Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
File:                     gcJvPY9BNuUZDMehfWr3IkIutm8.mft (raw, json)
Hash identifier:          ccuokRUM7bXkTmU/ioLMiDy7/B/43b1xjuEzm1wPiHI=
Subject key identifier:   BA:AB:F6:EA:79:84:DD:1E:DF:97:03:57:FE:60:25:F3:6C:04:9B:15
Authority key identifier: 81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F
Certificate issuer:       /CN=A91B8E70/serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F
Certificate serial:       BC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
Manifest number:          B9
Signing time:             Sun 19 Oct 2025 09:09:49 +0000
Manifest this update:     Sun 19 Oct 2025 09:09:49 +0000
Manifest next update:     Sun 26 Oct 2025 09:09:49 +0000
Files and hashes:         1: gcJvPY9BNuUZDMehfWr3IkIutm8.crl (hash: bvnSiEwDY9S9rxH5dOUaiJaHecpGxOpoMgs8FqjM518=)
                          2: 20B2721A955B11EFBF0F5669C4F9AE02.roa (hash: llWki8GcmgjT7J8EXf4LrHE2T0htuGvxurz/78InPoE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl
                          rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:09:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8E70, serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F
        Validity
            Not Before: Oct 19 09:09:49 2025 GMT
            Not After : Oct 26 09:09:49 2025 GMT
        Subject: CN=68f4aadd-12a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:97:00:ac:2d:14:09:c1:4d:9b:89:08:c9:a1:
                    dd:e3:54:75:2d:10:ba:9a:9c:cd:bc:e7:af:c6:40:
                    be:0d:97:64:72:e8:42:23:04:15:62:f0:28:dd:53:
                    59:80:58:f8:60:20:80:53:35:d4:91:50:3f:99:e2:
                    75:3c:54:90:fb:9d:45:47:c0:aa:06:6d:3d:98:41:
                    7c:4f:62:cd:ff:2d:10:48:76:78:c4:71:c2:fc:ea:
                    f0:20:12:ac:bd:a4:67:a0:c3:13:a1:76:e0:3a:1c:
                    74:92:50:e6:86:0e:6e:16:eb:d7:05:d1:aa:71:b6:
                    13:f4:77:15:99:ee:ea:93:5b:9e:34:d0:29:ab:96:
                    bb:4e:3d:24:65:9e:07:4f:7e:51:33:77:fb:f1:32:
                    c6:da:a0:4c:fb:7b:d3:b9:b1:f7:bc:89:7d:61:8e:
                    07:4d:b9:2b:9a:1a:6f:54:9a:98:67:6f:c5:1e:f7:
                    a7:97:f4:7f:44:cd:dd:02:67:bf:92:59:19:53:81:
                    fa:dd:61:41:eb:ed:f9:91:24:98:21:3c:49:c9:90:
                    ee:7c:59:90:3c:8d:53:46:50:62:56:28:ea:f3:42:
                    c2:49:62:c8:a6:c8:99:a9:82:ac:46:5a:e4:63:69:
                    7e:90:86:96:92:bb:3e:6e:48:59:30:59:4d:23:65:
                    06:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AB:F6:EA:79:84:DD:1E:DF:97:03:57:FE:60:25:F3:6C:04:9B:15
