Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
File:                     Gm63WytHE2DtWpJcNRzEDBlBaCc.mft (raw, json)
Hash identifier:          /XiZ7IZtv0FxgJnz5OBFfXyLBqYGBmIF6Ch0/wtRjHw=
Subject key identifier:   56:70:C0:79:4A:C5:D1:96:2A:FF:72:DE:28:3D:82:AA:71:9E:A4:EB
Authority key identifier: 1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27
Certificate issuer:       /CN=A9184AB8/serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827
Certificate serial:       91
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
Manifest number:          90
Signing time:             Sun 19 Oct 2025 09:45:45 +0000
Manifest this update:     Sun 19 Oct 2025 09:45:45 +0000
Manifest next update:     Sun 26 Oct 2025 09:45:45 +0000
Files and hashes:         1: Gm63WytHE2DtWpJcNRzEDBlBaCc.crl (hash: VuSiU+/qWmWg4lhXEyhlSzZypmWhUlQj6xvaTum3Egs=)
                          2: 6156245AD26F11EFB6D7116EC4F9AE02.roa (hash: H+Re+gqiRgpMCNcLPAgkDV7non7PY7SZMMWDfs8kqJ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl
                          rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184AB8, serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827
        Validity
            Not Before: Oct 19 09:45:45 2025 GMT
            Not After : Oct 26 09:45:45 2025 GMT
        Subject: CN=68f4b349-82f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:02:4c:a2:55:10:04:fe:d9:53:bf:df:ca:6b:
                    34:89:9d:12:bc:b3:f5:a4:c0:ba:1b:58:4b:88:c0:
                    bc:ba:02:5a:76:6c:01:06:49:bf:8a:4f:0c:ff:d8:
                    8c:1f:a2:e8:26:b8:62:16:c6:50:f9:14:0e:1d:44:
                    37:aa:d5:ab:48:1d:24:e3:47:82:af:18:ab:d3:c5:
                    c1:b6:33:66:87:d5:e3:63:c2:5d:cd:e0:ef:5b:cb:
                    16:71:d3:56:23:29:8e:e4:dd:97:84:20:3b:e5:5f:
                    91:57:98:1e:53:45:ee:be:13:3c:18:78:1a:ed:2e:
                    01:ff:8c:ad:53:9b:f3:b7:67:ea:f2:6a:8e:a8:83:
                    8e:9c:80:a3:63:96:23:5a:6d:6c:c3:9c:db:1b:2e:
                    14:60:5f:85:bb:8d:a9:49:4a:2f:d3:78:bb:08:cc:
                    66:f7:71:b4:7a:a2:e8:b9:03:fe:57:bb:4e:cb:d5:
                    28:55:e8:bb:92:14:65:54:c6:67:83:63:9b:82:f5:
                    c5:b2:b1:b0:ee:57:50:f3:b4:ae:c1:16:a7:8b:9b:
                    75:af:6a:e5:5e:dc:85:fb:52:04:a8:7e:bc:21:12:
                    e6:4f:8d:d7:66:ad:0d:e2:34:b4:bc:9a:49:59:3c:
                    cc:bf:1b:7c:5d:5d:a0:2d:12:e9:f6:90:fa:27:f7:
                    90:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:70:C0:79:4A:C5:D1:96:2A:FF:72:DE:28:3D:82:AA:71:9E:A4:EB
