Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft
File:                     gm447HHypIW0sk7-zoRjJQqEoLw.mft (raw, json)
Hash identifier:          E8CcM6Ib07SNFvfQY1J0/aDYQbzG6qqcb4f8geYeEg0=
Subject key identifier:   0E:F7:FC:3C:35:AF:1A:57:41:12:BA:41:15:94:F8:C7:16:FE:BA:6B
Authority key identifier: 82:6E:38:EC:71:F2:A4:85:B4:B2:4E:FE:CE:84:63:25:0A:84:A0:BC
Certificate issuer:       /CN=A915A0EE/serialNumber=826E38EC71F2A485B4B24EFECE8463250A84A0BC
Certificate serial:       01C4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gm447HHypIW0sk7-zoRjJQqEoLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft
Manifest number:          01C2
Signing time:             Wed 05 Nov 2025 03:05:38 +0000
Manifest this update:     Wed 05 Nov 2025 03:05:38 +0000
Manifest next update:     Wed 12 Nov 2025 03:05:38 +0000
Files and hashes:         1: gm447HHypIW0sk7-zoRjJQqEoLw.crl (hash: 5j0mPOfV9fotm+lZoJE91zyBhjQdiS6sHUwhSXojuTI=)
                          2: 6A3BE658401B11F080319527C4F9AE02.roa (hash: Zuvu+1mG5bNQwxNAUGP3582mVxfrnoDDzDua0CLltU4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.crl
                          rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gm447HHypIW0sk7-zoRjJQqEoLw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 03:05:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0EE, serialNumber=826E38EC71F2A485B4B24EFECE8463250A84A0BC
        Validity
            Not Before: Nov  5 03:05:38 2025 GMT
            Not After : Nov 12 03:05:38 2025 GMT
        Subject: CN=690abf02-e0cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:aa:bc:63:e7:b6:89:f5:ce:fc:c5:dc:ca:e1:
                    8d:ca:3f:d2:79:6b:b3:47:0b:04:58:fe:45:71:97:
                    6a:77:99:e7:17:e5:f0:b4:2d:92:2d:8c:0b:93:67:
                    5c:4a:5d:db:eb:21:31:12:7e:89:cf:8c:46:f9:34:
                    0a:79:e3:cf:7c:be:88:f3:20:da:13:66:5f:84:fb:
                    16:3e:d2:b2:4e:0b:82:15:83:9b:9c:b2:c7:92:a1:
                    7b:3c:dd:c2:e3:69:b1:04:b5:f6:41:a7:6e:54:4f:
                    63:4f:49:05:4a:c0:a0:1b:de:d4:37:7f:55:f5:64:
                    cf:ff:24:99:81:40:8c:da:a4:ed:f1:28:64:4e:34:
                    1e:99:fe:6b:67:ac:0b:5e:f5:7a:52:ef:6a:8b:7f:
                    12:a5:1c:0b:41:e4:61:21:39:7d:84:a4:13:d5:89:
                    6a:0d:d2:49:f0:c6:e7:75:8e:c2:8e:19:11:e8:83:
                    02:8b:ce:a5:d4:9f:4d:ea:c5:ad:a7:f6:fb:20:3a:
                    b3:98:c0:80:b3:9c:f3:61:ec:e1:32:f7:44:5b:54:
                    f6:b1:a7:7d:5f:45:a9:22:49:f0:85:54:49:5e:72:
                    07:26:88:d5:7a:c8:db:c4:3f:d1:f9:76:61:25:18:
                    d5:c3:a0:90:95:24:ad:85:23:15:8b:29:db:fa:e4:
                    94:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F7:FC:3C:35:AF:1A:57:41:12:BA:41:15:94:F8:C7:16:FE:BA:6B
            X509v3 Authority Key Identifier:
                keyid:82:6E:38:EC:71:F2:A4:85:B4:B2:4E:FE:CE:84:63:25:0A:84:A0:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gm447HHypIW0sk7-zoRjJQqEoLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:a5:22:42:c1:b9:b0:f0:ae:0f:6f:0b:3c:77:b4:34:c9:8d:
         70:0f:8b:a3:2e:c1:83:94:48:a7:64:73:6b:8d:88:78:6a:1e:
         d1:41:ee:08:9f:3b:38:55:77:b5:ac:98:7d:3c:6d:0d:aa:01:
         1b:f3:31:c9:84:f4:86:55:c2:b7:80:46:a9:9b:b1:c0:27:39:
         6a:8f:23:17:48:a2:ec:be:91:d1:fb:f3:ed:82:4b:b3:ba:92:
         68:30:5f:5d:40:59:32:5f:c8:c4:bc:da:92:65:59:4f:77:43:
         9d:3c:67:01:02:e6:d4:0a:d4:d7:e1:f3:12:9e:41:88:50:3f:
         8a:ce:bf:7c:05:7b:1d:59:49:e8:44:9c:85:cf:7e:3e:ae:8a:
         a5:12:b3:d0:25:95:53:91:d7:e5:60:40:63:b4:4e:ce:94:3c:
         10:2b:eb:07:b4:c8:67:b2:92:2a:67:c5:fa:33:c8:7d:bb:57:
         f7:0a:ce:4c:ee:bf:8d:70:d1:f7:13:95:c8:13:21:0d:c9:c7:
         c6:9c:b1:a9:d2:37:a2:bd:5e:9a:fe:2b:9c:ba:89:6e:82:b7:
         c5:0b:5c:70:67:99:a3:ac:38:94:eb:6c:61:71:e5:25:53:ec:
         5a:eb:2a:8c:44:68:28:c6:3f:c7:f4:d8:8b:66:fc:a5:55:01:
         7b:e8:0e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:14:55 2025 by rpki-client