Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
File:                     GkAQC15dw00ay1htJzOQptUXff8.mft (raw, json)
Hash identifier:          1Dudjw/95r9kE6EjEJvhZXDWSesObezydxe2RI8XSZU=
Subject key identifier:   AB:52:15:66:EE:84:5E:5E:10:BA:0D:9E:B5:9A:A0:6A:45:BD:DD:75
Authority key identifier: 1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF
Certificate issuer:       /CN=A9194C99/serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF
Certificate serial:       03FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
Manifest number:          03F6
Signing time:             Sun 19 Oct 2025 02:25:34 +0000
Manifest this update:     Sun 19 Oct 2025 02:25:33 +0000
Manifest next update:     Sun 26 Oct 2025 02:25:33 +0000
Files and hashes:         1: GkAQC15dw00ay1htJzOQptUXff8.crl (hash: hgnCEejYtLbnMEDAWe6p+FHTgQT3VSlsrIM3rwMaBpM=)
                          2: 8AB545D294A711ECA073AB56C4F9AE02.roa (hash: Vcf2mCMS48B4jAqDXmFIESOPS9I9k4iNYocNkMUmAvc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl
                          rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1019 (0x3fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194C99, serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF
        Validity
            Not Before: Oct 19 02:25:33 2025 GMT
            Not After : Oct 26 02:25:33 2025 GMT
        Subject: CN=68f44c1d-82c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9f:d9:b8:1d:da:28:3a:64:d4:b4:8f:fa:92:
                    24:d7:84:65:95:7f:3e:46:3a:d2:ba:8d:c5:92:6f:
                    f5:98:9f:ca:dc:19:d1:ba:6f:06:5c:e6:e5:03:13:
                    41:66:ee:fc:2f:4c:6d:e2:1c:b8:7f:21:3f:af:94:
                    7d:35:d2:95:a0:8d:77:07:c5:54:ac:77:a7:08:ef:
                    03:5d:42:d5:a2:1b:d6:7e:4b:b8:18:8d:c1:ee:92:
                    a0:31:49:28:11:8b:ce:8c:d2:5b:98:56:75:78:a0:
                    47:10:e6:c1:78:a4:61:cd:8e:50:48:37:f1:80:1e:
                    ae:f6:9f:db:44:76:00:bc:7e:65:f7:2b:b6:97:f5:
                    76:1d:8f:9d:05:40:57:51:ee:2d:20:c3:4d:18:aa:
                    56:4d:64:4d:00:e8:b6:5c:26:04:2a:27:b6:13:70:
                    39:b6:63:20:be:7f:16:52:a6:0c:dd:1b:52:12:15:
                    86:ad:f0:8c:17:79:71:27:c9:48:b2:a9:c6:c3:af:
                    8e:ed:94:12:11:05:6f:d0:eb:83:38:9c:7e:da:83:
                    07:da:2a:da:bc:71:93:1d:d0:14:f0:22:1d:59:85:
                    ad:65:4d:0a:e0:ec:51:ae:67:a4:6f:f2:6d:3c:f3:
                    41:90:f4:7f:98:3b:24:0b:74:ee:ba:04:e5:c6:79:
                    c1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:52:15:66:EE:84:5E:5E:10:BA:0D:9E:B5:9A:A0:6A:45:BD:DD:75
