Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft
File:                     GWzuJffRt-pwjOGIczcUM5LORxw.mft (raw, json)
Hash identifier:          TfGk0spw5uYkir3Rw8gEEfj1G4Wpz7BJWN3/IjHEaOo=
Subject key identifier:   30:EA:57:70:A2:B5:02:B3:07:6C:94:87:17:50:A1:A1:87:C5:17:40
Authority key identifier: 19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C
Certificate issuer:       /CN=A9154340/serialNumber=196CEE25F7D1B7EA708CE1887337143392CE471C
Certificate serial:       063C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft
Manifest number:          0636
Signing time:             Fri 22 Aug 2025 22:41:50 +0000
Manifest this update:     Fri 22 Aug 2025 22:41:49 +0000
Manifest next update:     Fri 29 Aug 2025 22:41:49 +0000
Files and hashes:         1: GWzuJffRt-pwjOGIczcUM5LORxw.crl (hash: SuO7vN5Lqtw+iH27Wgx0uBcz0LRtOQWXT2d6iPwPbF0=)
                          2: 8BF559B2A70111EBBAA7C612C4F9AE02.roa (hash: f8Wgv+IoxprOJRGqIQDg8nNXDjXWODO4WSnYU8FiMVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.crl
                          rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:41:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1596 (0x63c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154340, serialNumber=196CEE25F7D1B7EA708CE1887337143392CE471C
        Validity
            Not Before: Aug 22 22:41:49 2025 GMT
            Not After : Aug 29 22:41:49 2025 GMT
        Subject: CN=68a8f22e-da37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a6:85:39:fc:c6:39:f7:c8:d9:f5:59:b7:80:
                    7b:ae:59:b5:80:69:bd:54:d1:c9:92:e1:95:ce:62:
                    84:7c:ee:b9:03:4a:bb:97:c5:17:93:83:6e:4a:04:
                    73:a9:bf:a6:61:16:79:51:1b:e9:9e:4d:ad:24:fd:
                    71:a7:8f:97:ef:4c:f8:e6:af:c4:2e:fa:d6:78:5e:
                    97:57:4a:77:0c:d7:fd:4a:df:fb:73:64:80:84:a9:
                    a6:30:03:1d:23:b9:6e:02:2b:02:28:b2:a6:3b:fa:
                    26:78:ac:ed:02:e1:d2:31:4a:78:96:65:d5:b7:8d:
                    24:f9:4c:91:c4:e0:f1:ec:11:15:4b:e9:83:61:c2:
                    8d:1c:6b:ef:f2:0e:72:14:84:74:b8:6d:da:5e:48:
                    f5:59:1b:6e:36:2f:5f:a2:74:7f:74:40:7c:43:ef:
                    9f:4d:73:78:79:50:b6:d1:8a:24:cb:8b:77:3f:bb:
                    a6:ee:4e:d6:6c:1b:5a:89:31:b3:56:4a:64:ef:74:
                    ff:70:9f:6c:09:53:f6:60:f6:05:f2:68:ec:ca:9e:
                    20:34:4a:31:3e:b7:cf:72:ea:31:aa:7f:79:ac:99:
                    d6:fa:b6:d7:3b:7b:73:24:5e:87:74:39:fc:ae:23:
                    1c:57:a5:87:f4:7f:09:e9:0a:4b:9b:23:b1:0d:4e:
                    68:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EA:57:70:A2:B5:02:B3:07:6C:94:87:17:50:A1:A1:87:C5:17:40
            X509v3 Authority Key Identifier:
