Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
File:                     gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft (raw, json)
Hash identifier:          nWbAbmKb00sgEo11re5eMP7eDls1F9ecNq5VyUwUWXQ=
Subject key identifier:   37:9F:3C:E2:16:F1:86:97:09:57:18:FB:45:B0:7B:D0:26:1B:08:7E
Authority key identifier: 81:8B:81:22:95:46:F6:4A:98:0C:3D:86:EC:52:F3:11:94:F2:FD:8E
Certificate issuer:       /CN=A916BC97/serialNumber=818B81229546F64A980C3D86EC52F31194F2FD8E
Certificate serial:       08F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
Manifest number:          08DF
Signing time:             Sat 18 Oct 2025 21:31:34 +0000
Manifest this update:     Sat 18 Oct 2025 21:31:33 +0000
Manifest next update:     Sat 25 Oct 2025 21:31:33 +0000
Files and hashes:         1: gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl (hash: Run1CeBmsaKrF/fQ0U5XzrMbpeGoXDpm0gbpHSrTNyc=)
                          2: 50998080BCE911EAA0114B70C4F9AE02.roa (hash: O/NO2IfdBXfSyfMwGAkT+IgbQvZgtu7lJ1dsaQhj82E=)
                          3: C011E716845611EFA55F8043C4F9AE02.roa (hash: pkFZgeOoJ8iOEM13k0fNneKGX0rGx1nkPohIG5roll0=)
                          4: EF2481168BCA11EDBED45E54C4F9AE02.roa (hash: yDLtGnYU5lMrLDnFX8vRyhLOoi06rgga2yxVGlgTVrU=)
                          5: 8867D06A4D8211EF8C95A448C4F9AE02.roa (hash: WGI7L4FYzb6GYe2YpV7oc/HelbiNBr643jFG1FE873s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl
                          rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2291 (0x8f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BC97, serialNumber=818B81229546F64A980C3D86EC52F31194F2FD8E
        Validity
            Not Before: Oct 18 21:31:33 2025 GMT
            Not After : Oct 25 21:31:33 2025 GMT
        Subject: CN=68f40736-f9dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:60:0b:51:3f:8b:f7:63:27:0a:06:ed:a2:03:
                    8f:5e:44:ed:53:2d:63:e3:ba:06:af:91:89:5b:a1:
                    5d:4b:14:aa:34:88:43:dc:f6:6d:1e:ec:57:8d:72:
                    b1:78:bc:f1:4a:44:67:c5:c7:06:03:84:c2:e7:aa:
                    a7:d4:94:6f:4e:8b:a0:3c:bd:ff:52:93:d2:83:ed:
                    05:d3:9f:54:7e:48:b7:51:bd:f1:e5:44:25:c4:d5:
                    8f:2f:cd:cd:72:2e:e6:14:d4:26:80:5a:34:a2:8c:
                    ab:e1:9a:8b:59:fc:f6:6e:31:fc:bc:2c:2b:c2:de:
                    ab:9b:ff:a2:41:1b:75:d1:11:95:49:d5:79:e1:99:
                    60:1e:0c:a8:8b:59:c9:e5:66:d9:96:49:0b:99:8f:
                    02:14:d4:dd:58:0b:84:fe:58:15:3c:fa:8b:be:ec:
                    c0:8d:57:3a:ea:c1:c6:19:e0:c6:e3:06:72:76:5d:
                    2d:11:15:de:df:84:1b:28:15:88:e5:fc:f3:86:2d:
                    9f:0e:1c:ba:c4:9e:55:4f:9c:fd:ed:fe:ea:bc:c8:
                    31:21:2b:f7:21:2d:04:3c:ae:81:5d:f8:83:c5:90:
                    17:4a:c4:25:36:08:6a:71:24:46:07:30:0f:dd:52:
