Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
File:                     GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json)
Hash identifier:          Vasi8AXpZLs1kXl8EXCyzhNtBUDk07SmbsPDc4nLI9g=
Subject key identifier:   7C:84:E3:AC:68:FB:42:64:02:98:82:7B:FD:EB:15:9C:7D:CE:09:0D
Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02
Certificate issuer:       /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
Certificate serial:       18A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
Manifest number:          1887
Signing time:             Sat 18 Oct 2025 16:51:57 +0000
Manifest this update:     Sat 18 Oct 2025 16:51:57 +0000
Manifest next update:     Sat 25 Oct 2025 16:51:57 +0000
Files and hashes:         1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: i25dlqjBnlShHzp+Pc4L4D+pIFoc+K7S3touKTwEvdY=)
                          2: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: oKQhI+83g6vqFAl7basVs7Sw18T4MEh7Nu9fLLathWs=)
                          3: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: M0giNeJUYFHHWIGJ3hp4IIxg76YLnoDKySser5XKcL4=)
                          4: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: tLIsLDvbVjMe1ALZXZoP7laPhfEa7wWbXxVFhcp282s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl
                          rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:51:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6305 (0x18a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
        Validity
            Not Before: Oct 18 16:51:57 2025 GMT
            Not After : Oct 25 16:51:57 2025 GMT
        Subject: CN=68f3c5ad-6a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:dd:f7:f6:f8:71:14:dd:1e:cc:5a:d1:fe:62:
                    f2:d6:19:03:29:ff:a8:d9:a7:ee:08:be:26:a9:bb:
                    23:1c:b0:34:bc:36:17:7e:44:25:2d:e7:bd:86:a3:
                    31:49:75:72:d7:96:f0:7d:27:c9:82:8a:76:54:92:
                    5d:bd:87:c9:e5:5f:f9:64:fa:89:03:9d:dd:a9:79:
                    42:8e:be:3e:4e:4f:15:70:9e:ae:fc:61:8e:07:1a:
                    ff:66:e1:9f:d1:45:5a:59:c8:77:64:8e:6b:19:a4:
                    bd:b1:42:e4:02:f3:80:96:2b:29:94:25:88:37:b0:
                    c5:83:32:92:12:de:a8:36:fd:5e:0e:97:36:a7:98:
                    f1:b9:88:e1:52:7a:1a:8d:9e:70:88:2e:58:ac:ee:
                    7d:cc:7f:86:2c:27:03:e3:97:cf:5f:93:bb:0c:7b:
                    1f:4f:0c:30:ee:25:13:b1:8d:e3:3f:4b:8b:a0:1a:
                    c6:74:56:45:b7:1f:ee:a1:0a:bd:cf:7c:47:18:26:
                    a1:a1:30:3b:e4:1a:25:f9:c9:ec:4a:90:58:a6:93:
                    10:fd:fe:6e:74:4b:06:be:1d:d4:67:ab:6a:8e:d7:
                    8b:98:70:5d:c6:e7:c8:9c:6b:d1:dc:9d:58:94:fc:
                    59:8b:c9:02:cc:3a:1b:ea:4c:77:70:87:8c:63:fa:
                    9e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:84:E3:AC:68:FB:42:64:02:98:82:7B:FD:EB:15:9C:7D:CE:09:0D
            X509v3 Authority Key Identifier:
                keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ff:f6:a7:d3:ab:06:62:81:85:de:b7:28:59:74:41:80:57:
         79:08:be:37:ef:b2:ec:78:17:52:15:cf:b4:e2:cc:88:0d:87:
         b5:25:cf:e0:89:76:2c:70:a3:56:ff:21:03:1f:39:ea:65:2d:
         96:bb:0e:89:29:fe:94:41:ae:62:58:2d:4e:bc:21:7c:de:30:
         82:b5:38:44:ea:59:ad:70:e1:c2:ee:fc:7e:2f:0a:c7:4d:b6:
         b6:4d:1c:8a:26:11:6c:31:2c:b7:9f:2e:26:18:d7:30:ab:c9:
         21:a1:12:84:da:fd:26:8b:62:2a:f6:f1:54:dd:77:88:f6:fe:
         f4:03:62:7d:55:9d:ca:11:67:1e:34:a2:e3:9f:e0:71:5b:2d:
         ca:ec:e2:85:f2:c3:91:19:51:7c:a5:af:fe:96:8e:5f:35:65:
         4c:7e:0c:ca:31:33:21:a5:67:8b:27:b5:39:d2:64:a1:78:e2:
         7a:41:6b:a7:e7:82:db:76:10:07:e8:31:79:22:bb:9e:74:89:
         b2:40:b1:7c:75:96:c5:1b:52:6f:5d:c9:c8:4f:58:09:33:eb:
         af:8c:c5:12:e1:0c:84:00:78:6d:5c:46:2b:e0:23:d5:68:83:
         eb:2b:dc:18:ae:d0:85:f7:6d:50:40:d7:7a:71:3d:99:c7:b1:
         92:b2:27:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:19:48 2025 by rpki-client