            X509v3 Authority Key Identifier:
                keyid:81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:bf:c1:45:3e:ff:b8:ef:6d:8c:20:50:19:d4:87:f1:08:ab:
         56:ac:74:08:dc:51:cc:77:36:67:47:e7:2c:85:93:8d:56:89:
         5d:19:7d:bb:88:4b:47:16:c9:9e:76:f7:f2:6c:c8:fd:49:63:
         78:c9:82:63:38:fc:d5:5b:5b:1f:42:41:b1:90:6c:f6:9f:66:
         d6:90:4d:51:13:e7:48:45:93:02:23:ad:6e:e8:64:67:9d:73:
         87:9b:cf:03:2c:51:42:da:92:5c:9a:38:52:14:e6:13:b6:8a:
         07:e1:58:1f:71:44:c9:86:a9:c8:fc:0a:6c:cf:fc:ec:f9:a0:
         d6:91:e6:bf:8b:25:75:98:db:f6:43:cc:26:44:1d:d0:46:b0:
         47:25:f3:2a:fa:20:47:a6:e6:71:88:3b:7f:20:5d:1f:24:15:
         b8:c6:ab:05:93:8b:b7:bf:27:c8:21:b4:a4:0b:7b:11:70:83:
         dd:18:a2:f9:76:b6:4d:da:25:59:d8:85:d0:ed:24:a0:fd:df:
         15:00:9a:97:ba:45:17:fb:5e:8b:05:70:65:52:97:0a:ca:ed:
         46:12:54:33:9c:61:70:ec:73:2a:9d:61:14:dd:47:75:ce:39:
         96:d1:6d:11:50:10:ac:17:df:87:08:5d:47:d7:bf:a8:01:85:
         51:45:7b:2c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjhFNzAxMTAvBgNVBAUTKDgxQzI2RjNEOEY0MTM2RTUxOTBDQzdBMTdENkFGNzIy
NDIyRUI2NkYwHhcNMjUxMDE5MDkwOTQ5WhcNMjUxMDI2MDkwOTQ5WjAYMRYwFAYD
VQQDEw02OGY0YWFkZC0xMmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAspcArC0UCcFNm4kIyaHd41R1LRC6mpzNvOevxkC+DZdkcuhCIwQVYvAo3VNZ
gFj4YCCAUzXUkVA/meJ1PFSQ+51FR8CqBm09mEF8T2LN/y0QSHZ4xHHC/OrwIBKs
vaRnoMMToXbgOhx0klDmhg5uFuvXBdGqcbYT9HcVme7qk1ueNNApq5a7Tj0kZZ4H
T35RM3f78TLG2qBM+3vTubH3vIl9YY4HTbkrmhpvVJqYZ2/FHvenl/R/RM3dAme/
klkZU4H63WFB6+35kSSYITxJyZDufFmQPI1TRlBiVijq80LCSWLIpsiZqYKsRlrk
Y2l+kIaWkrs+bkhZMFlNI2UGrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqr9up5
hN0e35cDV/5gJfNsBJsVMB8GA1UdIwQYMBaAFIHCbz2PQTblGQzHoX1q9yJCLrZv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEU3MC8yRDk5NzBEODk1
NUExMUVGQkQ5RTAyNEFDNEY5QUUwMi9nY0p2UFk5Qk51VVpETWVoZldyM0lrSXV0
bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2djSnZQWTlCTnVVWkRNZWhmV3IzSWtJdXRtOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OEU3MC8yRDk5NzBEODk1NUExMUVGQkQ5RTAyNEFDNEY5QUUwMi9nY0p2UFk5Qk51
VVpETWVoZldyM0lrSXV0bTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDVv8FFPv+4722MIFAZ1IfxCKtWrHQI3FHMdzZnR+cshZONVoldGX27
iEtHFsmedvfybMj9SWN4yYJjOPzVW1sfQkGxkGz2n2bWkE1RE+dIRZMCI61u6GRn
nXOHm88DLFFC2pJcmjhSFOYTtooH4VgfcUTJhqnI/Apsz/zs+aDWkea/iyV1mNv2
Q8wmRB3QRrBHJfMq+iBHpuZxiDt/IF0fJBW4xqsFk4u3vyfIIbSkC3sRcIPdGKL5
drZN2iVZ2IXQ7SSg/d8VAJqXukUX+16LBXBlUpcKyu1GElQznGFw7HMqnWEU3Ud1
zjmW0W0RUBCsF9+HCF1H17+oAYVRRXss
-----END CERTIFICATE-----
Generated at Tue Oct 21 10:17:23 2025 by rpki-client