            X509v3 Authority Key Identifier:
                keyid:1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:7e:20:2c:6e:ea:76:20:b3:ba:7b:30:ab:ce:25:af:fd:c1:
         3d:ee:2f:43:74:40:fe:56:77:c6:7f:18:c8:47:94:54:a5:4e:
         56:73:8e:a2:72:23:dd:af:e1:5a:f0:93:e3:c0:b4:d4:4b:b7:
         d6:4e:ad:d1:27:f3:2f:04:5a:e6:c6:15:44:90:d1:77:af:62:
         4d:ed:55:9c:98:46:4b:43:89:bf:53:dd:1b:0f:a1:5c:97:e3:
         1e:64:f2:78:a6:00:90:b5:c1:e5:1e:c9:8a:4f:95:7e:cd:dd:
         42:76:75:c9:22:8d:2f:54:b4:71:4b:d4:ea:01:b0:91:5c:8c:
         3b:e1:e6:84:b7:d5:be:38:90:0e:04:f8:9f:b4:d2:93:6c:62:
         c3:cf:15:b5:2f:fa:b7:d1:16:93:4b:71:87:d6:07:f7:4b:95:
         cc:51:b7:2c:1c:8e:ab:da:57:ca:97:de:ce:23:be:c9:e2:f7:
         af:98:df:7a:5d:2a:bd:c6:9e:10:9f:76:ac:2f:87:87:ea:0f:
         73:e4:af:ae:ee:f0:e7:1e:2a:0d:6d:55:22:a4:00:e3:70:bf:
         12:7e:5f:5f:a7:b2:34:1e:37:6f:b5:76:b9:55:63:53:ce:7e:
         27:be:12:6f:11:d6:9f:3a:b6:22:6a:42:4e:d5:90:6d:9f:33:
         8d:b3:45:8f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODRBQjgxMTAvBgNVBAUTKDFBNkVCNzVCMkI0NzEzNjBFRDVBOTI1QzM1MUNDNDBD
MTk0MTY4MjcwHhcNMjUxMDE5MDk0NTQ1WhcNMjUxMDI2MDk0NTQ1WjAYMRYwFAYD
VQQDEw02OGY0YjM0OS04MmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyAJMolUQBP7ZU7/fyms0iZ0SvLP1pMC6G1hLiMC8ugJadmwBBkm/ik8M/9iM
H6LoJrhiFsZQ+RQOHUQ3qtWrSB0k40eCrxir08XBtjNmh9XjY8JdzeDvW8sWcdNW
IymO5N2XhCA75V+RV5geU0XuvhM8GHga7S4B/4ytU5vzt2fq8mqOqIOOnICjY5Yj
Wm1sw5zbGy4UYF+Fu42pSUov03i7CMxm93G0eqLouQP+V7tOy9UoVei7khRlVMZn
g2ObgvXFsrGw7ldQ87SuwRani5t1r2rlXtyF+1IEqH68IRLmT43XZq0N4jS0vJpJ
WTzMvxt8XV2gLRLp9pD6J/eQcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZwwHlK
xdGWKv9y3ig9gqpxnqTrMB8GA1UdIwQYMBaAFBput1srRxNg7VqSXDUcxAwZQWgn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEFCOC8zMzA5NkVDOEQx
QjAxMUVGOEMyMEREMzJDNEY5QUUwMi9HbTYzV3l0SEUyRHRXcEpjTlJ6RURCbEJh
Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0dtNjNXeXRIRTJEdFdwSmNOUnpFREJsQmFDYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NEFCOC8zMzA5NkVDOEQxQjAxMUVGOEMyMEREMzJDNEY5QUUwMi9HbTYzV3l0SEUy
RHRXcEpjTlJ6RURCbEJhQ2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC5fiAsbup2ILO6ezCrziWv/cE97i9DdED+VnfGfxjIR5RUpU5Wc46i
ciPdr+Fa8JPjwLTUS7fWTq3RJ/MvBFrmxhVEkNF3r2JN7VWcmEZLQ4m/U90bD6Fc
l+MeZPJ4pgCQtcHlHsmKT5V+zd1CdnXJIo0vVLRxS9TqAbCRXIw74eaEt9W+OJAO
BPiftNKTbGLDzxW1L/q30RaTS3GH1gf3S5XMUbcsHI6r2lfKl97OI77J4vevmN96
XSq9xp4Qn3asL4eH6g9z5K+u7vDnHioNbVUipADjcL8Sfl9fp7I0HjdvtXa5VWNT
zn4nvhJvEdafOrYiakJO1ZBtnzONs0WP
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:47:52 2025 by rpki-client