Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft
File:                     v_236_RdfGG_nSOQip84wzKYWXA.mft (raw, json)
Hash identifier:          pV5TaKWU62iH8HyC2L03vn7Mro+/Y70gB0279mYvVrk=
Subject key identifier:   9E:62:16:F0:61:9A:D8:9B:51:CD:83:D1:25:B8:A3:27:57:51:43:BF
Authority key identifier: BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70
Certificate issuer:       /CN=A912F9FB/serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970
Certificate serial:       195F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft
Manifest number:          1947
Signing time:             Tue 04 Nov 2025 16:31:28 +0000
Manifest this update:     Tue 04 Nov 2025 16:31:28 +0000
Manifest next update:     Tue 11 Nov 2025 16:31:28 +0000
Files and hashes:         1: v_236_RdfGG_nSOQip84wzKYWXA.crl (hash: KOqrs3msZ9B0scKzga13+pcL9aOBD+l/HFnWFmC42KM=)
                          2: 1647AB229DF911F085AD790CC4F9AE02.roa (hash: P74bFi/tw8t0dBUx4plJ1vQwp9lsosaEXUA0q2WAHks=)
                          3: 15B87C049DF911F085AD790CC4F9AE02.roa (hash: CbZhTawqVSoSUiBZBfoKEa/sEDdmZI1DXyDvCEac1VQ=)
                          4: 8732232CCBA011E887F87451C4F9AE02.roa (hash: d4g6nOFA6rT76ss8TIfPVoSl8yk4nYFL3JBknIEAxA8=)
                          5: 62B6389287C211EE949BAE7BC4F9AE02.roa (hash: olDXMZkGA0r/qNiSe03tThyIk85/feQoUgNKftYserc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl
                          rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 16:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6495 (0x195f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F9FB, serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970
        Validity
            Not Before: Nov  4 16:31:28 2025 GMT
            Not After : Nov 11 16:31:28 2025 GMT
        Subject: CN=690a2a60-e516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:af:e5:86:d2:4e:28:dc:3c:5c:9a:26:8e:21:
                    56:8f:b0:bc:5b:0b:80:f1:b8:28:c7:8b:97:0b:af:
                    e3:9e:ae:d3:30:3b:f4:d4:98:0d:d4:c3:d3:e2:5c:
                    82:ac:ad:69:0d:76:1d:79:26:3f:7b:cb:d1:73:32:
                    52:5d:44:a7:8f:da:ac:9b:a0:2c:ce:16:c2:63:f9:
                    60:97:7b:34:96:7f:eb:69:44:eb:2c:4d:88:65:48:
                    f3:37:01:d3:4e:5d:f3:50:9b:6d:ab:cf:dc:06:f1:
                    9e:f6:ca:1b:78:43:f5:2b:53:74:9a:f1:ea:e6:01:
                    73:e5:d4:7e:6c:88:65:b8:ff:f9:2b:df:cc:0b:10:
                    ee:48:6d:b5:65:e3:97:70:e1:4f:20:11:0e:ff:a2:
                    0d:18:8c:30:95:2f:ea:7d:45:c2:72:a2:fb:31:b0:
                    3f:69:b7:95:a8:01:88:75:98:55:aa:04:07:bd:8c:
                    79:8f:66:40:3d:32:05:57:2b:50:07:ad:c0:28:d4:
                    d7:5a:e9:eb:e7:cf:76:61:ff:7e:ec:14:7f:7f:71:
                    0c:cd:3d:69:7d:0c:34:da:01:0b:68:cf:2b:20:83:
