Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.mft
File:                     GQQ80InJeU-nj0WlTqtfK26Rju4.mft (raw, json)
Hash identifier:          p1mNyaAcwYNAza464prPQAe1GjuAe8dpIBqhRui9IzQ=
Subject key identifier:   FF:D0:DC:55:F0:76:C5:A9:1E:1B:88:C1:59:AE:D0:8C:9C:1E:9B:54
Authority key identifier: 19:04:3C:D0:89:C9:79:4F:A7:8F:45:A5:4E:AB:5F:2B:6E:91:8E:EE
Certificate issuer:       /CN=A91A57AA/serialNumber=19043CD089C9794FA78F45A54EAB5F2B6E918EEE
Certificate serial:       01CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQQ80InJeU-nj0WlTqtfK26Rju4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.mft
Manifest number:          01C8
Signing time:             Sun 19 Oct 2025 05:21:47 +0000
Manifest this update:     Sun 19 Oct 2025 05:21:47 +0000
Manifest next update:     Sun 26 Oct 2025 05:21:47 +0000
Files and hashes:         1: GQQ80InJeU-nj0WlTqtfK26Rju4.crl (hash: 4gk88QlNdzZb0jF6X8QLlbkJ+9uU+D8nz95BjHFIQ9w=)
                          2: DFC9BF30F14E11ED992E1316C4F9AE02.roa (hash: PzV7dQ/Ntjwe4VwuBgo5nWo9sWxiEDa03H8RbyLVUfw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.crl
                          rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQQ80InJeU-nj0WlTqtfK26Rju4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A57AA, serialNumber=19043CD089C9794FA78F45A54EAB5F2B6E918EEE
        Validity
            Not Before: Oct 19 05:21:47 2025 GMT
            Not After : Oct 26 05:21:47 2025 GMT
        Subject: CN=68f4756b-2b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6c:87:3e:ea:eb:c1:6c:5d:39:b7:5f:a0:cc:
                    4a:af:24:ba:60:e2:13:99:c9:60:1f:1a:1c:ec:c0:
                    d4:f0:39:82:d8:be:e5:d3:ee:08:fe:d3:e0:d0:6b:
                    a9:5e:05:a3:fa:01:fa:55:df:6c:65:58:31:76:bc:
                    ed:a0:e5:da:95:5e:80:4b:48:04:d6:2a:c3:b9:7a:
                    08:e8:4c:c8:c2:bb:f6:e9:c2:66:9c:fc:8a:51:8a:
                    be:ea:40:04:86:06:89:01:b2:65:79:54:30:89:60:
                    21:35:57:3c:8d:68:da:91:ef:60:ac:d8:dc:1a:9d:
                    4f:59:c1:c9:05:c8:d0:c8:6a:dd:19:34:a3:69:ad:
                    b0:e9:4d:3b:6c:30:d3:bb:2f:a7:f7:17:4a:25:6d:
                    e9:dd:19:07:21:a2:9c:5e:ec:10:35:f2:0b:74:e2:
                    c5:0c:fe:b1:01:ac:ee:9d:99:80:a8:02:71:9a:2a:
                    a9:cf:8d:11:38:53:53:a3:41:09:8c:86:25:17:e3:
                    e3:4c:3e:44:74:6b:f5:d8:3d:88:2a:11:cc:f1:90:
                    a7:42:96:7c:80:f5:51:5c:69:56:05:54:35:e4:e1:
                    b4:0b:65:1b:dc:d1:21:63:e3:a8:9f:ad:dc:97:c5:
                    46:25:5c:e1:58:f4:ee:fa:67:2c:39:9d:a1:6b:af:
                    bc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D0:DC:55:F0:76:C5:A9:1E:1B:88:C1:59:AE:D0:8C:9C:1E:9B:54
            X509v3 Authority Key Identifier:
