Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F525/8242878494C911ED8B3D215EC4F9AE02/GLReQdo59jAuMWmWMNMihds9kxw.mft
File:                     GLReQdo59jAuMWmWMNMihds9kxw.mft (raw, json)
Hash identifier:          X3a1iSnFvvkL40psB7VDGxVkNU2W9GwS6uupvB94y8A=
Subject key identifier:   D3:99:6B:ED:CE:00:A6:2D:91:04:CE:0C:63:EC:C9:30:DE:FD:4C:0B
Authority key identifier: 18:B4:5E:41:DA:39:F6:30:2E:31:69:96:30:D3:22:85:DB:3D:93:1C
Certificate issuer:       /CN=A918F525/serialNumber=18B45E41DA39F6302E31699630D32285DB3D931C
Certificate serial:       01E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLReQdo59jAuMWmWMNMihds9kxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F525/8242878494C911ED8B3D215EC4F9AE02/GLReQdo59jAuMWmWMNMihds9kxw.mft
Manifest number:          01E6
Signing time:             Sat 23 Aug 2025 02:43:56 +0000
Manifest this update:     Sat 23 Aug 2025 02:43:55 +0000
Manifest next update:     Sat 30 Aug 2025 02:43:55 +0000
Files and hashes:         1: GLReQdo59jAuMWmWMNMihds9kxw.crl (hash: clJgOOO7UIjDSYtm0E6EMI8XGh12zg+myhEzgYWi+64=)
                          2: 3062089A94CE11ED806CD364C4F9AE02.roa (hash: 5q8BGN7Hf8i2/RzifjmylO87f37u56OKRgIkUmDm+8Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F525/8242878494C911ED8B3D215EC4F9AE02/GLReQdo59jAuMWmWMNMihds9kxw.crl
                          rsync://rpki.apnic.net/member_repository/A918F525/8242878494C911ED8B3D215EC4F9AE02/GLReQdo59jAuMWmWMNMihds9kxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLReQdo59jAuMWmWMNMihds9kxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 02:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 489 (0x1e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F525, serialNumber=18B45E41DA39F6302E31699630D32285DB3D931C
        Validity
            Not Before: Aug 23 02:43:55 2025 GMT
            Not After : Aug 30 02:43:55 2025 GMT
        Subject: CN=68a92aeb-0ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c7:21:96:fd:e1:24:31:05:57:2c:06:ce:03:
                    22:2e:ab:49:17:95:7b:a7:43:46:fa:8d:de:a3:22:
                    8b:cc:f3:20:18:23:c4:71:fb:e4:b2:dc:c0:11:5c:
                    08:da:4a:ae:4c:67:bd:cd:be:8d:43:91:da:e7:dd:
                    2a:1b:21:d8:f2:be:3e:97:52:38:8a:74:ce:dc:35:
                    61:47:2a:ec:09:9b:73:cd:32:ba:a9:ff:d1:3c:cf:
                    ca:ce:f0:05:4a:8d:54:6e:fd:e7:5f:e4:8a:be:44:
                    fb:f2:df:05:36:d7:6d:67:59:7e:e0:a9:1f:f1:ce:
                    3e:8d:73:d4:3e:2f:11:3f:39:23:a5:c0:ef:35:b0:
                    9a:19:86:91:82:f9:41:e1:ff:51:23:f6:2f:93:f8:
                    6d:ef:26:4f:53:54:09:49:f4:ff:12:92:92:23:ac:
                    c8:6d:a6:bd:82:7c:cd:42:43:a6:aa:4e:4c:1e:42:
                    58:26:fc:dd:5e:c7:70:41:fc:88:87:65:e3:b8:10:
                    95:4a:d2:26:1d:76:ff:12:cc:95:2a:c1:31:89:f5:
                    5d:6b:60:3f:30:ed:82:b2:51:52:03:74:bd:5e:63:
                    24:f5:8c:fd:39:84:7a:e1:ca:10:5e:ba:dc:c1:db:
                    bc:19:b5:30:94:31:86:1a:84:e7:72:34:2b:32:fa:
