Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
File:                     gxqJE23hJ6AKadPgb9DTcX986Zo.mft (raw, json)
Hash identifier:          lq2zpkNgErBVXPO1h3LMOW89wQUD5VmobyU+LkVwoB0=
Subject key identifier:   5D:45:CA:C8:1C:C1:CD:B3:C6:C1:34:D4:B4:C6:C3:A7:86:AE:2C:10
Authority key identifier: 83:1A:89:13:6D:E1:27:A0:0A:69:D3:E0:6F:D0:D3:71:7F:7C:E9:9A
Certificate issuer:       /CN=A9175964/serialNumber=831A89136DE127A00A69D3E06FD0D3717F7CE99A
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
Manifest number:          C4
Signing time:             Sat 23 Aug 2025 06:11:57 +0000
Manifest this update:     Sat 23 Aug 2025 06:11:56 +0000
Manifest next update:     Sat 30 Aug 2025 06:11:56 +0000
Files and hashes:         1: gxqJE23hJ6AKadPgb9DTcX986Zo.crl (hash: etEMr41iZr4WBz586pND8wXhqaDCUeP4AuzT2tDF6zQ=)
                          2: ECF347EC790211F0AEB6EC56C4F9AE02.roa (hash: LgOIgdmSarx/xdDFooMMCDoHTaRTWDIl0zWZh3dLWpk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.crl
                          rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:11:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175964, serialNumber=831A89136DE127A00A69D3E06FD0D3717F7CE99A
        Validity
            Not Before: Aug 23 06:11:56 2025 GMT
            Not After : Aug 30 06:11:56 2025 GMT
        Subject: CN=68a95bac-e893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:01:07:20:05:45:c6:04:44:3d:c0:ff:b2:1a:
                    6f:b6:74:fc:04:c2:e6:d2:24:38:29:da:8d:46:c3:
                    d5:81:98:ba:1c:36:8f:a5:a5:bc:46:e6:f6:49:ea:
                    da:09:71:d4:b0:91:af:7f:02:31:78:86:c2:cf:47:
                    23:6f:a8:79:4f:3d:0e:1b:f9:16:98:ea:7f:96:6d:
                    e3:34:28:a3:db:a1:86:2a:4b:9c:b4:de:aa:69:c9:
                    e5:d7:e2:b2:b8:a6:dd:1c:b9:78:78:19:fd:97:28:
                    3c:b4:39:74:38:67:bb:f3:c7:3e:da:04:77:41:3b:
                    b5:a5:d6:aa:7b:a9:97:70:f7:19:4e:82:d4:49:5d:
                    2f:5d:9a:db:aa:e0:52:7b:19:db:5b:5b:7d:c1:3c:
                    5b:d3:fe:d6:3c:7d:88:b0:3f:1f:8e:c1:3f:90:a8:
                    7c:78:1d:e1:fd:4f:98:f4:28:de:9a:82:34:1d:49:
                    af:64:1e:14:94:33:0e:b3:0a:e7:a0:e3:a5:98:6c:
                    4e:6c:77:40:51:11:a6:8f:c5:3b:c6:47:9c:40:3c:
                    cf:83:ef:57:36:1f:88:a6:69:f3:4f:3c:1d:1d:13:
                    59:dd:80:6b:77:86:cb:71:4f:bd:53:f3:04:f5:03:
                    e7:47:7a:2a:61:56:1a:d2:49:59:58:97:a7:db:d5:
                    a2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:45:CA:C8:1C:C1:CD:B3:C6:C1:34:D4:B4:C6:C3:A7:86:AE:2C:10
            X509v3 Authority Key Identifier:
