Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft
File:                     gyAF3EXYwTKohRVcQx0zMZrPbY0.mft (raw, json)
Hash identifier:          zC8jdQnwG1w4hqyq7gyTYQ9ELkS1kKMN6snTod8ACCs=
Subject key identifier:   37:44:32:72:80:C9:F7:F1:C4:F5:82:AA:18:62:67:38:7F:48:A4:37
Authority key identifier: 83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D
Certificate issuer:       /CN=A91362A0/serialNumber=832005DC45D8C132A885155C431D33319ACF6D8D
Certificate serial:       1C73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft
Manifest number:          1C63
Signing time:             Sun 10 Aug 2025 16:09:29 +0000
Manifest this update:     Sun 10 Aug 2025 16:09:28 +0000
Manifest next update:     Sun 17 Aug 2025 16:09:28 +0000
Files and hashes:         1: gyAF3EXYwTKohRVcQx0zMZrPbY0.crl (hash: 0GH59964AQLW4QDL9aCyh72iYw/EawLtWYtcwmy7uN0=)
                          2: B21D3C5AE21311E8B9660E3EC4F9AE02.roa (hash: X/4GCRMZ/gVyKNef6s/CyH3yqYjWWcRQZHTiFuRUpcg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.crl
                          rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7283 (0x1c73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91362A0, serialNumber=832005DC45D8C132A885155C431D33319ACF6D8D
        Validity
            Not Before: Aug 10 16:09:28 2025 GMT
            Not After : Aug 17 16:09:28 2025 GMT
        Subject: CN=6898c439-faf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:21:cd:01:40:32:93:56:62:b2:53:07:7d:
                    f1:22:0c:ba:d7:5b:8d:29:c2:0f:ec:cc:70:56:a3:
                    b0:ca:cb:f7:8e:b4:a5:d3:69:41:15:62:b0:ef:06:
                    83:cc:95:3c:10:6a:1f:04:31:7c:78:3d:91:46:a9:
                    9b:01:93:ff:3e:53:13:2b:89:f4:d8:93:6f:8d:b1:
                    75:a0:96:68:cb:cf:a0:d4:93:a6:38:a6:cb:a9:cb:
                    55:67:6c:60:aa:58:77:57:1e:3a:3a:16:3a:27:1a:
                    1b:cd:1c:d0:c1:8f:85:97:92:13:e4:f4:5b:fa:d8:
                    76:4a:3f:cc:a2:0c:75:fa:fd:f5:00:03:77:59:40:
                    2d:c9:02:4d:21:bc:df:ae:b9:2b:2d:00:bf:39:72:
                    ab:10:db:08:c3:d1:f8:65:8f:e3:fd:2c:19:7d:17:
                    da:a9:7c:42:4a:ae:27:4e:23:0e:63:1d:b6:e3:94:
                    07:a9:91:87:ea:06:55:2d:be:bb:96:57:67:c2:aa:
                    43:f5:8a:55:b3:ad:cf:cb:d6:a0:73:37:42:7b:1f:
                    cb:2b:2a:e5:a4:52:4f:42:d9:9a:72:73:ae:37:be:
                    b6:77:9c:72:47:eb:6f:d7:51:bc:c2:82:20:01:0a:
                    24:fd:1a:9e:a2:74:30:1e:8b:bf:c5:43:36:2a:7c:
                    63:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:44:32:72:80:C9:F7:F1:C4:F5:82:AA:18:62:67:38:7F:48:A4:37
            X509v3 Authority Key Identifier:
                keyid:83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:c3:31:9b:f4:48:d3:1f:74:6e:15:ae:23:d2:cd:c0:76:1d:
         f0:e6:21:0b:aa:9f:56:bf:05:78:e6:0e:75:f7:62:0b:10:52:
         9f:9d:40:f4:11:7d:7b:89:03:c9:8c:73:b8:ef:e8:dd:7c:1b:
         51:21:da:8c:2e:e1:f1:a4:1f:36:6f:40:bc:d2:a0:65:8b:03:
         30:26:8d:71:ae:80:d5:96:6a:32:3a:e5:1c:c9:ed:44:e4:81:
         60:a0:60:2e:82:db:98:2e:c6:88:8b:d1:60:4d:90:64:b1:60:
         c5:7a:55:16:87:44:7f:7f:e3:32:79:67:c6:42:01:a9:b6:48:
         4b:bb:e4:0e:b6:37:1c:9b:f5:43:4f:4a:d7:4a:de:05:e7:bd:
         95:56:5f:a0:7a:36:ec:fc:c1:a8:95:b2:d0:ad:66:c6:da:56:
         19:89:27:0c:a5:73:6a:6b:63:c3:3a:7f:a6:2e:15:e9:7b:b9:
         63:f1:0c:4f:17:36:db:67:bb:99:5a:2d:f8:be:c9:2c:8b:1c:
         1c:b6:7d:6f:ae:7b:19:60:10:5c:cd:d7:05:50:f7:8b:27:d9:
         98:b7:4b:a9:f6:de:e0:1c:f3:8d:16:9c:2d:bb:9c:00:80:af:
         0a:a6:cc:d5:95:ef:38:23:59:ce:80:e7:56:0a:75:1e:d0:9e:
         ee:79:8c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:14:16 2025 by rpki-client