Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.mft
File:                     gyMz5kxMiwtYbe-Te7liSCG4wd8.mft (raw, json)
Hash identifier:          Mk/vgZKBYNocadsl0nBP6l+XpuJ//nDhIHzYCAzNWA0=
Subject key identifier:   14:A9:F8:B2:E7:36:D9:CF:E9:B0:DD:43:DD:A2:8E:0B:08:75:B2:E0
Authority key identifier: 83:23:33:E6:4C:4C:8B:0B:58:6D:EF:93:7B:B9:62:48:21:B8:C1:DF
Certificate issuer:       /CN=A915DB55/serialNumber=832333E64C4C8B0B586DEF937BB9624821B8C1DF
Certificate serial:       08B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMz5kxMiwtYbe-Te7liSCG4wd8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.mft
Manifest number:          08B1
Signing time:             Sun 02 Nov 2025 20:27:13 +0000
Manifest this update:     Sun 02 Nov 2025 20:27:13 +0000
Manifest next update:     Sun 09 Nov 2025 20:27:13 +0000
Files and hashes:         1: gyMz5kxMiwtYbe-Te7liSCG4wd8.crl (hash: KEOa390Wsd5DjDNJWNYqT53WCCB6/7pNt061TkYejhM=)
                          2: 8479151EC72011EA8062547CC4F9AE02.roa (hash: zvA6nn6pR2vh2EORIjGvhMyUwOGcEaYAyPuniRtqvy0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.crl
                          rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMz5kxMiwtYbe-Te7liSCG4wd8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 20:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2231 (0x8b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DB55, serialNumber=832333E64C4C8B0B586DEF937BB9624821B8C1DF
        Validity
            Not Before: Nov  2 20:27:13 2025 GMT
            Not After : Nov  9 20:27:13 2025 GMT
        Subject: CN=6907bea1-c554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9a:b1:6c:6e:cb:5b:c2:1c:15:26:07:e6:26:
                    26:bb:09:6c:63:ed:06:e7:14:a4:47:3e:2e:5e:a4:
                    98:56:70:1d:4a:43:a4:8b:74:1f:9f:c8:ba:b4:1b:
                    22:87:89:bb:d1:c5:60:f9:4e:08:0e:58:ab:03:45:
                    7f:d4:8f:0d:8f:8d:a1:73:13:e6:78:41:d3:91:20:
                    6a:60:0b:6f:89:11:66:4c:1a:8a:fe:db:26:44:4d:
                    27:78:c6:fa:d5:08:c3:ca:63:a3:00:67:cb:ca:3b:
                    c6:97:84:46:54:57:c5:47:9d:62:e1:0c:10:fa:6b:
                    12:e7:82:a2:5a:1a:6a:0c:bd:31:7a:bd:9a:05:f0:
                    1c:09:4e:c0:d8:8e:75:f3:e2:29:a6:5b:19:35:9a:
                    a2:00:54:30:2a:06:38:23:d8:fb:71:e4:5f:3c:b9:
                    c5:22:86:bb:58:e7:7e:c4:84:39:fd:cb:a3:09:a2:
                    aa:a7:48:ca:c4:84:12:37:05:eb:01:49:86:9f:91:
                    c0:82:2c:fe:90:6d:9f:e8:e1:09:06:79:63:94:c3:
                    86:a8:c6:db:5d:ee:68:8b:00:72:22:c2:3c:d1:c4:
                    09:ab:a9:7f:ca:77:3f:a2:55:f0:5a:90:4b:e3:a5:
                    43:09:09:6e:e4:bd:4d:ba:39:1d:71:b8:9b:14:74:
                    9d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A9:F8:B2:E7:36:D9:CF:E9:B0:DD:43:DD:A2:8E:0B:08:75:B2:E0
            X509v3 Authority Key Identifier:
                keyid:83:23:33:E6:4C:4C:8B:0B:58:6D:EF:93:7B:B9:62:48:21:B8:C1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMz5kxMiwtYbe-Te7liSCG4wd8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:a2:30:9c:73:8e:a5:5c:89:da:77:35:4f:a6:72:26:f8:98:
         fd:b8:6b:b1:01:ba:a7:8f:5f:5c:89:e6:7d:b2:0a:25:dc:64:
         53:72:11:f6:7e:11:b2:cf:77:a3:e5:bc:ad:39:e2:ff:e6:07:
         7c:e2:d2:f8:35:9e:7c:f4:f5:25:22:7c:26:ac:59:35:0c:c6:
         39:fa:2f:1d:a1:79:34:65:70:1b:6b:ac:ba:d8:9d:f3:ea:97:
         ce:5a:da:73:e0:6c:69:36:26:00:22:8d:39:a2:81:3f:4a:51:
         6e:ef:24:be:8e:34:cb:66:c3:6b:b0:9d:78:14:47:e4:eb:76:
         45:98:8a:c5:6f:bc:30:7b:c0:0c:5e:9f:72:72:60:13:7b:c3:
         93:03:b5:8c:47:8d:a9:3d:3a:1c:f6:e3:c5:e3:5d:9a:29:0d:
         2c:e2:62:40:69:e4:a1:81:42:90:1e:cb:09:c8:81:e0:67:91:
         ab:90:8b:27:5b:be:9e:08:7f:f4:1f:a6:c9:3f:5c:25:80:34:
         98:65:b7:63:dc:50:45:97:b5:4a:b0:d5:e1:ac:39:4a:6a:ed:
         25:de:93:7f:12:44:15:57:ac:24:c3:ed:75:fa:7c:a3:27:f5:
         06:49:89:f1:72:a3:ea:96:f0:4b:d0:7c:5d:f8:af:aa:20:fa:
         9a:11:e3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:04:27 2025 by rpki-client