Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.mft
File:                     GVeTbMpsS9l-IilhpIkhsz_6IHc.mft (raw, json)
Hash identifier:          q0VWrSoANAnwoAt0z8Hj/cHN7F8+wfDTav7RBLHAXnQ=
Subject key identifier:   41:26:A8:35:FA:A4:23:3E:1C:99:42:30:31:65:42:E6:3A:AF:33:BD
Authority key identifier: 19:57:93:6C:CA:6C:4B:D9:7E:22:29:61:A4:89:21:B3:3F:FA:20:77
Certificate issuer:       /CN=A91F6C10/serialNumber=1957936CCA6C4BD97E222961A48921B33FFA2077
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVeTbMpsS9l-IilhpIkhsz_6IHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.mft
Manifest number:          53
Signing time:             Wed 05 Nov 2025 07:25:56 +0000
Manifest this update:     Wed 05 Nov 2025 07:25:55 +0000
Manifest next update:     Wed 12 Nov 2025 07:25:55 +0000
Files and hashes:         1: GVeTbMpsS9l-IilhpIkhsz_6IHc.crl (hash: tKvAPCpjzRwTP2HJ8cpf2XSDNVkTmzCtsrxb7qtz/0E=)
                          2: 7DDEB3163B9D11F08338F965C4F9AE02.roa (hash: Nx9zhfXamOV1v87PEDCD/XYv0n33Isg7pa/1D1NmyVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.crl
                          rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVeTbMpsS9l-IilhpIkhsz_6IHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 07:25:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6C10, serialNumber=1957936CCA6C4BD97E222961A48921B33FFA2077
        Validity
            Not Before: Nov  5 07:25:55 2025 GMT
            Not After : Nov 12 07:25:55 2025 GMT
        Subject: CN=690afc04-2f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6d:ec:a7:15:d5:2c:f0:4e:d0:f0:e0:cb:01:
                    db:6b:92:e2:11:fb:76:88:13:e1:0b:21:2c:dd:f3:
                    b8:38:58:bc:02:33:51:35:37:2d:48:65:92:6e:24:
                    f8:0d:46:45:5e:51:88:c0:fd:c1:2c:70:06:10:32:
                    72:97:d8:c0:c4:38:6b:ff:13:29:66:e3:f5:97:28:
                    72:f1:33:c0:a4:45:83:7d:82:aa:36:3c:26:e7:5e:
                    e0:05:66:04:65:30:fc:13:71:47:9c:19:b9:4c:dc:
                    08:4b:ca:3c:43:d4:b2:e0:09:82:c9:14:c3:a4:85:
                    bc:26:85:06:c9:07:21:84:72:3f:f0:1f:08:ef:61:
                    1f:89:1b:6e:f6:b8:c8:0b:6f:fe:93:ae:45:75:23:
                    1e:5b:31:97:7d:4c:16:79:50:4b:4c:cc:e6:af:b9:
                    4b:ad:a9:5e:9c:28:ec:12:66:11:5a:11:07:cc:2d:
                    c2:ea:0f:e2:c9:85:25:2d:cd:11:c1:89:c5:5f:9e:
                    9d:b5:f3:9a:a3:fe:14:a2:3e:d0:43:a0:1e:b3:ba:
                    50:9d:af:a0:ee:a6:8d:5f:81:1e:f9:4e:49:11:91:
                    df:6b:04:aa:5d:62:9e:9d:e5:e8:c3:d8:5a:b2:a0:
                    34:0f:f2:29:90:d7:63:2e:5f:e8:9f:37:67:00:eb:
                    5f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:26:A8:35:FA:A4:23:3E:1C:99:42:30:31:65:42:E6:3A:AF:33:BD
            X509v3 Authority Key Identifier:
                keyid:19:57:93:6C:CA:6C:4B:D9:7E:22:29:61:A4:89:21:B3:3F:FA:20:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVeTbMpsS9l-IilhpIkhsz_6IHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/17D160E63B9D11F0901CB262C4F9AE02/GVeTbMpsS9l-IilhpIkhsz_6IHc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:c3:b4:bf:f8:a0:dd:14:db:1c:ba:2c:31:d5:33:83:92:7d:
         34:b9:2c:10:d1:41:1b:4a:a6:4b:5d:a5:de:09:93:14:b1:15:
         2e:98:dc:6f:74:d0:95:15:c0:10:80:c3:16:07:92:1c:f2:55:
         a0:d3:c6:02:a4:77:bc:73:14:25:12:d9:82:5d:47:6b:42:da:
         11:b1:96:4f:2b:a6:13:b0:8b:cc:d1:37:26:da:71:62:87:ab:
         1e:d8:cc:49:44:05:9f:c2:c2:0f:15:f4:80:38:db:4a:2d:10:
         7b:a2:67:96:56:9c:20:f6:8e:30:31:3e:08:4b:aa:85:0f:56:
         44:93:06:8c:7d:c0:92:1b:89:f7:19:84:f9:52:77:ad:db:8a:
         ab:06:8b:5b:64:87:8e:57:51:b4:1d:18:4b:10:17:c5:fb:8f:
         c3:6d:c0:74:cb:b4:d5:ff:97:6c:97:dd:f0:a6:e2:45:c3:48:
         6d:de:06:aa:0f:81:60:e2:f5:d2:e3:f7:ea:57:ae:34:65:07:
         61:05:a5:3f:34:ca:99:83:e7:ad:93:3d:92:13:34:45:7b:84:
         43:7c:7d:fd:33:7a:96:39:b9:f1:cf:af:94:f4:ce:b1:68:dd:
         32:88:81:79:56:96:55:5b:0a:f1:94:26:fb:4a:03:d0:91:93:
         b0:82:84:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:38:15 2025 by rpki-client