Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
File:                     GHAMs9ZQejMEuusnDe7RMBzj2QI.mft (raw, json)
Hash identifier:          E5ax0tobzlE69rOrDPiza/s7GN6CqWhyLsN6GavpgFc=
Subject key identifier:   5C:23:4D:44:FA:BB:DB:B1:21:BB:62:B3:C7:13:6D:2D:58:32:CE:FE
Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02
Certificate issuer:       /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
Certificate serial:       187D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
Manifest number:          1863
Signing time:             Fri 08 Aug 2025 16:39:23 +0000
Manifest this update:     Fri 08 Aug 2025 16:39:23 +0000
Manifest next update:     Fri 15 Aug 2025 16:39:23 +0000
Files and hashes:         1: GHAMs9ZQejMEuusnDe7RMBzj2QI.crl (hash: 3J0ZXTZ7PRlFQnQDFoovEyUD5+Q1HaC95DkFYAr4ZNg=)
                          2: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (hash: oKQhI+83g6vqFAl7basVs7Sw18T4MEh7Nu9fLLathWs=)
                          3: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (hash: M0giNeJUYFHHWIGJ3hp4IIxg76YLnoDKySser5XKcL4=)
                          4: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (hash: tLIsLDvbVjMe1ALZXZoP7laPhfEa7wWbXxVFhcp282s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl
                          rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6269 (0x187d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
        Validity
            Not Before: Aug  8 16:39:23 2025 GMT
            Not After : Aug 15 16:39:23 2025 GMT
        Subject: CN=6896283b-cf5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:40:47:85:f0:63:bd:9b:81:47:1d:24:74:dc:
                    4e:ac:de:1b:f5:d1:dc:2e:d8:ae:2b:f0:bc:0d:f5:
                    06:1e:2f:9d:92:10:57:ec:55:2d:1d:23:e0:9a:28:
                    2d:cd:11:e9:7a:07:cb:62:8e:e2:de:61:01:6e:1e:
                    84:0f:d5:e5:94:0a:18:c5:e9:3e:7b:00:97:88:92:
                    9c:d1:3b:44:d1:0d:f2:89:9c:87:99:59:70:41:67:
                    60:a7:e6:f8:56:ae:93:63:50:92:6c:a1:ba:57:5e:
                    8f:f7:f9:09:84:3a:ec:e3:96:74:76:9c:53:c0:f9:
                    84:93:af:51:8a:7b:4b:80:73:1e:6d:75:fe:20:40:
                    16:dc:0a:7c:4c:1a:d3:63:dc:16:89:10:3a:66:6d:
                    74:e3:23:b2:e8:6c:e5:f0:56:a9:49:4b:b2:7e:36:
                    a5:c7:ae:78:5b:8c:02:0f:b2:74:66:65:9e:44:e4:
                    9f:b0:2f:08:28:1c:13:37:de:f8:db:55:04:d0:d3:
                    08:3b:2e:0e:99:b9:28:65:5f:dc:1d:ad:bc:3f:58:
                    9f:08:cc:22:05:c3:0b:8b:81:bd:e5:10:bf:2c:a5:
                    b0:65:30:5b:1b:e8:bd:92:8b:82:ee:90:a1:aa:99:
                    41:e1:2c:ce:19:8e:35:f0:ee:1b:ec:2b:2e:bb:aa:
