Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft
File:                     GKIzbZyhDwibn8urmxszkqIdId4.mft (raw, json)
Hash identifier:          6mLb234IlAen23646C/M5572yIIIX2YXTWvIiG3oVUQ=
Subject key identifier:   24:6F:B9:71:63:E0:BA:ED:CD:21:96:04:8C:9D:FC:C1:40:82:45:20
Authority key identifier: 18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE
Certificate issuer:       /CN=A9199885/serialNumber=18A2336D9CA10F089B9FCBAB9B1B3392A21D21DE
Certificate serial:       34C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft
Manifest number:          55BB
Signing time:             Mon 20 Oct 2025 14:58:38 +0000
Manifest this update:     Mon 20 Oct 2025 14:58:37 +0000
Manifest next update:     Mon 27 Oct 2025 14:58:37 +0000
Files and hashes:         1: GKIzbZyhDwibn8urmxszkqIdId4.crl (hash: XFIZf2hpbZ4wqKj+lzexKiE7QSUkY4I4cgON1wstt/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.crl
                          rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13511 (0x34c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199885, serialNumber=18A2336D9CA10F089B9FCBAB9B1B3392A21D21DE
        Validity
            Not Before: Oct 20 14:58:37 2025 GMT
            Not After : Oct 27 14:58:37 2025 GMT
        Subject: CN=68f64e1d-caaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:02:fc:f1:e3:86:0d:88:53:d3:68:d9:fa:c4:
                    16:df:84:d3:b1:54:e5:28:09:3e:44:cd:de:58:2c:
                    a6:80:e0:39:3c:97:fe:aa:66:c2:b0:41:8b:a5:8e:
                    2e:9f:b9:72:cc:8c:88:56:ba:d5:5e:5f:3f:da:81:
                    30:51:dd:50:1b:cf:7e:55:c0:44:47:42:f6:17:7a:
                    42:e6:f4:17:53:76:cd:14:16:ba:e3:97:23:88:a8:
                    2d:d9:94:e5:17:ef:d1:c2:ff:67:e2:f6:ab:ed:9e:
                    b2:ff:14:52:96:f3:46:ad:9b:4b:db:e3:38:dc:98:
                    8b:61:bd:d1:56:c8:d0:68:79:a8:0f:0f:11:61:76:
                    d8:2e:f3:39:be:2a:c4:2c:be:40:8b:ab:61:0d:99:
                    51:9d:52:46:a2:33:75:c9:52:6a:1f:4f:c1:b4:13:
                    44:59:4f:88:10:a4:62:bf:2e:be:c8:76:e3:ac:38:
                    e1:c9:45:ad:4b:2e:04:17:95:fa:34:4c:ce:0a:bc:
                    79:64:d3:74:b1:cf:2c:5b:33:e4:06:4b:05:73:64:
                    98:60:1a:23:13:dc:b0:c5:a1:8f:ba:0d:11:55:e1:
                    24:3c:d0:05:98:33:08:49:b9:56:be:6c:ea:16:84:
                    d9:44:1a:37:77:ec:02:83:54:7d:b7:3e:1a:23:22:
                    d0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:6F:B9:71:63:E0:BA:ED:CD:21:96:04:8C:9D:FC:C1:40:82:45:20
            X509v3 Authority Key Identifier:
                keyid:18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:92:01:31:5b:83:66:74:18:1c:0b:58:da:3a:d8:7b:2a:dd:
         81:42:c7:ff:b0:77:83:9c:c3:d8:83:54:c6:29:69:8f:98:89:
         92:8b:72:9c:8f:eb:72:b2:55:a2:9a:19:6b:ac:d6:38:be:f0:
         ad:80:2c:ec:62:eb:7f:e8:25:9a:aa:d4:d0:02:64:a2:9b:fd:
         b1:15:a9:92:8a:80:6d:c4:7e:0c:fc:09:ab:8e:96:4a:d2:8b:
         4f:c6:5f:13:66:a3:f6:a1:ab:42:04:77:09:c5:eb:f9:27:6d:
         71:4e:30:07:97:b9:49:90:df:3d:b2:a7:2c:e0:5b:c0:d3:59:
         9c:da:df:9b:42:e6:86:9a:e7:7e:f5:ba:86:ff:41:75:a3:10:
         26:72:06:6f:fa:01:02:a8:ef:c1:31:7c:7b:63:51:3f:73:bc:
         27:76:d5:33:89:db:ce:28:1b:52:72:ac:c9:be:b2:b3:f9:25:
         75:85:e6:39:0c:88:14:66:ae:6a:d5:40:4f:b4:e6:f1:6b:a3:
         ef:93:6e:ec:18:ff:cc:53:6a:cf:78:11:c0:aa:2c:72:c3:bc:
         9e:af:c1:41:fb:d2:cc:6b:9c:f6:64:b7:8e:c9:b6:ad:33:1a:
         f9:a8:40:ad:18:34:3b:de:b5:de:5d:b1:c5:c2:9c:01:67:f4:
         af:83:57:ff
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTk4ODUxMTAvBgNVBAUTKDE4QTIzMzZEOUNBMTBGMDg5QjlGQ0JBQjlCMUIzMzky
QTIxRDIxREUwHhcNMjUxMDIwMTQ1ODM3WhcNMjUxMDI3MTQ1ODM3WjAYMRYwFAYD
VQQDEw02OGY2NGUxZC1jYWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzQL88eOGDYhT02jZ+sQW34TTsVTlKAk+RM3eWCymgOA5PJf+qmbCsEGLpY4u
n7lyzIyIVrrVXl8/2oEwUd1QG89+VcBER0L2F3pC5vQXU3bNFBa645cjiKgt2ZTl
F+/Rwv9n4var7Z6y/xRSlvNGrZtL2+M43JiLYb3RVsjQaHmoDw8RYXbYLvM5virE
LL5Ai6thDZlRnVJGojN1yVJqH0/BtBNEWU+IEKRivy6+yHbjrDjhyUWtSy4EF5X6
NEzOCrx5ZNN0sc8sWzPkBksFc2SYYBojE9ywxaGPug0RVeEkPNAFmDMISblWvmzq
FoTZRBo3d+wCg1R9tz4aIyLQ5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRvuXFj
4LrtzSGWBIyd/MFAgkUgMB8GA1UdIwQYMBaAFBiiM22coQ8Im5/Lq5sbM5KiHSHe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg4NS9EMDUwNjg1QTFE
OTgxMUUyQUU2QjFGODMwOEIwMkNEMi9HS0l6Ylp5aER3aWJuOHVybXhzemtxSWRJ
ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dLSXpiWnloRHdpYm44dXJteHN6a3FJZElkNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTg4NS9EMDUwNjg1QTFEOTgxMUUyQUU2QjFGODMwOEIwMkNEMi9HS0l6Ylp5aER3
aWJuOHVybXhzemtxSWRJZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCkkgExW4NmdBgcC1jaOth7Kt2BQsf/sHeDnMPYg1TGKWmPmImSi3Kc
j+tyslWimhlrrNY4vvCtgCzsYut/6CWaqtTQAmSim/2xFamSioBtxH4M/AmrjpZK
0otPxl8TZqP2oatCBHcJxev5J21xTjAHl7lJkN89sqcs4FvA01mc2t+bQuaGmud+
9bqG/0F1oxAmcgZv+gECqO/BMXx7Y1E/c7wndtUzidvOKBtScqzJvrKz+SV1heY5
DIgUZq5q1UBPtObxa6Pvk27sGP/MU2rPeBHAqixyw7yer8FB+9LMa5z2ZLeOybat
Mxr5qECtGDQ73rXeXbHFwpwBZ/Svg1f/
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:40:59 2025 by rpki-client