                    ab:87:ce:4d:a8:ef:8c:64:41:49:d9:97:b6:a7:33:
                    8b:36:1e:9f:87:f0:5d:3d:3b:87:9b:f2:28:25:2e:
                    83:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:62:16:F0:61:9A:D8:9B:51:CD:83:D1:25:B8:A3:27:57:51:43:BF
            X509v3 Authority Key Identifier:
                keyid:BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:27:34:f2:36:3a:fb:33:ad:f3:c3:33:66:0b:eb:b8:68:d8:
         59:79:43:c5:8a:ee:27:53:ab:ea:e8:94:6e:a1:d3:69:74:41:
         70:f3:14:9e:5b:ce:79:0f:ac:d6:a1:a7:ec:df:0c:85:f4:72:
         64:df:1d:b9:4d:1e:09:db:00:86:04:56:7d:6f:2b:4f:42:a2:
         ba:75:a6:f3:1b:78:5a:79:31:f2:c4:b9:8a:76:21:41:c9:77:
         ca:fc:60:f4:fe:8c:47:3f:3d:5e:ee:03:e3:7f:60:c7:91:19:
         62:14:f5:45:18:3a:4e:b5:37:f8:8c:df:d1:77:81:ce:1e:11:
         69:43:d2:00:11:8f:56:f0:9d:bd:2b:cb:d9:32:a5:b5:2c:e8:
         aa:a9:07:41:50:9a:7a:ee:ec:e5:a6:a3:fc:2a:05:e5:11:9b:
         fd:16:00:f2:c8:fd:5b:89:b6:a3:4e:47:2c:a8:98:5e:66:78:
         6c:63:31:48:13:d1:b5:37:9c:e3:42:93:7b:14:61:db:cb:01:
         3e:5a:33:54:fb:21:c8:ec:30:cb:eb:5c:6c:3b:be:13:6c:27:
         36:95:e1:ee:7a:9b:46:3e:6f:96:15:7e:ef:7a:cf:2b:be:a4:
         f8:53:d9:78:04:98:bc:19:68:90:ff:e7:24:da:97:8e:d4:59:
         75:2d:45:e6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkY5RkIxMTAvBgNVBAUTKEJGRkRCN0VCRjQ1RDdDNjFCRjlEMjM5MDhBOUYzOEMz
MzI5ODU5NzAwHhcNMjUxMTA0MTYzMTI4WhcNMjUxMTExMTYzMTI4WjAYMRYwFAYD
VQQDEw02OTBhMmE2MC1lNTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArq/lhtJOKNw8XJomjiFWj7C8WwuA8bgox4uXC6/jnq7TMDv01JgN1MPT4lyC
rK1pDXYdeSY/e8vRczJSXUSnj9qsm6AszhbCY/lgl3s0ln/raUTrLE2IZUjzNwHT
Tl3zUJttq8/cBvGe9sobeEP1K1N0mvHq5gFz5dR+bIhluP/5K9/MCxDuSG21ZeOX
cOFPIBEO/6INGIwwlS/qfUXCcqL7MbA/abeVqAGIdZhVqgQHvYx5j2ZAPTIFVytQ
B63AKNTXWunr5892Yf9+7BR/f3EMzT1pfQw02gELaM8rIIOrh85NqO+MZEFJ2Ze2
pzOLNh6fh/BdPTuHm/IoJS6DZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5iFvBh
mtibUc2D0SW4oydXUUO/MB8GA1UdIwQYMBaAFL/9t+v0XXxhv50jkIqfOMMymFlw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjlGQi9BRjAwOThEMDg5
NkYxMUU3OEE4MUM4M0NDNEY5QUUwMi92XzIzNl9SZGZHR19uU09RaXA4NHd6S1lX
WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZfMjM2X1JkZkdHX25TT1FpcDg0d3pLWVdYQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RjlGQi9BRjAwOThEMDg5NkYxMUU3OEE4MUM4M0NDNEY5QUUwMi92XzIzNl9SZGZH
R19uU09RaXA4NHd6S1lXWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCAJzTyNjr7M63zwzNmC+u4aNhZeUPFiu4nU6vq6JRuodNpdEFw8xSe
W855D6zWoafs3wyF9HJk3x25TR4J2wCGBFZ9bytPQqK6dabzG3haeTHyxLmKdiFB
yXfK/GD0/oxHPz1e7gPjf2DHkRliFPVFGDpOtTf4jN/Rd4HOHhFpQ9IAEY9W8J29
K8vZMqW1LOiqqQdBUJp67uzlpqP8KgXlEZv9FgDyyP1bibajTkcsqJheZnhsYzFI
E9G1N5zjQpN7FGHbywE+WjNU+yHI7DDL61xsO74TbCc2leHueptGPm+WFX7ves8r
vqT4U9l4BJi8GWiQ/+ck2peO1Fl1LUXm
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:03:55 2025 by rpki-client