Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
File:                     gyzAVuI-OIrjeBpSC92RFpY25Zs.mft (raw, json)
Hash identifier:          874/LYNt+z47oGl35iGFuBUps3fwUpvViLNAS0J0uoI=
Subject key identifier:   36:9F:34:12:D2:BE:0C:03:66:0C:44:0B:6D:E2:CA:CB:79:4B:B8:94
Authority key identifier: 83:2C:C0:56:E2:3E:38:8A:E3:78:1A:52:0B:DD:91:16:96:36:E5:9B
Certificate issuer:       /CN=A91F1029/serialNumber=832CC056E23E388AE3781A520BDD91169636E59B
Certificate serial:       075D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
Manifest number:          0757
Signing time:             Tue 12 Aug 2025 21:59:46 +0000
Manifest this update:     Tue 12 Aug 2025 21:59:46 +0000
Manifest next update:     Tue 19 Aug 2025 21:59:46 +0000
Files and hashes:         1: gyzAVuI-OIrjeBpSC92RFpY25Zs.crl (hash: vU90xpcWl0A71YOBspntCkRfhOvSwHmv/t+4rU4uE9U=)
                          2: B2790B3C2FB111EB89A04D37C4F9AE02.roa (hash: cbi8nIiFu7yZyu87usC4sqYN/jQpg6I6lG7FiVSdUVI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.crl
                          rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 21:59:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1885 (0x75d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1029, serialNumber=832CC056E23E388AE3781A520BDD91169636E59B
        Validity
            Not Before: Aug 12 21:59:46 2025 GMT
            Not After : Aug 19 21:59:46 2025 GMT
        Subject: CN=689bb952-1062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:21:7d:3b:1c:0a:a2:41:5a:70:28:15:b2:4c:
                    67:5c:41:3a:30:8e:f5:ec:49:ca:46:7e:6f:3c:81:
                    14:70:5d:59:b7:0a:82:c8:31:45:6c:2a:dd:a1:9e:
                    0f:67:a1:0b:89:4d:62:50:f9:0c:a9:37:2b:7a:cd:
                    17:af:5b:58:0b:4f:2b:1d:56:b7:87:82:0d:08:57:
                    4b:21:37:ea:c5:f0:85:ca:bc:65:65:1e:72:0e:26:
                    b0:bb:07:ea:d3:1c:f4:69:16:b9:d4:e2:38:1d:c7:
                    65:16:1b:b1:0a:47:38:71:7e:16:9a:7f:68:63:a6:
                    9e:0c:bd:a2:27:d7:15:0d:86:03:f1:ff:68:4f:b6:
                    49:51:9f:61:4a:a1:57:be:a1:7a:c0:3f:2b:fe:37:
                    b6:52:82:98:ae:78:67:c7:42:75:01:32:8c:70:a3:
                    e3:c0:54:df:a3:b8:08:90:6c:73:8e:51:72:68:41:
                    87:e2:07:cb:c6:0c:d1:a1:cc:c2:8e:ee:ab:58:36:
                    27:85:4b:55:26:ca:6d:43:41:e8:f6:57:5f:c6:b0:
                    b4:31:b3:7c:57:72:e8:b7:ed:9c:f4:4b:f8:b1:c5:
                    07:f2:e7:0e:3f:bd:11:ef:70:c2:66:82:e8:05:f0:
                    1d:3d:57:6d:bb:86:30:d6:09:04:c5:88:89:27:3c:
                    90:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9F:34:12:D2:BE:0C:03:66:0C:44:0B:6D:E2:CA:CB:79:4B:B8:94
            X509v3 Authority Key Identifier:
                keyid:83:2C:C0:56:E2:3E:38:8A:E3:78:1A:52:0B:DD:91:16:96:36:E5:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:20:c0:81:9b:5a:47:48:d9:71:b1:99:e4:d6:70:6b:c0:67:
         30:4e:1f:8f:ef:f7:06:bf:13:a2:e1:5f:33:ee:51:22:85:66:
         45:c1:55:66:87:80:e9:05:35:02:94:86:95:f7:24:0e:6a:0f:
         73:54:b2:90:df:8f:bd:00:d5:72:81:27:c7:f0:29:df:5d:63:
         2e:39:f1:28:a5:ca:a8:53:ec:1d:30:f6:45:23:7a:8b:a9:c5:
         14:33:35:0e:b2:3e:27:52:e3:5b:76:f6:6c:44:17:cf:71:89:
         ff:f5:02:a0:96:26:4c:47:8f:40:25:c5:3f:28:5f:a0:63:33:
         d9:ef:63:7e:c2:25:5e:4a:4b:51:cf:51:31:bb:3f:b5:b4:5a:
         7d:d8:40:f6:d2:12:a8:4d:0d:3a:f9:22:5d:64:63:ce:98:86:
         fe:87:12:28:bc:b2:f7:04:5e:c3:8c:14:40:78:c2:d6:31:d6:
         9b:40:06:69:d9:7a:b6:cf:73:cb:c4:b6:e7:a2:cb:b1:26:65:
         f5:98:d3:11:0e:a9:7f:0c:e1:b3:da:7e:b7:a9:bc:bd:bb:08:
         ba:51:65:fb:db:83:3e:01:a2:17:13:bc:ca:b5:7a:a8:e4:3a:
         50:f2:56:ed:20:3b:b9:8f:dd:69:d2:47:97:77:18:a7:c7:70:
         ac:5a:9f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:39:33 2025 by rpki-client