Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
File:                     gqPk4CGF_7caxsaYwGdUjZzBhxA.mft (raw, json)
Hash identifier:          FuTGAsT5ZFpKesDs1Vv4vrLew3R4hG+sEiVsSakF11o=
Subject key identifier:   FF:62:54:6D:F6:18:8C:57:95:13:DB:09:2D:C3:D1:4B:4C:3C:A9:78
Authority key identifier: 82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10
Certificate issuer:       /CN=A91F33D6/serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710
Certificate serial:       068F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
Manifest number:          0682
Signing time:             Wed 06 Aug 2025 22:44:40 +0000
Manifest this update:     Wed 06 Aug 2025 22:44:39 +0000
Manifest next update:     Wed 13 Aug 2025 22:44:39 +0000
Files and hashes:         1: gqPk4CGF_7caxsaYwGdUjZzBhxA.crl (hash: 8+9JXFu9Lbi6tXZpYmCtq1NsXrVsSvnQ/dqL+AaMTE0=)
                          2: 9C53117E83FB11EBB159507AC4F9AE02.roa (hash: vkyP11luhnXeWA23/INygAjf676dmOUmLr8+nJsgHpw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl
                          rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 22:44:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1679 (0x68f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F33D6, serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710
        Validity
            Not Before: Aug  6 22:44:39 2025 GMT
            Not After : Aug 13 22:44:39 2025 GMT
        Subject: CN=6893dad7-be9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0d:05:33:73:7f:68:df:d1:18:67:00:1c:de:
                    8b:c7:a8:a4:87:ac:40:4a:31:30:91:b5:6b:32:9d:
                    28:d8:4a:fa:5f:8f:c7:73:48:05:15:54:20:3c:86:
                    05:3f:70:fd:e0:08:95:3e:07:b8:fa:18:d1:c7:6a:
                    b0:08:f4:35:8c:6a:72:49:88:2e:ba:12:26:52:73:
                    f3:4d:25:d1:98:9a:6d:6f:a3:b5:9a:24:e9:c0:96:
                    03:1a:16:39:46:8a:0a:eb:64:bd:2f:e5:69:76:26:
                    c1:1d:97:8f:87:96:da:d1:36:f7:92:f7:f4:2b:94:
                    ed:11:66:55:61:52:df:a0:c8:16:96:00:0a:94:c9:
                    37:ac:21:4c:a3:f4:9c:17:d9:10:88:97:b3:ad:11:
                    d7:51:96:d6:47:93:ff:78:7f:a4:6f:e2:24:a7:a7:
                    f6:f9:ff:b5:3c:ed:a4:e4:2f:94:77:58:fe:72:97:
                    a0:86:8d:2d:0c:b6:51:23:15:ea:01:9b:63:f1:98:
                    0f:0f:4f:c8:74:c4:2d:71:55:0a:8c:12:d2:83:b1:
                    5c:3d:c6:97:d1:17:ed:aa:09:15:30:1b:7a:ef:85:
                    64:6f:92:de:16:d8:f4:29:20:1f:aa:fa:7c:96:94:
                    ed:1e:5e:a3:cb:db:0e:63:de:15:3c:67:b4:17:f6:
                    1d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:62:54:6D:F6:18:8C:57:95:13:DB:09:2D:C3:D1:4B:4C:3C:A9:78
            X509v3 Authority Key Identifier:
                keyid:82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:5d:71:f8:5b:ea:cb:d2:19:59:b8:ba:fc:55:29:f5:fb:da:
         71:4d:81:29:de:5e:a4:bb:95:0e:7e:21:fd:fb:b0:75:04:b8:
         af:f7:9d:57:f4:aa:48:94:ea:7e:85:80:86:67:aa:58:f4:09:
         86:19:1b:c8:76:d6:3a:65:71:23:4b:7f:e6:2c:b0:6e:ed:e7:
         a5:58:6f:fe:76:0a:d8:72:a7:9d:9f:18:cc:71:fe:c7:dd:12:
         c2:aa:16:a3:e2:fb:08:0c:e7:c1:80:46:7d:38:48:cd:7b:9a:
         36:8f:d6:cf:43:48:c5:6a:b8:2c:b1:92:f1:5d:20:b9:7c:46:
         d5:c5:47:72:64:65:7f:c3:a4:52:34:7e:f4:15:c6:34:55:66:
         a4:91:b8:44:65:31:db:af:ff:ff:b3:0c:37:92:7c:54:f8:ca:
         a7:62:86:24:b5:49:e1:71:2a:ee:e5:e1:6b:06:ad:c3:1e:73:
         4c:29:44:01:50:a7:c7:33:d6:9f:6d:19:b3:30:55:5c:b5:bb:
         30:1f:d5:ac:f3:4e:9f:03:1f:65:c0:c9:b4:74:7b:43:c9:bb:
         90:ea:5c:bd:54:4e:a2:1a:85:5a:ad:4d:b5:cf:fb:bf:8d:97:
         af:85:64:50:db:7b:9f:ba:09:a4:32:bf:ac:c7:ed:4a:cb:fd:
         05:54:18:30
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjMzRDYxMTAvBgNVBAUTKDgyQTNFNEUwMjE4NUZGQjcxQUM2QzY5OEMwNjc1NDhE
OUNDMTg3MTAwHhcNMjUwODA2MjI0NDM5WhcNMjUwODEzMjI0NDM5WjAYMRYwFAYD
VQQDEw02ODkzZGFkNy1iZTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvQ0FM3N/aN/RGGcAHN6Lx6ikh6xASjEwkbVrMp0o2Er6X4/Hc0gFFVQgPIYF
P3D94AiVPge4+hjRx2qwCPQ1jGpySYguuhImUnPzTSXRmJptb6O1miTpwJYDGhY5
RooK62S9L+VpdibBHZePh5ba0Tb3kvf0K5TtEWZVYVLfoMgWlgAKlMk3rCFMo/Sc
F9kQiJezrRHXUZbWR5P/eH+kb+Ikp6f2+f+1PO2k5C+Ud1j+cpegho0tDLZRIxXq
AZtj8ZgPD0/IdMQtcVUKjBLSg7FcPcaX0RftqgkVMBt674Vkb5LeFtj0KSAfqvp8
lpTtHl6jy9sOY94VPGe0F/YdhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9iVG32
GIxXlRPbCS3D0UtMPKl4MB8GA1UdIwQYMBaAFIKj5OAhhf+3GsbGmMBnVI2cwYcQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNENi84M0I2NTE5Njgz
RjkxMUVCQTcxNTc3NzdDNEY5QUUwMi9ncVBrNENHRl83Y2F4c2FZd0dkVWpaekJo
eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dxUGs0Q0dGXzdjYXhzYVl3R2RValp6Qmh4QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzNENi84M0I2NTE5NjgzRjkxMUVCQTcxNTc3NzdDNEY5QUUwMi9ncVBrNENHRl83
Y2F4c2FZd0dkVWpaekJoeEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQARXXH4W+rL0hlZuLr8VSn1+9pxTYEp3l6ku5UOfiH9+7B1BLiv951X
9KpIlOp+hYCGZ6pY9AmGGRvIdtY6ZXEjS3/mLLBu7eelWG/+dgrYcqednxjMcf7H
3RLCqhaj4vsIDOfBgEZ9OEjNe5o2j9bPQ0jFargssZLxXSC5fEbVxUdyZGV/w6RS
NH70FcY0VWakkbhEZTHbr///sww3knxU+MqnYoYktUnhcSru5eFrBq3DHnNMKUQB
UKfHM9afbRmzMFVctbswH9Ws806fAx9lwMm0dHtDybuQ6ly9VE6iGoVarU21z/u/
jZevhWRQ23ufugmkMr+sx+1Ky/0FVBgw
-----END CERTIFICATE-----
Generated at Thu Aug 7 14:50:16 2025 by rpki-client