            X509v3 Authority Key Identifier:
                keyid:1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:9b:3d:4e:43:f2:bf:f3:18:78:10:c6:fa:fe:62:d2:86:0e:
         b6:9c:1c:7c:2b:b3:a0:35:6d:22:8e:79:a3:d0:8f:b3:75:ad:
         82:1b:50:2b:b6:21:b9:21:39:eb:57:4d:01:28:9c:25:34:91:
         93:bb:f7:79:96:e6:04:6f:f5:7f:e2:15:9c:8e:24:12:6b:d4:
         94:8b:b3:c3:ec:5f:30:9c:c7:90:cd:40:d5:ed:92:f3:89:93:
         2b:fb:e3:9f:df:3c:09:94:a5:7d:21:20:c6:89:b4:0e:68:58:
         16:62:f5:b3:d5:82:71:f2:a2:ae:39:ad:87:6e:12:f6:c9:16:
         86:51:06:94:c1:e7:c2:7a:f5:fa:8c:f7:ba:29:53:c1:2b:9f:
         c3:df:da:df:b5:16:d5:c4:eb:b3:53:94:a0:b3:a3:d1:e9:4a:
         79:f1:02:6a:44:89:64:e7:97:a6:b8:ac:8b:b9:e7:37:80:8e:
         7c:f3:55:f0:b1:00:2c:7c:5d:e7:8b:a3:2d:34:53:71:81:4e:
         99:b0:1f:da:7d:d0:76:69:86:dc:00:cd:20:7a:23:d7:1f:3b:
         15:06:48:4b:a4:0c:e1:45:6c:6a:7c:09:1a:19:a1:69:40:bf:
         5b:41:32:d5:b4:bf:bf:d1:fb:b6:42:45:48:b5:a2:ee:95:87:
         04:0a:45:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRDOTkxMTAvBgNVBAUTKDFBNDAxMDBCNUU1REMzNEQxQUNCNTg2RDI3MzM5MEE2
RDUxNzdERkYwHhcNMjUxMDE5MDIyNTMzWhcNMjUxMDI2MDIyNTMzWjAYMRYwFAYD
VQQDEw02OGY0NGMxZC04MmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvp/ZuB3aKDpk1LSP+pIk14RllX8+RjrSuo3Fkm/1mJ/K3BnRum8GXOblAxNB
Zu78L0xt4hy4fyE/r5R9NdKVoI13B8VUrHenCO8DXULVohvWfku4GI3B7pKgMUko
EYvOjNJbmFZ1eKBHEObBeKRhzY5QSDfxgB6u9p/bRHYAvH5l9yu2l/V2HY+dBUBX
Ue4tIMNNGKpWTWRNAOi2XCYEKie2E3A5tmMgvn8WUqYM3RtSEhWGrfCMF3lxJ8lI
sqnGw6+O7ZQSEQVv0OuDOJx+2oMH2iravHGTHdAU8CIdWYWtZU0K4OxRrmekb/Jt
PPNBkPR/mDskC3TuugTlxnnBCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtSFWbu
hF5eELoNnrWaoGpFvd11MB8GA1UdIwQYMBaAFBpAEAteXcNNGstYbSczkKbVF33/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEM5OS8yNTE1MkU1Qzk0
QTQxMUVDQkJBN0E1NTJDNEY5QUUwMi9Ha0FRQzE1ZHcwMGF5MWh0SnpPUXB0VVhm
ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0drQVFDMTVkdzAwYXkxaHRKek9RcHRVWGZmOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEM5OS8yNTE1MkU1Qzk0QTQxMUVDQkJBN0E1NTJDNEY5QUUwMi9Ha0FRQzE1ZHcw
MGF5MWh0SnpPUXB0VVhmZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAAmz1OQ/K/8xh4EMb6/mLShg62nBx8K7OgNW0ijnmj0I+zda2CG1Ar
tiG5ITnrV00BKJwlNJGTu/d5luYEb/V/4hWcjiQSa9SUi7PD7F8wnMeQzUDV7ZLz
iZMr++Of3zwJlKV9ISDGibQOaFgWYvWz1YJx8qKuOa2HbhL2yRaGUQaUwefCevX6
jPe6KVPBK5/D39rftRbVxOuzU5Sgs6PR6Up58QJqRIlk55emuKyLuec3gI5881Xw
sQAsfF3ni6MtNFNxgU6ZsB/afdB2aYbcAM0geiPXHzsVBkhLpAzhRWxqfAkaGaFp
QL9bQTLVtL+/0fu2QkVItaLulYcECkUI
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:31 2025 by rpki-client