                keyid:83:1A:89:13:6D:E1:27:A0:0A:69:D3:E0:6F:D0:D3:71:7F:7C:E9:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:0e:86:14:98:48:6e:58:da:65:f9:c3:95:31:7e:86:61:0f:
         f9:2c:90:99:59:55:c9:33:fc:69:02:0c:2f:1e:4f:7c:d0:41:
         39:8d:24:b1:b3:a9:59:c2:ef:81:56:7c:6e:ea:91:f5:15:96:
         d9:72:ec:40:b7:f7:f8:3a:07:17:2b:6b:46:ca:20:72:c1:0f:
         23:13:c4:4b:93:37:e1:54:08:e8:3e:6c:6e:17:60:47:53:6e:
         af:8e:b2:e3:88:1a:4d:6b:66:4d:b6:fe:0e:aa:a7:a7:a6:30:
         dc:12:e8:bd:0c:00:ae:b4:ce:7a:33:14:32:43:c5:84:6c:c0:
         94:51:90:80:cb:da:40:fa:a4:8a:f3:60:75:a5:77:9c:55:de:
         a9:29:29:1d:f1:73:e7:58:91:f4:11:26:9d:31:fa:6f:9d:d2:
         78:e7:68:58:79:1e:47:eb:68:15:6b:90:34:55:87:1e:c7:8c:
         9f:e6:3f:79:2e:84:28:6d:7e:57:26:8f:95:5a:9f:71:b1:52:
         93:20:38:e3:15:be:b9:8f:e2:20:28:df:ab:f7:be:34:b3:33:
         4f:89:d9:82:38:d8:88:56:1d:cd:4f:69:62:e5:fb:b0:90:26:
         9b:90:2f:a5:1c:a3:68:c3:28:6d:d7:e8:86:57:f1:d7:25:8f:
         29:ff:ac:19
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU5NjQxMTAvBgNVBAUTKDgzMUE4OTEzNkRFMTI3QTAwQTY5RDNFMDZGRDBEMzcx
N0Y3Q0U5OUEwHhcNMjUwODIzMDYxMTU2WhcNMjUwODMwMDYxMTU2WjAYMRYwFAYD
VQQDEw02OGE5NWJhYy1lODkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0QEHIAVFxgREPcD/shpvtnT8BMLm0iQ4KdqNRsPVgZi6HDaPpaW8Rub2Sera
CXHUsJGvfwIxeIbCz0cjb6h5Tz0OG/kWmOp/lm3jNCij26GGKkuctN6qacnl1+Ky
uKbdHLl4eBn9lyg8tDl0OGe788c+2gR3QTu1pdaqe6mXcPcZToLUSV0vXZrbquBS
exnbW1t9wTxb0/7WPH2IsD8fjsE/kKh8eB3h/U+Y9CjemoI0HUmvZB4UlDMOswrn
oOOlmGxObHdAURGmj8U7xkecQDzPg+9XNh+IpmnzTzwdHRNZ3YBrd4bLcU+9U/ME
9QPnR3oqYVYa0klZWJen29WieQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1Fysgc
wc2zxsE01LTGw6eGriwQMB8GA1UdIwQYMBaAFIMaiRNt4SegCmnT4G/Q03F/fOma
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTk2NC9GRDNFMzg5RTVC
MTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9neHFKRTIzaEo2QUthZFBnYjlEVGNYOTg2
Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d4cUpFMjNoSjZBS2FkUGdiOURUY1g5ODZaby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTk2NC9GRDNFMzg5RTVCMTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9neHFKRTIzaEo2
QUthZFBnYjlEVGNYOTg2Wm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBnDoYUmEhuWNpl+cOVMX6GYQ/5LJCZWVXJM/xpAgwvHk980EE5jSSx
s6lZwu+BVnxu6pH1FZbZcuxAt/f4OgcXK2tGyiBywQ8jE8RLkzfhVAjoPmxuF2BH
U26vjrLjiBpNa2ZNtv4OqqenpjDcEui9DACutM56MxQyQ8WEbMCUUZCAy9pA+qSK
82B1pXecVd6pKSkd8XPnWJH0ESadMfpvndJ452hYeR5H62gVa5A0VYcex4yf5j95
LoQobX5XJo+VWp9xsVKTIDjjFb65j+IgKN+r9740szNPidmCONiIVh3NT2li5fuw
kCabkC+lHKNowyht1+iGV/HXJY8p/6wZ
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:11:40 2025 by rpki-client