3C2FB111EB89A04D37C4F9AE02.roa (hash: jGskcZGy9vnjki4o/Q8sg1yCepo5qIlcHl7YuqfUnlw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.crl
                          rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 21:37:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1931 (0x78b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1029, serialNumber=832CC056E23E388AE3781A520BDD91169636E59B
        Validity
            Not Before: Nov  4 21:37:40 2025 GMT
            Not After : Nov 11 21:37:40 2025 GMT
        Subject: CN=690a7225-85dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ca:d4:14:71:c9:4f:69:7f:56:90:da:58:bc:
                    e2:3b:02:fb:bc:b3:26:52:0a:2f:7e:e8:37:22:ea:
                    1a:17:59:5f:5f:89:5b:bb:40:cd:76:52:14:65:23:
                    54:cb:5a:f9:f4:ba:e0:27:e6:75:0e:af:b7:0e:ce:
                    61:3f:ba:c8:cd:0a:26:20:a4:dd:a6:c9:44:76:12:
                    41:75:19:d1:66:bb:e4:bc:02:d3:c1:52:81:6b:e9:
                    29:a8:cc:51:08:3a:47:cb:3c:4e:0f:57:0f:64:ac:
                    26:fb:4b:2f:cd:a3:e0:74:7c:b2:8a:16:f8:a0:6f:
                    65:4a:c1:45:00:c4:0e:f7:64:9e:94:44:b6:7b:ca:
                    c5:13:db:d4:d0:f2:37:49:6e:60:f8:34:c6:91:65:
                    52:0f:34:5f:fd:53:01:19:e3:fe:a5:7d:d3:8e:b6:
                    4e:fc:37:af:9c:95:5b:79:19:2a:c5:76:45:a6:e7:
                    97:e4:fa:f3:fa:bb:e1:01:d9:c4:f9:27:5b:b8:b3:
                    a6:d7:4d:86:a3:d2:22:10:3d:10:cd:21:ac:6d:fc:
                    12:ec:fb:5a:c4:33:a3:0f:b5:12:97:2b:69:ee:0d:
                    77:2f:46:6f:bb:0c:11:87:af:7a:bd:b5:b1:c5:de:
                    66:aa:3f:1f:c2:49:bf:f7:c3:46:8f:65:a3:ab:c7:
                    bb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CE:C4:E8:3B:6F:84:98:46:92:80:C5:0B:F9:3E:43:5D:B8:48:EF
            X509v3 Authority Key Identifier:
                keyid:83:2C:C0:56:E2:3E:38:8A:E3:78:1A:52:0B:DD:91:16:96:36:E5:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:74:07:f3:e9:64:66:5b:88:1b:ab:5c:34:44:6e:cd:d9:1a:
         d0:ab:d1:57:76:0f:e2:98:4c:75:77:c6:47:53:03:56:1b:a2:
         32:eb:bb:2d:aa:1f:05:57:24:0c:94:fc:20:e6:10:46:37:3d:
         91:2f:c7:7c:d7:bf:c3:2c:17:aa:83:62:7c:a3:03:8f:79:8c:
         18:aa:26:e7:c5:cd:e8:bb:68:53:37:49:a0:0d:d3:b1:c5:dd:
         22:cc:3e:70:31:94:e8:a1:f3:f8:d2:e1:31:16:c7:06:6e:45:
         d4:0e:c2:75:09:43:13:9d:ca:27:d1:a0:a8:68:46:23:5b:de:
         83:6c:80:8f:e6:4a:3c:09:47:cc:92:19:5c:50:99:4b:42:68:
         3d:40:56:1f:75:01:68:d3:e8:e4:ba:23:18:7a:61:47:71:b2:
         e4:31:11:1e:93:92:54:6b:65:59:2c:2d:87:73:ad:27:19:b7:
         81:d9:3a:a9:51:eb:e8:7f:4b:1c:56:8d:9f:ad:c2:a3:63:55:
         03:c1:4d:c0:08:f8:d2:51:5a:8f:b8:48:26:a1:78:bb:94:64:
         23:50:a8:5d:f9:70:5a:b6:ca:e3:24:ea:11:8c:be:da:ae:c0:
         86:44:a4:a7:e5:80:fc:64:80:0f:30:28:ae:81:a0:22:28:38:
         47:7d:9d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:09:37 2025 by rpki-client