Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
File:                     G4GY4pfs-4-1GveWJNO2hKH5tR0.mft (raw, json)
Hash identifier:          vLfxwga5cqJwMM/m4oteZzGtsgtfRRlbiSXFfLLkdtk=
Subject key identifier:   6E:09:43:9B:FB:87:B9:C6:77:6C:50:63:EB:65:3C:F0:1E:6B:68:33
Authority key identifier: 1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D
Certificate issuer:       /CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
Certificate serial:       22B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
Manifest number:          22AD
Signing time:             Sat 18 Oct 2025 16:06:18 +0000
Manifest this update:     Sat 18 Oct 2025 16:06:17 +0000
Manifest next update:     Sat 25 Oct 2025 16:06:17 +0000
Files and hashes:         1: G4GY4pfs-4-1GveWJNO2hKH5tR0.crl (hash: YEhFTyWk4p6L0XxVi78FgAbo2gSki7xM7fScL65IxlI=)
                          2: EBEA51DC4EE311EFA1615635C4F9AE02.roa (hash: Trb/xXQ89mwzGyAL+1mOumJDf5X3SVH7b+Li/DvO+lE=)
                          3: 27CF6BE84EED11EF8D4BE30CC4F9AE02.roa (hash: vUHNM7b/7rHUhQuKzV89H4uhi15N4fuBRHxCcyjL5as=)
                          4: EDB5F114A63711EF89F3B833C4F9AE02.roa (hash: yRPrheegIm3V93UgDt8N+OL/cPpnwv9rIo76kYVagnE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl
                          rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8886 (0x22b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E47C, serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
        Validity
            Not Before: Oct 18 16:06:17 2025 GMT
            Not After : Oct 25 16:06:17 2025 GMT
        Subject: CN=68f3baf9-387d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0d:ab:af:4f:24:30:7c:3f:63:61:4c:13:73:
                    34:71:0e:d7:8d:37:ba:c4:16:04:72:17:b3:22:74:
                    86:e1:fd:41:1c:94:dc:3d:5d:eb:40:32:f8:6c:38:
                    71:c4:f7:f4:af:10:5b:56:2c:a6:18:10:ef:dc:fd:
                    5d:d3:45:ee:d5:67:d4:ab:5e:9a:f5:a4:b2:94:2f:
                    bd:27:5f:dd:6d:17:6a:d7:86:6e:40:0e:00:b5:58:
                    d2:1e:c1:0b:36:0c:df:5a:29:77:e6:be:81:40:0e:
                    0e:4f:3f:56:da:8e:7f:2e:61:18:f5:db:af:ee:8f:
                    02:8c:96:34:0b:0d:51:73:3b:16:21:58:40:b9:ca:
                    9b:00:54:03:85:39:ec:54:6e:2c:b0:bd:f0:ac:6f:
                    b0:3c:65:0c:aa:8c:f4:48:c0:cb:28:e7:ae:d7:63:
                    7f:bf:cd:39:8d:9d:bd:e1:89:fd:d4:bb:ea:1e:62:
                    ee:8c:bb:6a:66:90:57:5e:83:4c:35:9d:85:d2:8d:
                    4d:97:c8:f3:78:1a:d9:de:35:9c:f5:de:4a:52:c4:
                    4c:7f:0b:ef:59:8b:14:5e:63:c2:30:93:68:99:f9:
                    35:19:fc:60:bc:92:6f:1e:98:c6:c0:90:d3:8a:93:
                    d3:1f:a6:d1:e8:5f:f0:3f:60:ef:0e:c8:03:05:16:
                    61:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:09:43:9B:FB:87:B9:C6:77:6C:50:63:EB:65:3C:F0:1E:6B:68:33
            X509v3 Authority Key Identifier:
                keyid:1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:37:1a:63:0b:bd:d0:39:b6:ba:ea:95:78:54:b4:f2:cd:f6:
         f3:b2:c7:5e:32:ac:c2:8e:84:35:a9:75:6d:e0:96:e6:9c:9f:
         3e:18:f5:8b:75:c4:d2:07:dc:94:76:83:a0:d1:1a:ac:c1:54:
         92:2f:73:fa:8d:ba:8c:1e:0e:d5:9b:55:e5:8f:78:81:ad:c9:
         27:02:18:19:e1:3b:0f:7c:0f:f4:ee:5d:7f:56:81:b4:5d:0f:
         56:21:6f:bd:1d:76:77:7a:9c:b0:52:47:36:9c:aa:b3:1d:83:
         92:f2:0e:55:a8:f7:5d:bb:f3:f0:4e:12:56:9a:02:ac:a6:4e:
         11:5a:3c:7b:5f:c4:fc:83:c8:4f:5f:17:3d:6c:cc:cd:fb:15:
         11:28:c5:4a:1d:2a:3e:0d:34:8a:2d:41:25:e7:ee:9a:e0:a1:
         05:15:98:c2:80:40:69:41:0d:db:1f:60:8c:c1:e6:bc:84:09:
         82:3d:56:78:95:5f:2a:0e:a8:c4:8b:88:50:92:a9:e1:4e:ef:
         92:a3:ce:22:59:e3:d1:9a:67:29:b4:06:02:2d:52:86:33:e5:
         73:07:ac:ab:89:99:57:e5:1b:75:29:cc:74:8c:5a:49:0a:23:
         4f:b3:77:4b:58:59:13:f0:b5:3e:0d:c7:5b:4b:28:53:db:88:
         70:fa:7d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:41:43 2025 by rpki-client