Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft
File:                     g_-qp9mkdZKx1MWD3-v67qJxY-8.mft (raw, json)
Hash identifier:          tSSLCfAvGP7waSk4klcW7nuRHm1jG8U4E9gBKzBAyXA=
Subject key identifier:   A8:A9:D8:C1:64:D0:19:5C:18:48:18:42:49:DB:FC:FA:59:9A:77:3D
Authority key identifier: 83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF
Certificate issuer:       /CN=A9162557/serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF
Certificate serial:       0E9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft
Manifest number:          0E96
Signing time:             Mon 20 Oct 2025 18:12:30 +0000
Manifest this update:     Mon 20 Oct 2025 18:12:30 +0000
Manifest next update:     Mon 27 Oct 2025 18:12:30 +0000
Files and hashes:         1: g_-qp9mkdZKx1MWD3-v67qJxY-8.crl (hash: /qzPKQfx99qiTYmHv5lNxfJfDhOv82rPefaM4GAeBrY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.crl
                          rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 18:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3741 (0xe9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162557, serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF
        Validity
            Not Before: Oct 20 18:12:30 2025 GMT
            Not After : Oct 27 18:12:30 2025 GMT
        Subject: CN=68f67b8e-93c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a3:f4:b1:fe:75:db:32:6e:50:50:53:4c:a9:
                    71:9b:d8:73:2e:61:36:06:a0:ef:0b:42:8b:62:57:
                    15:28:3a:b5:0b:df:d3:84:aa:9a:f2:dc:1b:89:68:
                    f8:df:54:f6:32:b1:2f:01:b7:c4:b0:97:98:86:81:
                    27:1f:a2:36:17:f8:dd:04:6a:3e:30:63:41:e1:cf:
                    ae:3d:c0:09:f7:32:91:e0:ed:ac:e8:7e:f9:80:5e:
                    d4:a0:db:c3:4e:6a:c6:ae:3a:29:ce:33:32:f6:49:
                    a2:70:1b:28:18:b1:40:38:53:1e:53:9f:ec:ab:bf:
                    80:c0:f0:05:4a:0a:1b:d6:98:0c:e7:ef:64:fd:14:
                    dc:3b:97:f3:a2:e4:6a:72:f8:75:c7:da:29:a6:8c:
                    e9:db:e3:24:24:8f:d1:21:b5:e9:c7:f8:16:8b:2e:
                    97:9c:50:63:00:12:8e:4a:38:c6:ef:3d:9c:98:89:
                    ec:03:fc:27:1b:f1:41:83:1c:0c:16:2c:9a:29:25:
                    e7:02:f3:10:94:33:71:8a:41:bd:bc:4b:5f:07:4d:
                    f8:a9:20:69:3e:07:5e:c8:db:96:39:3e:3b:4b:21:
                    d4:0a:80:07:ce:aa:5f:9e:5b:ed:4f:01:6f:24:24:
                    01:c1:ce:78:10:19:5f:97:a6:e1:b6:e9:ee:d0:17:
                    86:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A9:D8:C1:64:D0:19:5C:18:48:18:42:49:DB:FC:FA:59:9A:77:3D
            X509v3 Authority Key Identifier:
                keyid:83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:66:b0:df:f7:ca:55:a5:b0:16:d0:2c:1c:5c:ee:9f:90:48:
         ae:36:78:76:11:0f:77:45:6f:cb:77:4b:9f:6c:84:51:fd:04:
         e5:3b:db:6b:50:1e:d1:20:94:3b:4c:c1:38:81:2b:4e:32:2a:
         7f:e1:0d:9a:a4:29:4f:4b:f5:8f:76:ee:66:f9:3a:74:19:fb:
         c0:41:b2:f4:91:49:de:72:7c:20:a7:92:00:ea:69:5c:02:c3:
         dd:55:ba:07:2e:cf:f9:ed:26:4b:a8:ef:41:84:48:a4:58:7d:
         b1:64:6e:ea:03:54:ad:4d:f9:f6:99:57:70:55:bf:3f:84:ac:
         27:0e:e8:c7:14:07:8d:ee:c9:25:ba:9b:e1:dc:48:82:7a:75:
         41:f6:0c:36:0c:18:33:d6:74:38:e8:b9:27:d2:de:14:12:32:
         97:8e:dd:b2:50:f3:09:f2:61:78:4b:30:92:82:9e:c7:6b:12:
         2b:65:02:c9:e0:d3:6f:3f:26:33:21:c0:aa:9f:14:1a:1b:af:
         9e:42:0a:55:a2:c1:44:09:d1:ad:85:9f:51:60:c5:58:df:93:
         2e:85:f3:61:3b:eb:67:66:95:85:26:6c:41:41:29:d3:d2:2a:
         ed:02:33:bf:25:61:aa:3a:a8:37:b1:63:00:f3:f0:39:cb:ac:
         b4:1e:4f:87
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjI1NTcxMTAvBgNVBAUTKDgzRkZBQUE3RDlBNDc1OTJCMUQ0QzU4M0RGRUJGQUVF
QTI3MTYzRUYwHhcNMjUxMDIwMTgxMjMwWhcNMjUxMDI3MTgxMjMwWjAYMRYwFAYD
VQQDEw02OGY2N2I4ZS05M2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2aP0sf512zJuUFBTTKlxm9hzLmE2BqDvC0KLYlcVKDq1C9/ThKqa8twbiWj4
31T2MrEvAbfEsJeYhoEnH6I2F/jdBGo+MGNB4c+uPcAJ9zKR4O2s6H75gF7UoNvD
TmrGrjopzjMy9kmicBsoGLFAOFMeU5/sq7+AwPAFSgob1pgM5+9k/RTcO5fzouRq
cvh1x9oppozp2+MkJI/RIbXpx/gWiy6XnFBjABKOSjjG7z2cmInsA/wnG/FBgxwM
FiyaKSXnAvMQlDNxikG9vEtfB034qSBpPgdeyNuWOT47SyHUCoAHzqpfnlvtTwFv
JCQBwc54EBlfl6bhtunu0BeGuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKip2MFk
0BlcGEgYQknb/PpZmnc9MB8GA1UdIwQYMBaAFIP/qqfZpHWSsdTFg9/r+u6icWPv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjU1Ny9CNjU5RUIxODlF
QUQxMUU5QUJGQzI1N0NDNEY5QUUwMi9nXy1xcDlta2RaS3gxTVdEMy12NjdxSnhZ
LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dfLXFwOW1rZFpLeDFNV0QzLXY2N3FKeFktOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MjU1Ny9CNjU5RUIxODlFQUQxMUU5QUJGQzI1N0NDNEY5QUUwMi9nXy1xcDlta2Ra
S3gxTVdEMy12NjdxSnhZLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBgZrDf98pVpbAW0CwcXO6fkEiuNnh2EQ93RW/Ld0ufbIRR/QTlO9tr
UB7RIJQ7TME4gStOMip/4Q2apClPS/WPdu5m+Tp0GfvAQbL0kUnecnwgp5IA6mlc
AsPdVboHLs/57SZLqO9BhEikWH2xZG7qA1StTfn2mVdwVb8/hKwnDujHFAeN7skl
upvh3EiCenVB9gw2DBgz1nQ46Lkn0t4UEjKXjt2yUPMJ8mF4SzCSgp7HaxIrZQLJ
4NNvPyYzIcCqnxQaG6+eQgpVosFECdGthZ9RYMVY35MuhfNhO+tnZpWFJmxBQSnT
0irtAjO/JWGqOqg3sWMA8/A5y6y0Hk+H
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:11:15 2025 by rpki-client