                    e5:55:bd:04:6a:6a:b9:23:5f:97:73:e1:f1:d0:0e:
                    a5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9F:3C:E2:16:F1:86:97:09:57:18:FB:45:B0:7B:D0:26:1B:08:7E
            X509v3 Authority Key Identifier:
                keyid:81:8B:81:22:95:46:F6:4A:98:0C:3D:86:EC:52:F3:11:94:F2:FD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ef:0f:f9:1f:97:c9:e9:9c:ac:50:08:11:59:2f:11:19:9d:
         a4:8d:04:74:42:84:85:8f:d9:8e:f5:8b:66:21:fe:99:dc:f6:
         0a:c8:43:c6:57:48:d0:c3:cd:58:3b:16:98:e1:26:03:49:a4:
         d6:d3:4c:57:d6:58:a7:37:03:a3:3e:7c:20:22:b7:36:3d:c0:
         3d:a2:5d:70:6d:e0:3d:38:22:72:77:30:ce:2d:5e:31:19:93:
         a4:76:48:53:40:8e:7f:e0:55:67:6f:9a:1c:f3:27:b2:ef:7e:
         a0:28:32:90:b1:bf:a9:f3:d9:35:22:0f:52:74:38:95:97:2c:
         29:cd:9f:b4:96:ae:80:fd:f1:33:50:da:81:24:12:c3:ee:d2:
         59:28:9f:d5:63:8f:5b:2b:72:81:1f:19:82:48:8c:24:64:ea:
         12:88:3b:23:16:d8:17:21:d0:84:47:ea:ef:80:97:1b:69:78:
         df:66:1f:49:9b:e0:ce:19:a6:bc:7b:18:e9:6b:8f:ce:31:4f:
         74:ad:03:33:b2:d6:ac:41:0b:7d:69:a5:61:6a:11:f3:58:e1:
         ce:d6:08:33:1f:dd:ad:30:de:d9:7a:37:ce:06:3d:4a:d0:30:
         ac:f4:02:83:62:82:ce:e9:dc:9f:a6:4f:6b:cd:60:c2:cf:a2:
         79:51:05:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkJDOTcxMTAvBgNVBAUTKDgxOEI4MTIyOTU0NkY2NEE5ODBDM0Q4NkVDNTJGMzEx
OTRGMkZEOEUwHhcNMjUxMDE4MjEzMTMzWhcNMjUxMDI1MjEzMTMzWjAYMRYwFAYD
VQQDEw02OGY0MDczNi1mOWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyWALUT+L92MnCgbtogOPXkTtUy1j47oGr5GJW6FdSxSqNIhD3PZtHuxXjXKx
eLzxSkRnxccGA4TC56qn1JRvTougPL3/UpPSg+0F059Ufki3Ub3x5UQlxNWPL83N
ci7mFNQmgFo0ooyr4ZqLWfz2bjH8vCwrwt6rm/+iQRt10RGVSdV54ZlgHgyoi1nJ
5WbZlkkLmY8CFNTdWAuE/lgVPPqLvuzAjVc66sHGGeDG4wZydl0tERXe34QbKBWI
5fzzhi2fDhy6xJ5VT5z97f7qvMgxISv3IS0EPK6BXfiDxZAXSsQlNghqcSRGBzAP
3VLlVb0Eamq5I1+Xc+Hx0A6lmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDefPOIW
8YaXCVcY+0Wwe9AmGwh+MB8GA1UdIwQYMBaAFIGLgSKVRvZKmAw9huxS8xGU8v2O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkM5Ny9BMEIxRTQ0Q0JD
RTcxMUVBOUVERjNFNkRDNEY5QUUwMi9nWXVCSXBWRzlrcVlERDJHN0ZMekVaVHlf
WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dZdUJJcFZHOWtxWUREMkc3Rkx6RVpUeV9ZNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QkM5Ny9BMEIxRTQ0Q0JDRTcxMUVBOUVERjNFNkRDNEY5QUUwMi9nWXVCSXBWRzlr
cVlERDJHN0ZMekVaVHlfWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCR7w/5H5fJ6ZysUAgRWS8RGZ2kjQR0QoSFj9mO9YtmIf6Z3PYKyEPG
V0jQw81YOxaY4SYDSaTW00xX1linNwOjPnwgIrc2PcA9ol1wbeA9OCJydzDOLV4x
GZOkdkhTQI5/4FVnb5oc8yey736gKDKQsb+p89k1Ig9SdDiVlywpzZ+0lq6A/fEz
UNqBJBLD7tJZKJ/VY49bK3KBHxmCSIwkZOoSiDsjFtgXIdCER+rvgJcbaXjfZh9J
m+DOGaa8exjpa4/OMU90rQMzstasQQt9aaVhahHzWOHO1ggzH92tMN7ZejfOBj1K
0DCs9AKDYoLO6dyfpk9rzWDCz6J5UQUx
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:48:16 2025 by rpki-client