                    35:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:99:6B:ED:CE:00:A6:2D:91:04:CE:0C:63:EC:C9:30:DE:FD:4C:0B
            X509v3 Authority Key Identifier:
                keyid:18:B4:5E:41:DA:39:F6:30:2E:31:69:96:30:D3:22:85:DB:3D:93:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F525/8242878494C911ED8B3D215EC4F9AE02/GLReQdo59jAuMWmWMNMihds9kxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLReQdo59jAuMWmWMNMihds9kxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F525/8242878494C911ED8B3D215EC4F9AE02/GLReQdo59jAuMWmWMNMihds9kxw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:17:cb:d3:1b:36:5c:78:2a:55:28:4a:49:db:ac:ad:41:a3:
         de:6a:32:3d:42:84:61:1b:37:78:9d:65:4b:db:d5:a9:11:c8:
         8f:78:a9:4e:50:1f:1d:a5:5f:37:db:f3:0d:d6:ba:7b:81:3e:
         f0:1c:0b:0b:1d:5c:4e:fb:bf:f2:35:fe:aa:3e:59:4c:33:bd:
         e6:c0:85:8d:ac:d5:06:2b:ff:b9:74:e6:2d:4c:f9:cb:87:2d:
         ac:82:0e:60:ab:2d:09:23:da:aa:76:7d:e2:45:1d:40:71:fd:
         be:83:ba:77:27:31:0f:2e:43:f6:8b:d5:f9:58:46:36:6c:e4:
         4e:14:34:88:4d:84:1d:4d:d1:d8:38:c5:80:02:4a:79:a6:08:
         fd:34:4d:a4:c3:83:22:cd:9c:e6:99:df:92:39:05:37:8a:7a:
         d5:87:93:b3:32:db:36:49:ec:ee:ce:d3:d5:0e:1d:00:2b:f6:
         43:fb:94:4b:e4:09:ca:15:ef:e7:75:7b:f8:a6:a8:d1:7a:fa:
         33:b0:f9:78:11:84:42:13:6e:d5:32:21:18:cb:81:f3:09:b3:
         95:4e:0c:b2:69:ba:03:7f:5c:25:64:53:8a:b5:b1:3b:a5:5b:
         44:da:c5:8a:0a:48:30:44:03:64:da:7e:c1:d3:5a:3d:78:13:
         bc:0d:1e:e4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEY1MjUxMTAvBgNVBAUTKDE4QjQ1RTQxREEzOUY2MzAyRTMxNjk5NjMwRDMyMjg1
REIzRDkzMUMwHhcNMjUwODIzMDI0MzU1WhcNMjUwODMwMDI0MzU1WjAYMRYwFAYD
VQQDEw02OGE5MmFlYi0wZWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApcchlv3hJDEFVywGzgMiLqtJF5V7p0NG+o3eoyKLzPMgGCPEcfvkstzAEVwI
2kquTGe9zb6NQ5Ha590qGyHY8r4+l1I4inTO3DVhRyrsCZtzzTK6qf/RPM/KzvAF
So1Ubv3nX+SKvkT78t8FNtdtZ1l+4Kkf8c4+jXPUPi8RPzkjpcDvNbCaGYaRgvlB
4f9RI/Yvk/ht7yZPU1QJSfT/EpKSI6zIbaa9gnzNQkOmqk5MHkJYJvzdXsdwQfyI
h2XjuBCVStImHXb/EsyVKsExifVda2A/MO2CslFSA3S9XmMk9Yz9OYR64coQXrrc
wdu8GbUwlDGGGoTncjQrMvo1YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOZa+3O
AKYtkQTODGPsyTDe/UwLMB8GA1UdIwQYMBaAFBi0XkHaOfYwLjFpljDTIoXbPZMc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjUyNS84MjQyODc4NDk0
QzkxMUVEOEIzRDIxNUVDNEY5QUUwMi9HTFJlUWRvNTlqQXVNV21XTU5NaWhkczlr
eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dMUmVRZG81OWpBdU1XbVdNTk1paGRzOWt4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RjUyNS84MjQyODc4NDk0QzkxMUVEOEIzRDIxNUVDNEY5QUUwMi9HTFJlUWRvNTlq
QXVNV21XTU5NaWhkczlreHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCIF8vTGzZceCpVKEpJ26ytQaPeajI9QoRhGzd4nWVL29WpEciPeKlO
UB8dpV832/MN1rp7gT7wHAsLHVxO+7/yNf6qPllMM73mwIWNrNUGK/+5dOYtTPnL
hy2sgg5gqy0JI9qqdn3iRR1Acf2+g7p3JzEPLkP2i9X5WEY2bOROFDSITYQdTdHY
OMWAAkp5pgj9NE2kw4MizZzmmd+SOQU3inrVh5OzMts2SezuztPVDh0AK/ZD+5RL
5AnKFe/ndXv4pqjRevozsPl4EYRCE27VMiEYy4HzCbOVTgyyaboDf1wlZFOKtbE7
pVtE2sWKCkgwRANk2n7B01o9eBO8DR7k
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:42:46 2025 by rpki-client