Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.mft
File:                     GVeTbMpsS9l-IilhpIkhsz_6IHc.mft (raw, json)
Hash identifier:          wLknQBbyBZapigwG69zKOsID55DY7/Z8D+x8ld3i5aQ=
Subject key identifier:   0E:93:66:D7:3E:37:58:C1:B2:9B:FD:53:50:46:35:88:E4:F0:F0:12
Authority key identifier: 19:57:93:6C:CA:6C:4B:D9:7E:22:29:61:A4:89:21:B3:3F:FA:20:77
Certificate issuer:       /CN=A91F6C10/serialNumber=1957936CCA6C4BD97E222961A48921B33FFA2077
Certificate serial:       4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVeTbMpsS9l-IilhpIkhsz_6IHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.mft
Manifest number:          4A
Signing time:             Fri 17 Oct 2025 11:00:55 +0000
Manifest this update:     Fri 17 Oct 2025 11:00:54 +0000
Manifest next update:     Fri 24 Oct 2025 11:00:54 +0000
Files and hashes:         1: GVeTbMpsS9l-IilhpIkhsz_6IHc.crl (hash: mDa999BQ/HK3CXV+Lh4xHnpHBIWFOSvc/9qpUJsNfI4=)
                          2: 7DDEB3163B9D11F08338F965C4F9AE02.roa (hash: Nx9zhfXamOV1v87PEDCD/XYv0n33Isg7pa/1D1NmyVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.crl
                          rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVeTbMpsS9l-IilhpIkhsz_6IHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 11:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6C10, serialNumber=1957936CCA6C4BD97E222961A48921B33FFA2077
        Validity
            Not Before: Oct 17 11:00:54 2025 GMT
            Not After : Oct 24 11:00:54 2025 GMT
        Subject: CN=68f221e6-daae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c7:16:e8:d3:72:b7:10:91:4c:09:96:f8:9d:
                    3c:82:ec:ce:e3:bf:79:cf:35:30:38:9b:2f:f5:33:
                    02:30:e7:6a:42:11:a7:ed:dd:a2:61:03:87:07:b6:
                    9c:a6:40:dd:93:1c:c7:87:d6:1d:9c:c4:a3:c2:d6:
                    61:e8:2b:1e:b7:c8:4e:ee:8c:38:a3:0c:84:14:c2:
                    1e:46:92:5c:47:c1:52:fb:58:98:c0:14:4d:2e:c1:
                    8c:a6:22:59:4f:ab:6e:87:52:00:0c:89:d7:72:32:
                    38:e1:dd:38:e9:72:a0:94:5d:94:8f:59:7c:a8:56:
                    a6:a6:08:d9:46:65:8c:15:7a:4d:4d:51:30:3c:92:
                    8e:89:db:93:89:9f:78:e9:e7:fe:5f:20:c6:fa:24:
                    8c:bb:bf:5a:7c:1d:43:28:f0:70:da:2c:95:5a:9a:
                    8f:87:f6:4c:ac:b6:d6:6e:98:19:3c:bb:f4:09:e1:
                    8d:f4:e6:ee:3e:4c:d0:44:fa:71:88:38:82:64:f2:
                    7d:bf:e5:17:4f:20:7a:50:f5:0b:a6:78:fd:01:67:
                    b1:f1:1b:33:8f:e9:3e:2b:99:70:3b:42:55:f1:96:
                    a1:a7:10:6d:76:8b:e9:e4:5e:c6:27:12:32:db:ab:
                    30:db:96:c5:53:ac:42:42:68:f6:f7:22:a8:fe:d6:
                    6d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:93:66:D7:3E:37:58:C1:B2:9B:FD:53:50:46:35:88:E4:F0:F0:12
            X509v3 Authority Key Identifier:
                keyid:19:57:93:6C:CA:6C:4B:D9:7E:22:29:61:A4:89:21:B3:3F:FA:20:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVeTbMpsS9l-IilhpIkhsz_6IHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c0:06:c4:fb:74:8c:e3:59:94:1e:ea:42:19:89:0f:c7:c9:
         9f:0c:de:44:d4:68:2a:06:f4:db:2f:73:31:e4:27:5d:b2:f0:
         3e:ac:69:07:3b:c5:d5:94:de:2d:5c:c6:e6:1d:d1:34:17:18:
         d0:71:d4:ba:5f:df:53:94:0f:7c:eb:af:d7:d4:e8:ed:f2:91:
         fb:da:5d:9e:a2:7a:65:30:f2:d5:80:fb:25:40:57:29:6c:e8:
         36:74:09:c6:bb:49:5c:df:ec:a0:8b:41:c5:d1:d0:3a:bd:c8:
         44:f5:7a:14:c8:f6:12:e6:32:47:fc:89:3c:b3:8f:7f:2c:d8:
         63:c8:73:26:fb:df:14:fb:37:3f:de:c4:95:e1:9b:19:93:ac:
         64:8d:c8:5d:87:1e:58:ae:4d:ab:5f:db:ff:96:cc:8f:2d:0e:
         33:e7:2b:44:58:e1:e8:0a:61:d8:10:3a:3f:61:56:e8:ce:85:
         dd:12:93:74:c5:48:f9:4b:1c:bf:c5:90:89:2c:29:fd:14:49:
         61:f4:2c:3d:c6:69:58:17:e5:51:b1:ef:50:be:75:6c:8f:5a:
         03:b9:e8:6d:e6:4e:04:5f:1f:dd:5c:ae:1e:06:ee:eb:66:4f:
         9c:16:4b:75:b5:df:f4:87:21:e7:38:95:d1:b6:a1:ba:12:bb:
         91:5f:ac:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 01:10:26 2025 by rpki-client