Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft
File:                     GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft (raw, json)
Hash identifier:          KtfmxpXpGXnzOylvQm0e5tnwfi86G1pkyXmcjlW+vNA=
Subject key identifier:   D3:6F:CC:14:64:8A:77:5F:AF:1F:32:A2:D5:E7:31:E8:7F:C0:66:01
Authority key identifier: 19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39
Certificate issuer:       /CN=A913F4B0/serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039
Certificate serial:       0E96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft
Manifest number:          0E7F
Signing time:             Sat 18 Oct 2025 18:21:50 +0000
Manifest this update:     Sat 18 Oct 2025 18:21:50 +0000
Manifest next update:     Sat 25 Oct 2025 18:21:50 +0000
Files and hashes:         1: GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl (hash: CeSPZjX9XxVLyG4juDkA40bfRXFdVIJMgdLybINKAZ8=)
                          2: 192968FAA43411E9BF46490BC4F9AE02.roa (hash: m1DwXGY9qRUMrm5nwSa7A62fQnkXzMeC3XhEB70M3Ec=)
                          3: 7FC2BA3ACEE211EDAF41BC25C4F9AE02.roa (hash: 8+IpnBwQHZFdU/qAAvoleEEL7Zd7U6oO3b3IOyhASzo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl
                          rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3734 (0xe96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F4B0, serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039
        Validity
            Not Before: Oct 18 18:21:50 2025 GMT
            Not After : Oct 25 18:21:50 2025 GMT
        Subject: CN=68f3dabe-7150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:91:2d:d0:76:1d:82:45:10:ee:64:f0:3b:6e:
                    a6:91:3c:21:87:36:d0:22:4a:c6:ca:3a:53:47:ec:
                    3c:ae:4d:d6:db:f9:e0:33:4c:f0:c3:94:51:29:d7:
                    e9:d0:d3:6e:7d:3c:eb:e9:83:a2:55:9a:4e:c0:5f:
                    a2:06:78:76:94:dd:a4:68:62:c5:a8:85:2f:81:f3:
                    7f:a2:02:1b:08:7c:b8:aa:d4:d2:56:09:10:8c:28:
                    ad:67:ca:88:93:a8:7a:1d:b9:fd:7f:50:f1:81:68:
                    5a:5a:0e:6b:37:ff:9d:bf:e7:7a:ca:1e:da:fb:49:
                    aa:6d:02:5b:48:91:f0:50:48:97:e0:81:47:0d:75:
                    dc:b1:98:f4:3a:05:5a:27:08:d4:7d:ce:80:19:50:
                    b6:d2:11:f6:7f:16:e4:19:22:3b:e3:ed:ea:60:07:
                    34:8e:dd:a2:85:90:14:0e:0e:b1:4e:a9:78:17:33:
                    d1:92:5d:1a:9d:a7:94:49:2c:dc:35:59:3f:b2:34:
                    08:b0:5a:96:4b:6e:01:cb:77:1e:80:18:5f:e6:8e:
                    27:29:c8:9d:a5:e3:19:88:32:42:56:a8:be:1f:db:
                    57:8d:05:03:7d:f0:4f:a5:f0:09:a8:bb:42:df:cb:
                    ec:19:fb:7e:0d:ac:4e:e2:c9:db:43:45:8d:07:b6:
                    6c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6F:CC:14:64:8A:77:5F:AF:1F:32:A2:D5:E7:31:E8:7F:C0:66:01
            X509v3 Authority Key Identifier:
                keyid:19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c7:7c:bd:f3:f3:4f:ec:35:3d:cd:9b:26:ea:32:0a:37:b2:
         18:b4:4c:1b:7d:98:8a:05:48:94:a3:ad:d2:62:2a:5a:46:26:
         af:ef:6d:01:26:ea:f7:f0:29:a6:a4:ff:39:92:8e:fb:b7:36:
         07:bc:81:c7:7a:a8:33:f1:38:49:7b:ea:2c:70:97:2b:04:c9:
         41:18:5e:62:19:8d:20:90:b0:b8:d9:d2:37:64:ec:26:53:68:
         df:1a:84:f2:4c:99:b9:be:71:77:30:92:47:5f:93:3f:9e:8e:
         50:27:13:33:1e:27:4b:07:8b:60:15:01:23:34:aa:df:c4:80:
         b3:2f:c3:1d:4f:34:44:24:e9:3b:34:13:72:6b:d2:c2:d8:87:
         79:ea:ce:66:b0:83:55:1c:2b:a2:63:e1:13:55:20:20:b0:22:
         cd:d4:93:42:1a:44:ad:01:b8:0d:32:e3:4a:c0:67:08:f1:6a:
         31:e0:02:75:a0:2c:72:26:0a:1c:b1:70:ff:51:61:9c:87:4d:
         52:66:4c:2d:e1:91:fa:08:5f:1d:c5:9b:e7:a3:7c:17:b4:16:
         67:cc:a3:61:89:8b:38:cf:6a:0e:3e:70:c5:06:ae:dd:5a:f9:
         d0:0d:f8:08:bb:24:92:7e:0a:ff:c3:32:6c:0d:42:d8:d7:81:
         61:e4:ac:99
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0Y0QjAxMTAvBgNVBAUTKDE5NENGQUVDMDc1NjExRkY4M0M0MjFDREE4Nzk3RUQz
MEVBMkQwMzkwHhcNMjUxMDE4MTgyMTUwWhcNMjUxMDI1MTgyMTUwWjAYMRYwFAYD
VQQDEw02OGYzZGFiZS03MTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1JEt0HYdgkUQ7mTwO26mkTwhhzbQIkrGyjpTR+w8rk3W2/ngM0zww5RRKdfp
0NNufTzr6YOiVZpOwF+iBnh2lN2kaGLFqIUvgfN/ogIbCHy4qtTSVgkQjCitZ8qI
k6h6Hbn9f1DxgWhaWg5rN/+dv+d6yh7a+0mqbQJbSJHwUEiX4IFHDXXcsZj0OgVa
JwjUfc6AGVC20hH2fxbkGSI74+3qYAc0jt2ihZAUDg6xTql4FzPRkl0anaeUSSzc
NVk/sjQIsFqWS24By3cegBhf5o4nKcidpeMZiDJCVqi+H9tXjQUDffBPpfAJqLtC
38vsGft+DaxO4snbQ0WNB7ZsnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNvzBRk
indfrx8yotXnMeh/wGYBMB8GA1UdIwQYMBaAFBlM+uwHVhH/g8Qhzah5ftMOotA5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjRCMC8yRDI3MDY5MkE0
MzMxMUU5ODgxNThGMDlDNEY5QUUwMi9HVXo2N0FkV0VmLUR4Q0hOcUhsLTB3Nmkw
RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dVejY3QWRXRWYtRHhDSE5xSGwtMHc2aTBEay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RjRCMC8yRDI3MDY5MkE0MzMxMUU5ODgxNThGMDlDNEY5QUUwMi9HVXo2N0FkV0Vm
LUR4Q0hOcUhsLTB3NmkwRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBHx3y98/NP7DU9zZsm6jIKN7IYtEwbfZiKBUiUo63SYipaRiav720B
Jur38CmmpP85ko77tzYHvIHHeqgz8ThJe+oscJcrBMlBGF5iGY0gkLC42dI3ZOwm
U2jfGoTyTJm5vnF3MJJHX5M/no5QJxMzHidLB4tgFQEjNKrfxICzL8MdTzREJOk7
NBNya9LC2Id56s5msINVHCuiY+ETVSAgsCLN1JNCGkStAbgNMuNKwGcI8Wox4AJ1
oCxyJgocsXD/UWGch01SZkwt4ZH6CF8dxZvno3wXtBZnzKNhiYs4z2oOPnDFBq7d
WvnQDfgIuySSfgr/wzJsDULY14Fh5KyZ
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:40:37 2025 by rpki-client