                keyid:19:04:3C:D0:89:C9:79:4F:A7:8F:45:A5:4E:AB:5F:2B:6E:91:8E:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQQ80InJeU-nj0WlTqtfK26Rju4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A57AA/C1835D5CF14811EDB731960DC4F9AE02/GQQ80InJeU-nj0WlTqtfK26Rju4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:9d:67:8d:10:0c:75:0f:29:f7:60:3c:4c:89:3d:96:da:9e:
         3f:86:67:1b:06:b7:71:00:a5:f4:34:4d:d9:35:9c:d3:de:8c:
         f7:10:2a:dd:42:f2:a1:3d:22:cc:04:a7:d0:db:1a:04:b9:c4:
         94:b5:27:f2:a9:43:59:7b:38:9d:49:da:20:d7:3e:ea:82:39:
         79:37:11:8a:35:4c:71:b2:fd:0f:ba:b7:ad:96:ea:a8:be:a1:
         0c:d3:6a:88:80:55:75:16:07:77:1f:c5:7b:d2:21:12:58:de:
         d7:90:2a:d1:5c:71:b6:6c:5d:ca:31:24:1a:1f:ca:9d:98:7e:
         f2:87:7c:9f:36:48:9a:25:1d:d1:7e:c4:0b:b2:d5:95:38:6d:
         22:a8:3d:ed:4a:a1:32:c3:6c:57:e9:cf:36:cf:b7:35:0a:e5:
         f7:b8:cc:0c:1a:ad:dc:a9:c8:2c:12:6e:3e:24:0e:5c:f3:bf:
         84:a7:67:7e:aa:65:a5:cf:74:c3:f9:be:c1:01:47:56:53:b7:
         d4:84:30:e6:47:33:62:44:9e:06:ec:c9:14:4b:ff:ff:08:37:
         1f:55:f0:8b:70:60:0c:80:71:e2:68:4f:32:d5:a5:5e:b9:58:
         f2:c0:ad:92:3e:8c:f3:1b:62:84:de:89:87:12:bb:67:2c:49:
         7e:c8:9c:e2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU3QUExMTAvBgNVBAUTKDE5MDQzQ0QwODlDOTc5NEZBNzhGNDVBNTRFQUI1RjJC
NkU5MThFRUUwHhcNMjUxMDE5MDUyMTQ3WhcNMjUxMDI2MDUyMTQ3WjAYMRYwFAYD
VQQDEw02OGY0NzU2Yi0yYjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4GyHPurrwWxdObdfoMxKryS6YOITmclgHxoc7MDU8DmC2L7l0+4I/tPg0Gup
XgWj+gH6Vd9sZVgxdrztoOXalV6AS0gE1irDuXoI6EzIwrv26cJmnPyKUYq+6kAE
hgaJAbJleVQwiWAhNVc8jWjake9grNjcGp1PWcHJBcjQyGrdGTSjaa2w6U07bDDT
uy+n9xdKJW3p3RkHIaKcXuwQNfILdOLFDP6xAazunZmAqAJxmiqpz40ROFNTo0EJ
jIYlF+PjTD5EdGv12D2IKhHM8ZCnQpZ8gPVRXGlWBVQ15OG0C2Ub3NEhY+Oon63c
l8VGJVzhWPTu+mcsOZ2ha6+8FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/Q3FXw
dsWpHhuIwVmu0IycHptUMB8GA1UdIwQYMBaAFBkEPNCJyXlPp49FpU6rXytukY7u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTdBQS9DMTgzNUQ1Q0Yx
NDgxMUVEQjczMTk2MERDNEY5QUUwMi9HUVE4MEluSmVVLW5qMFdsVHF0ZksyNlJq
dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dRUTgwSW5KZVUtbmowV2xUcXRmSzI2Ump1NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTdBQS9DMTgzNUQ1Q0YxNDgxMUVEQjczMTk2MERDNEY5QUUwMi9HUVE4MEluSmVV
LW5qMFdsVHF0ZksyNlJqdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBunWeNEAx1Dyn3YDxMiT2W2p4/hmcbBrdxAKX0NE3ZNZzT3oz3ECrd
QvKhPSLMBKfQ2xoEucSUtSfyqUNZezidSdog1z7qgjl5NxGKNUxxsv0Puretluqo
vqEM02qIgFV1Fgd3H8V70iESWN7XkCrRXHG2bF3KMSQaH8qdmH7yh3yfNkiaJR3R
fsQLstWVOG0iqD3tSqEyw2xX6c82z7c1CuX3uMwMGq3cqcgsEm4+JA5c87+Ep2d+
qmWlz3TD+b7BAUdWU7fUhDDmRzNiRJ4G7MkUS///CDcfVfCLcGAMgHHiaE8y1aVe
uVjywK2SPozzG2KE3omHErtnLEl+yJzi
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:37:19 2025 by rpki-client