                    2e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:23:4D:44:FA:BB:DB:B1:21:BB:62:B3:C7:13:6D:2D:58:32:CE:FE
            X509v3 Authority Key Identifier:
                keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:24:30:65:a4:9d:1c:20:6d:5f:29:f1:9f:fe:8e:a8:b3:ad:
         b8:c1:98:6c:56:10:5c:96:1e:b2:0f:e5:20:94:ec:6b:3e:de:
         17:f5:b6:f1:75:05:27:eb:f7:a5:e4:49:8e:9d:8a:93:61:e7:
         49:ee:40:ab:68:cd:57:58:e7:18:18:7e:1f:90:4f:59:0d:d4:
         2b:cf:41:f5:0e:42:6e:ef:89:68:51:7e:c9:87:a5:40:3f:50:
         83:10:5f:7e:0e:a7:82:94:2e:4e:d6:a8:a1:7f:b2:65:d1:85:
         0e:d5:62:68:ae:6c:c8:d2:d5:70:75:71:1f:57:77:02:d9:8e:
         67:58:13:3b:a5:1c:3f:7f:86:f1:59:5a:44:b4:91:94:6d:98:
         45:63:4d:40:0b:5a:4e:98:6b:b5:a0:86:2e:1e:bb:a9:f7:a9:
         84:69:31:bf:15:e0:b0:0a:c5:83:d7:d6:d0:6b:d1:4f:0e:8c:
         b9:e2:39:33:7d:59:4d:2b:39:6c:76:2f:da:2f:c6:46:b0:e7:
         8b:44:90:b5:53:45:32:a2:87:11:16:f4:d6:14:56:79:ec:db:
         c0:6b:2c:5a:00:07:12:61:1f:34:3e:d5:bc:f8:b9:5a:fc:b8:
         83:8f:0c:a6:dd:d8:59:5e:3a:6c:39:f1:31:d6:93:c3:c2:28:
         42:a1:5c:fd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZCQ0YxMTAvBgNVBAUTKDE4NzAwQ0IzRDY1MDdBMzMwNEJBRUIyNzBERUVEMTMw
MUNFM0Q5MDIwHhcNMjUwODA4MTYzOTIzWhcNMjUwODE1MTYzOTIzWjAYMRYwFAYD
VQQDEw02ODk2MjgzYi1jZjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4UBHhfBjvZuBRx0kdNxOrN4b9dHcLtiuK/C8DfUGHi+dkhBX7FUtHSPgmigt
zRHpegfLYo7i3mEBbh6ED9XllAoYxek+ewCXiJKc0TtE0Q3yiZyHmVlwQWdgp+b4
Vq6TY1CSbKG6V16P9/kJhDrs45Z0dpxTwPmEk69RintLgHMebXX+IEAW3Ap8TBrT
Y9wWiRA6Zm104yOy6Gzl8FapSUuyfjalx654W4wCD7J0ZmWeROSfsC8IKBwTN974
21UE0NMIOy4OmbkoZV/cHa28P1ifCMwiBcMLi4G95RC/LKWwZTBbG+i9kouC7pCh
qplB4SzOGY418O4b7Csuu6ou2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwjTUT6
u9uxIbtis8cTbS1YMs7+MB8GA1UdIwQYMBaAFBhwDLPWUHozBLrrJw3u0TAc49kC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJDRi80QUI1NzZCRUFB
NUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVqTUV1dXNuRGU3Uk1Cemoy
UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dIQU1zOVpRZWpNRXV1c25EZTdSTUJ6ajJRSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RkJDRi80QUI1NzZCRUFBNUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVq
TUV1dXNuRGU3Uk1CemoyUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQApJDBlpJ0cIG1fKfGf/o6os624wZhsVhBclh6yD+UglOxrPt4X9bbx
dQUn6/el5EmOnYqTYedJ7kCraM1XWOcYGH4fkE9ZDdQrz0H1DkJu74loUX7Jh6VA
P1CDEF9+DqeClC5O1qihf7Jl0YUO1WJormzI0tVwdXEfV3cC2Y5nWBM7pRw/f4bx
WVpEtJGUbZhFY01AC1pOmGu1oIYuHrup96mEaTG/FeCwCsWD19bQa9FPDoy54jkz
fVlNKzlsdi/aL8ZGsOeLRJC1U0UyoocRFvTWFFZ57NvAayxaAAcSYR80PtW8+Lla
/LiDjwym3dhZXjpsOfEx1pPDwihCoVz9
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:35:13 2025 by rpki-client