Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft
File:                     GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft (raw, json)
Hash identifier:          O32QQl6U9XFWSWwLXFbBNiektdY1UZHLpn8VO7uq2Ko=
Subject key identifier:   89:88:9B:FB:69:9E:9C:FB:C0:CC:6B:DF:FE:05:FA:CD:01:C7:A0:52
Authority key identifier: 18:81:5B:34:C8:69:28:4B:43:23:C9:16:99:36:77:0F:DD:0B:42:36
Certificate issuer:       /CN=A91DACA7/serialNumber=18815B34C869284B4323C9169936770FDD0B4236
Certificate serial:       C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft
Manifest number:          C5
Signing time:             Thu 07 Aug 2025 06:21:26 +0000
Manifest this update:     Thu 07 Aug 2025 06:21:25 +0000
Manifest next update:     Thu 14 Aug 2025 06:21:25 +0000
Files and hashes:         1: GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl (hash: U9VbY4Vjo8XEiv4mu44rfiFacjC5HmM5/xfgPV+8GzU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl
                          rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DACA7, serialNumber=18815B34C869284B4323C9169936770FDD0B4236
        Validity
            Not Before: Aug  7 06:21:25 2025 GMT
            Not After : Aug 14 06:21:25 2025 GMT
        Subject: CN=689445e6-36fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ae:48:0f:d9:cd:3b:6b:34:37:78:c1:e2:c4:
                    fd:a9:36:05:bb:d5:37:49:4e:01:08:e4:37:ce:78:
                    b7:06:e9:e5:90:cc:b6:d2:e1:f1:fd:da:00:e2:fe:
                    6a:a4:5e:37:4b:ff:7a:55:2e:1f:9f:a5:b4:35:a6:
                    69:ea:13:50:98:e4:56:5c:ee:b8:e6:18:54:e1:e9:
                    59:cb:69:5a:e1:60:fc:88:05:4e:2f:36:05:03:63:
                    f4:1e:cd:f9:49:3c:55:12:0f:45:5a:66:45:5a:6c:
                    92:a6:13:79:48:cf:a0:89:c3:e3:97:80:55:cf:b2:
                    9f:08:34:c4:51:a4:e9:57:07:35:2b:c5:fa:26:dd:
                    bc:66:4f:ea:da:76:0e:ee:a4:e5:8b:7f:62:a7:eb:
                    7a:22:c8:60:e0:28:db:ed:9c:00:c7:a6:e3:6f:78:
                    b8:95:87:af:63:ee:7d:45:7f:2d:ca:c5:bd:6e:41:
                    51:8a:fa:3b:91:f7:e1:c6:53:ec:c5:16:12:c0:cb:
                    72:01:01:2d:87:d6:32:d7:c3:4c:74:b4:c0:f5:7a:
                    da:06:c9:e3:6d:d1:78:9c:76:19:3a:b5:78:0d:e6:
                    91:7f:e9:b5:34:bc:0e:3e:3f:41:fe:02:7c:bf:a1:
                    25:58:25:67:49:cf:a7:a1:a1:07:ee:61:0e:41:79:
                    6b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:88:9B:FB:69:9E:9C:FB:C0:CC:6B:DF:FE:05:FA:CD:01:C7:A0:52
            X509v3 Authority Key Identifier:
                keyid:18:81:5B:34:C8:69:28:4B:43:23:C9:16:99:36:77:0F:DD:0B:42:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:16:a3:76:c7:c9:90:e1:ea:14:69:8d:9d:da:00:70:0d:cc:
         71:56:ce:05:1a:78:1e:bf:8c:7b:d3:df:0a:c9:4f:dc:2d:5d:
         f2:9e:80:98:b0:7f:74:9a:16:5c:8a:88:31:e2:91:10:21:87:
         a3:d4:95:e2:0c:a5:d6:fe:df:cc:74:dd:ea:88:c0:37:1f:49:
         d2:e9:64:0d:9c:f2:46:68:fa:1b:d5:0a:86:17:19:ab:f8:3d:
         e4:d0:4a:4d:98:9d:36:b9:28:b4:08:80:a9:3e:9c:e8:b3:78:
         ca:d4:e2:20:a1:e8:e0:b8:13:d6:fd:0a:45:cc:e1:0d:77:67:
         99:ee:af:59:5b:73:70:3f:4a:11:97:8c:f2:16:40:99:55:19:
         56:fc:b1:c7:8a:30:6f:a4:bd:de:52:2c:62:6f:3c:9c:bb:78:
         43:dd:16:bf:fc:87:12:26:b3:37:a9:40:a7:fe:e8:06:00:de:
         3a:af:3b:c8:d5:4a:bb:78:c1:0a:61:fd:ed:52:e1:74:f1:03:
         3b:62:11:0e:1e:8a:65:a9:6c:a9:0b:3d:2e:ea:7d:17:ee:78:
         10:7a:d7:0e:eb:b8:a0:c9:1f:1f:95:ca:5c:79:ee:36:53:f0:
         60:72:4e:e8:8a:f8:78:92:dc:b1:c1:9b:81:ea:09:8c:d8:fb:
         87:f7:33:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:47:35 2025 by rpki-client