Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
File:                     GiOYaENWXf_IAPgP8pa6sa03FOw.mft (raw, json)
Hash identifier:          OCMlr65wd/EW0lqPZMCQS8E1Kz32xtCRkFOanyO3ZJs=
Subject key identifier:   3E:F0:81:62:12:91:EB:59:7C:7E:CF:4C:DA:1D:5B:D5:1E:B9:A2:22
Authority key identifier: 1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC
Certificate issuer:       /CN=A911F55D/serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC
Certificate serial:       03A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
Manifest number:          039B
Signing time:             Sun 19 Oct 2025 02:45:33 +0000
Manifest this update:     Sun 19 Oct 2025 02:45:33 +0000
Manifest next update:     Sun 26 Oct 2025 02:45:33 +0000
Files and hashes:         1: GiOYaENWXf_IAPgP8pa6sa03FOw.crl (hash: Y0AHuxTvy3rU02h+iL4CydzAC63PqkY0z8FRfXOllSY=)
                          2: 96C26F3EB7AD11ECA2E94A7EC4F9AE02.roa (hash: 07YWg9g83guD20U5WpW8ibBwLyL4HcWmJhNvyQx5O2s=)
                          3: 977ED926B7AD11ECA2E94A7EC4F9AE02.roa (hash: l9YGphPLih+4p0TDLk8PQxvCJvvtiquaBZzq1Oot6Xw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl
                          rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 933 (0x3a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F55D, serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC
        Validity
            Not Before: Oct 19 02:45:33 2025 GMT
            Not After : Oct 26 02:45:33 2025 GMT
        Subject: CN=68f450cd-3c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b8:80:00:3e:73:c8:9a:6b:af:58:c7:ac:63:
                    3d:bf:8c:14:48:ef:50:e1:40:fb:7b:69:36:3a:ff:
                    83:f9:5e:b5:05:4d:ca:0a:2e:ae:11:10:83:ab:0e:
                    e8:d7:9b:95:e5:3b:27:5a:8e:1a:f2:71:c2:7c:4b:
                    fc:e4:db:e7:7f:59:61:59:d8:02:03:ce:b3:f6:28:
                    e8:bf:0d:2f:34:68:f9:ff:21:3a:ea:0e:a8:3f:17:
                    be:05:a2:7d:31:ee:07:8a:eb:1b:fe:a9:97:ce:33:
                    10:b7:ea:7e:bd:8b:82:4a:9f:dc:90:50:e2:0a:6e:
                    5e:cb:a0:08:66:0d:45:4c:77:1b:48:77:47:fa:92:
                    0b:bc:64:8e:fe:9e:60:ad:84:87:5e:9c:70:da:9a:
                    7f:23:70:5c:bb:4a:7c:de:e6:cd:10:de:73:8b:c5:
                    e8:0b:48:da:b6:44:0b:80:7a:3b:25:86:9b:89:4b:
                    bc:ee:0f:3c:51:89:0b:1d:d7:83:73:31:65:b2:f4:
                    ad:1c:0a:8b:c7:74:0b:e5:07:38:5e:21:f5:c9:bf:
                    ed:21:a4:8f:f9:9e:ba:95:bf:23:a7:2d:8a:89:6a:
                    23:cc:c2:c0:b7:33:e1:b1:25:89:e6:1a:4c:8b:02:
                    db:12:e0:5a:2f:64:16:08:ed:e4:b9:55:c5:75:83:
                    d4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F0:81:62:12:91:EB:59:7C:7E:CF:4C:DA:1D:5B:D5:1E:B9:A2:22
            X509v3 Authority Key Identifier:
                keyid:1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:5b:1e:2b:ed:ae:d3:f4:c1:de:a7:83:75:8a:69:ed:5c:e7:
         35:6b:f8:26:eb:26:4e:d8:c2:f8:52:63:b9:a7:c2:4b:98:eb:
         20:c4:c4:8f:44:63:68:5e:4e:9c:47:52:89:10:63:45:2c:ba:
         34:5f:7e:17:03:90:8b:c2:b5:db:af:5e:64:a4:cc:8d:80:dc:
         2a:d3:3b:e1:14:78:ac:28:50:ed:c3:4f:b3:e9:6d:20:35:50:
         fc:c4:47:cc:dd:fa:95:b6:15:cb:7a:de:28:aa:e0:6a:a3:6f:
         57:f9:82:1f:85:07:fd:27:f8:f0:67:34:aa:8c:69:6d:50:59:
         f5:a2:0f:1d:b5:52:fe:a0:b3:55:fd:03:8d:81:2a:a5:8a:5e:
         3b:df:60:ce:92:01:73:81:6d:d5:6f:05:7d:75:63:6f:40:01:
         0b:67:02:0f:49:16:29:a8:ae:c4:91:33:fc:8a:bc:94:fc:98:
         f9:e8:e5:e7:b9:fc:a3:23:4f:78:3a:c3:85:5b:ca:b1:60:f8:
         21:6e:f7:94:9b:95:24:d5:04:25:b4:a1:bb:ae:6c:d0:b4:45:
         cd:9a:06:0e:09:15:f6:86:be:7e:80:e6:29:01:c6:29:0e:6f:
         99:a7:50:eb:66:2a:ea:5c:a2:1b:7b:a7:2e:20:15:29:4c:4b:
         cd:92:22:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:46:57 2025 by rpki-client