                keyid:19:6C:EE:25:F7:D1:B7:EA:70:8C:E1:88:73:37:14:33:92:CE:47:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GWzuJffRt-pwjOGIczcUM5LORxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154340/F8E7607CA67711EB8B4BB13EC4F9AE02/GWzuJffRt-pwjOGIczcUM5LORxw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:6b:2f:65:02:a9:3f:61:c3:87:38:73:9e:16:6a:0e:6c:4d:
         d1:d6:67:2d:77:03:9b:0c:d4:8e:a3:95:06:e2:d8:cc:f5:12:
         d5:24:b7:65:83:b3:ef:8a:8d:c3:f0:b5:e7:10:68:aa:bf:1c:
         ee:33:b9:c8:79:4e:90:33:5d:f8:8a:ed:42:f6:5d:bb:8d:a6:
         a8:77:93:4f:4b:73:fa:5f:fc:fe:89:ff:cd:b7:47:be:6b:10:
         92:51:4a:9c:f2:e1:c3:77:b5:fe:7e:53:b0:3f:76:6a:45:ee:
         dd:67:80:fb:35:e7:e0:66:3c:02:0d:cb:21:19:a4:ee:16:89:
         e3:6a:ef:be:11:5c:3e:b2:48:d8:88:5f:7f:7b:54:20:c2:a9:
         2a:49:78:a8:81:c1:f7:8b:f1:c6:77:60:ec:c7:a4:10:9e:6c:
         d7:a5:a3:bb:59:0a:90:f1:64:e1:fa:68:b1:d5:60:42:83:8d:
         1c:9a:99:38:a3:fb:3b:c9:d3:cd:86:68:d8:d8:f9:4b:9e:da:
         28:04:3c:6b:18:40:c8:03:7d:43:9e:cb:ec:36:64:28:f2:25:
         eb:c1:cf:2c:b7:01:3d:03:d3:f2:58:5e:d0:75:29:a6:fa:20:
         52:de:3d:57:23:d1:58:9f:e0:42:68:b0:36:ce:39:8e:bf:25:
         17:4f:e5:60
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQzNDAxMTAvBgNVBAUTKDE5NkNFRTI1RjdEMUI3RUE3MDhDRTE4ODczMzcxNDMz
OTJDRTQ3MUMwHhcNMjUwODIyMjI0MTQ5WhcNMjUwODI5MjI0MTQ5WjAYMRYwFAYD
VQQDEw02OGE4ZjIyZS1kYTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr6aFOfzGOffI2fVZt4B7rlm1gGm9VNHJkuGVzmKEfO65A0q7l8UXk4NuSgRz
qb+mYRZ5URvpnk2tJP1xp4+X70z45q/ELvrWeF6XV0p3DNf9St/7c2SAhKmmMAMd
I7luAisCKLKmO/omeKztAuHSMUp4lmXVt40k+UyRxODx7BEVS+mDYcKNHGvv8g5y
FIR0uG3aXkj1WRtuNi9fonR/dEB8Q++fTXN4eVC20Yoky4t3P7um7k7WbBtaiTGz
Vkpk73T/cJ9sCVP2YPYF8mjsyp4gNEoxPrfPcuoxqn95rJnW+rbXO3tzJF6HdDn8
riMcV6WH9H8J6QpLmyOxDU5oNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDqV3Ci
tQKzB2yUhxdQoaGHxRdAMB8GA1UdIwQYMBaAFBls7iX30bfqcIzhiHM3FDOSzkcc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDM0MC9GOEU3NjA3Q0E2
NzcxMUVCOEI0QkIxM0VDNEY5QUUwMi9HV3p1SmZmUnQtcHdqT0dJY3pjVU01TE9S
eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0dXenVKZmZSdC1wd2pPR0ljemNVTTVMT1J4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDM0MC9GOEU3NjA3Q0E2NzcxMUVCOEI0QkIxM0VDNEY5QUUwMi9HV3p1SmZmUnQt
cHdqT0dJY3pjVU01TE9SeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAbay9lAqk/YcOHOHOeFmoObE3R1mctdwObDNSOo5UG4tjM9RLVJLdl
g7Pvio3D8LXnEGiqvxzuM7nIeU6QM134iu1C9l27jaaod5NPS3P6X/z+if/Nt0e+
axCSUUqc8uHDd7X+flOwP3ZqRe7dZ4D7NefgZjwCDcshGaTuFonjau++EVw+skjY
iF9/e1QgwqkqSXiogcH3i/HGd2Dsx6QQnmzXpaO7WQqQ8WTh+mix1WBCg40cmpk4
o/s7ydPNhmjY2PlLntooBDxrGEDIA31DnsvsNmQo8iXrwc8stwE9A9PyWF7QdSmm
+iBS3j1XI9FYn+BCaLA2zjmOvyUXT+Vg
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:33:39 2025 by rpki-client