Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
File:                     gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft (raw, json)
Hash identifier:          DMmKLuamGUEviFnWhw/qbveX1cxUveEs9jDQpRRWkwA=
Subject key identifier:   A0:86:C1:9C:A0:42:80:FC:AC:9E:87:14:28:18:9E:08:B7:A9:49:97
Authority key identifier: 80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00
Certificate issuer:       /CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500
Certificate serial:       0679
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
Manifest number:          064F
Signing time:             Sun 19 Oct 2025 00:18:06 +0000
Manifest this update:     Sun 19 Oct 2025 00:18:06 +0000
Manifest next update:     Sun 26 Oct 2025 00:18:06 +0000
Files and hashes:         1: gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl (hash: kzG+3pdblVO7tyay9FA0XTa95P9n8HAKg5MSRiLWkDc=)
                          2: A6C94076624711EC9B815772C4F9AE02.roa (hash: XosrUy+Xd/y9+zlNKWBW88xmxi0w+unp/BWLX4a8k/0=)
                          3: 86F4D41881C811ECB5F90D48C4F9AE02.roa (hash: jcE65YGPbY23C0JRfHdMvEfT+xppldiedci4zrgXKQc=)
                          4: 899A5138691611EFBED13942C4F9AE02.roa (hash: VYrhe6Mi0RTaO+P8HqkxU1Qva61wirf2XWWIcdNAN4k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl
                          rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:18:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1657 (0x679)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175155, serialNumber=80084A34FD4F3B932C092182407B8905D9406500
        Validity
            Not Before: Oct 19 00:18:06 2025 GMT
            Not After : Oct 26 00:18:06 2025 GMT
        Subject: CN=68f42e3e-b226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:32:66:12:60:a6:6c:7b:7c:6a:c1:57:d1:bc:
                    58:ad:40:18:2b:46:56:0c:98:99:e2:47:f5:a1:6e:
                    09:b0:3c:7a:ef:80:3b:74:17:46:2b:fb:c8:a7:74:
                    2f:d3:e8:8c:0a:64:ac:40:26:dd:9b:d6:ee:c0:32:
                    cc:d8:20:b8:7c:94:31:f4:11:2f:6e:5b:82:43:37:
                    01:6f:e1:c1:18:49:3c:04:76:d6:40:37:85:6f:eb:
                    8a:d5:05:5c:f3:72:4b:08:5b:ec:f6:12:dd:58:46:
                    ca:bf:11:f3:7e:a0:58:48:19:b2:f4:47:ef:90:ba:
                    1d:4d:63:df:45:22:04:d8:4a:a8:eb:76:b0:30:5e:
                    23:f6:e3:77:e6:e3:fa:a9:50:2d:26:96:90:5d:13:
                    2a:4c:ce:c2:95:3d:5e:3d:65:f7:b7:b6:96:7f:bb:
                    09:8b:33:b4:4c:7e:10:5f:ce:8d:ac:db:42:fb:78:
                    76:99:7c:22:9e:f6:5b:d1:13:9f:fb:3c:05:a2:44:
                    94:5c:58:4a:36:35:0e:8d:df:ad:c0:3f:d6:49:53:
                    98:3b:a9:f7:6b:e4:86:aa:0a:1b:db:e4:72:9d:f5:
                    61:48:ce:3b:1b:76:91:92:04:b2:f7:ed:ce:c5:c7:
