Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft
File:                     GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft (raw, json)
Hash identifier:          HZcFiqmT899igh+PKPDDtsrgsClzIab7+rkCPz8MWGc=
Subject key identifier:   D8:DA:0E:1E:95:3F:1A:4F:23:21:4A:23:6D:D4:8B:99:1E:4B:5D:88
Authority key identifier: 19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36
Certificate issuer:       /CN=A919400C/serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636
Certificate serial:       0641
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft
Manifest number:          0631
Signing time:             Fri 08 Aug 2025 23:10:29 +0000
Manifest this update:     Fri 08 Aug 2025 23:10:28 +0000
Manifest next update:     Fri 15 Aug 2025 23:10:28 +0000
Files and hashes:         1: GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl (hash: GvU/1S+lYQ9yiMSl05e6o63AMmEwCLlFhD7IPzJflUg=)
                          2: B945FB7A386011F0A5422D16C4F9AE02.roa (hash: SZrDdn156862qKjcsqUSXFw0VIWLJHX0aKveUMI7Crc=)
                          3: 3D83702E66CB11EFA2A66984C4F9AE02.roa (hash: yvSBH+mrjORJ3IfyqCLbdhmcmwjpugy8guoGWStrajY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl
                          rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1601 (0x641)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919400C, serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636
        Validity
            Not Before: Aug  8 23:10:28 2025 GMT
            Not After : Aug 15 23:10:28 2025 GMT
        Subject: CN=689683e4-f74b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:71:42:62:9b:c4:07:5c:ff:86:1e:92:00:33:
                    ba:04:b0:3a:da:92:71:ae:68:cc:9d:2f:02:52:c5:
                    f3:40:65:36:9e:48:f6:4b:13:11:6b:06:42:2c:49:
                    b6:ed:c5:93:5f:a0:0b:18:7d:cc:b6:89:d7:63:61:
                    67:15:a8:69:7e:67:10:ca:00:06:59:b2:2d:99:02:
                    90:f3:1f:dc:4a:be:18:79:65:96:91:8e:a8:2b:de:
                    0b:65:8f:71:81:4b:ea:9a:1c:5f:4e:85:a6:aa:1a:
                    fc:1d:09:98:e3:5f:c5:77:f3:58:ff:b2:d9:3c:15:
                    3f:e6:0b:2f:c8:5c:e5:bb:e9:93:16:8c:5b:1a:d5:
                    dd:58:df:98:58:da:bc:e7:ba:71:f5:a1:72:b9:ac:
                    7d:fd:60:0e:69:95:86:a6:71:62:4d:1d:8a:27:17:
                    4d:90:d6:cc:bf:53:9f:dc:a9:88:85:7e:da:f7:87:
                    b3:31:7b:3d:3d:e6:97:4c:79:60:28:9d:da:42:ed:
                    a1:4f:c6:4b:d5:d9:e1:08:17:57:13:f5:d5:5a:e3:
                    df:1a:40:c9:a4:5f:7a:e7:05:42:58:2a:48:99:14:
                    0f:ad:0d:79:7c:12:fe:95:0d:35:1f:e7:12:08:d3:
                    02:b4:dd:0c:5c:a4:f3:c8:93:c6:15:61:f9:40:c1:
                    56:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DA:0E:1E:95:3F:1A:4F:23:21:4A:23:6D:D4:8B:99:1E:4B:5D:88
            X509v3 Authority Key Identifier:
                keyid:19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:f7:05:b8:54:e3:69:e1:0b:38:a0:e2:ee:24:dd:bb:ad:0c:
         ac:ef:08:de:e8:20:9c:cc:c7:aa:69:64:40:d0:6c:43:11:e1:
         45:d0:36:09:1d:35:68:b6:2b:57:96:85:6c:41:38:0a:36:f3:
         a5:2d:30:86:7a:b1:f4:8e:cf:01:52:13:c4:37:44:9e:d3:72:
         bf:53:6a:10:ed:c7:ad:6b:ec:bd:e4:2a:92:ec:6d:d5:f4:23:
         94:8e:b3:34:d0:16:86:fb:97:a8:2b:41:0f:91:f1:c8:36:24:
         18:54:6f:cf:8a:dc:c7:c1:24:0a:b2:b4:f8:f1:73:bb:62:d3:
         ce:9b:d9:b4:7d:c9:ac:32:2f:93:ca:bd:56:0d:bc:6b:79:21:
         06:76:00:70:49:7a:87:3b:61:9d:59:91:7c:80:7f:2d:ee:cb:
         7f:b2:ea:6c:b6:b5:50:de:a0:95:d2:ef:84:4b:af:cd:7e:ff:
         24:2e:b2:48:30:47:06:8f:cf:3a:c0:58:3b:6f:c6:50:3a:3a:
         00:6a:fc:30:50:43:07:92:bb:5e:9b:18:10:9f:8b:be:2c:6b:
         be:6c:4d:14:bb:91:41:ca:35:10:be:fb:15:ab:8f:52:96:5f:
         85:4f:26:5e:91:0b:a9:ef:9d:93:28:c4:7a:bb:31:51:a8:a6:
         da:07:04:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:57:08 2025 by rpki-client