                    5c:7a:c5:95:84:1b:f0:45:1c:fa:fc:05:e8:d3:fa:
                    90:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:86:C1:9C:A0:42:80:FC:AC:9E:87:14:28:18:9E:08:B7:A9:49:97
            X509v3 Authority Key Identifier:
                keyid:80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:55:df:18:74:14:68:9f:11:77:ca:97:be:1e:51:2f:f1:e1:
         ff:16:83:fc:cd:64:6b:84:a2:6c:ac:b7:e1:71:2f:8d:3b:d5:
         87:ec:9c:62:62:31:81:fc:55:14:ed:ad:c4:ab:0d:b5:52:d0:
         41:ec:ef:69:eb:f2:ed:9f:93:81:22:5b:d9:94:ca:fa:ed:c9:
         f7:fc:98:47:75:65:ec:e8:7d:70:1d:ec:f3:90:7b:a5:51:86:
         3d:41:49:df:08:f5:c1:1d:f4:23:ef:e3:2b:42:ff:31:1b:92:
         16:27:53:50:1c:d3:bc:2f:7f:a1:1b:5b:ca:ec:f1:46:68:18:
         77:75:ab:ff:f9:9f:39:e8:d8:0f:a5:20:ad:66:65:1f:ab:2d:
         33:e1:b2:60:23:ad:81:37:f4:4e:c6:93:c4:34:c2:35:19:dd:
         b5:47:5d:51:a6:03:bc:a9:ea:4f:a6:70:bd:72:96:92:82:09:
         96:84:14:1b:35:45:8a:98:e9:37:9a:69:c7:99:82:d4:c2:7c:
         1f:a9:0b:83:f4:14:74:c3:9d:b9:c6:89:28:3e:2f:57:a4:d9:
         5a:9c:97:93:0a:19:79:bd:c8:e3:ba:2f:5a:40:f2:b0:46:e9:
         9c:58:69:2b:59:66:45:f7:83:2b:2e:13:14:4c:f4:46:ba:ea:
         fa:33:2e:6f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzUxNTUxMTAvBgNVBAUTKDgwMDg0QTM0RkQ0RjNCOTMyQzA5MjE4MjQwN0I4OTA1
RDk0MDY1MDAwHhcNMjUxMDE5MDAxODA2WhcNMjUxMDI2MDAxODA2WjAYMRYwFAYD
VQQDEw02OGY0MmUzZS1iMjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsDJmEmCmbHt8asFX0bxYrUAYK0ZWDJiZ4kf1oW4JsDx674A7dBdGK/vIp3Qv
0+iMCmSsQCbdm9buwDLM2CC4fJQx9BEvbluCQzcBb+HBGEk8BHbWQDeFb+uK1QVc
83JLCFvs9hLdWEbKvxHzfqBYSBmy9EfvkLodTWPfRSIE2Eqo63awMF4j9uN35uP6
qVAtJpaQXRMqTM7ClT1ePWX3t7aWf7sJizO0TH4QX86NrNtC+3h2mXwinvZb0ROf
+zwFokSUXFhKNjUOjd+twD/WSVOYO6n3a+SGqgob2+RynfVhSM47G3aRkgSy9+3O
xcdcesWVhBvwRRz6/AXo0/qQ9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCGwZyg
QoD8rJ6HFCgYngi3qUmXMB8GA1UdIwQYMBaAFIAISjT9TzuTLAkhgkB7iQXZQGUA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE1NS8zNzQ0QjNDNEIw
MjgxMUVCOUQyNzg5MUFDNEY5QUUwMi9nQWhLTlAxUE81TXNDU0dDUUh1SkJkbEFa
UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dBaEtOUDFQTzVNc0NTR0NRSHVKQmRsQVpRQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTE1NS8zNzQ0QjNDNEIwMjgxMUVCOUQyNzg5MUFDNEY5QUUwMi9nQWhLTlAxUE81
TXNDU0dDUUh1SkJkbEFaUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB0Vd8YdBRonxF3ype+HlEv8eH/FoP8zWRrhKJsrLfhcS+NO9WH7Jxi
YjGB/FUU7a3Eqw21UtBB7O9p6/Ltn5OBIlvZlMr67cn3/JhHdWXs6H1wHezzkHul
UYY9QUnfCPXBHfQj7+MrQv8xG5IWJ1NQHNO8L3+hG1vK7PFGaBh3dav/+Z856NgP
pSCtZmUfqy0z4bJgI62BN/ROxpPENMI1Gd21R11RpgO8qepPpnC9cpaSggmWhBQb
NUWKmOk3mmnHmYLUwnwfqQuD9BR0w525xokoPi9XpNlanJeTChl5vcjjui9aQPKw
RumcWGkrWWZF94MrLhMUTPRGuur6My5v
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:58:48 2025 by rpki-client