Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft
File:                     GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft (raw, json)
Hash identifier:          NOn6XJ77Wygi8zQ1+SUGFUsxPfNL/G998VIeCOMOnzs=
Subject key identifier:   73:5D:D2:48:91:8A:A3:92:14:8D:15:6E:4B:2C:7E:0F:06:5E:00:B5
Authority key identifier: 18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06
Certificate issuer:       /CN=A917D472/serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406
Certificate serial:       D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft
Manifest number:          D4
Signing time:             Sat 09 Aug 2025 05:59:56 +0000
Manifest this update:     Sat 09 Aug 2025 05:59:56 +0000
Manifest next update:     Sat 16 Aug 2025 05:59:56 +0000
Files and hashes:         1: GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl (hash: +axk7hA8BvKTJo0stfe7dsQfDRbFXNOIbN0KDcwuiRQ=)
                          2: B7FDD0B031E711EF9FBC7372C4F9AE02.roa (hash: 6k5p/IoEaHlPBZxEG5I/1TmRBsboDJLoq3IRABT/4wQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl
                          rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D472, serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406
        Validity
            Not Before: Aug  9 05:59:56 2025 GMT
            Not After : Aug 16 05:59:56 2025 GMT
        Subject: CN=6896e3dc-dc69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:14:ae:8b:19:d0:0b:45:6f:e5:6a:69:c9:dd:
                    bb:d4:c3:db:5d:5b:91:65:9d:9a:57:8b:53:cb:e6:
                    77:2d:02:16:5a:f2:30:59:96:60:78:f9:57:37:ed:
                    b0:b5:4b:7a:ab:3a:dd:45:95:15:bd:79:e7:46:1e:
                    8f:f4:22:57:75:81:d2:d8:25:28:b4:a3:49:9d:91:
                    4d:f2:5c:16:25:07:39:08:d2:c3:66:da:5f:9a:f7:
                    02:61:cc:c2:06:e4:53:ae:ed:47:08:12:3b:37:47:
                    e0:1e:c7:9b:7e:11:25:74:a2:bb:a2:11:73:74:65:
                    dc:a9:41:ff:c5:fc:fa:ed:53:47:7c:27:dd:c8:32:
                    71:64:35:c1:3e:1b:57:be:0f:dc:71:a0:6c:da:b0:
                    83:c6:6d:2f:92:d5:ae:ba:f4:98:c3:ac:22:8b:d6:
                    7f:48:2a:c4:ca:5f:0f:a3:a1:15:ca:b1:2f:8c:c0:
                    ae:64:9c:ba:27:1f:f4:2d:f4:fd:fb:a9:90:e4:a2:
                    bc:83:92:06:23:fb:41:9d:68:87:58:ed:ac:d6:4b:
                    c4:c3:24:f6:81:45:bc:5f:2d:5a:23:b2:99:ac:b5:
                    dc:2b:aa:6d:54:b2:1d:61:60:d6:58:59:8a:29:f7:
                    95:6b:56:b5:dd:87:98:14:e3:5b:0f:29:57:4c:8d:
                    3a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5D:D2:48:91:8A:A3:92:14:8D:15:6E:4B:2C:7E:0F:06:5E:00:B5
            X509v3 Authority Key Identifier:
                keyid:18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:43:fc:e1:65:9b:97:86:18:da:56:b3:c4:44:fb:f0:62:ad:
         8a:a2:5f:ac:de:a7:f5:89:34:34:0e:72:4f:83:ac:19:9e:39:
         3d:81:3e:a1:a2:06:17:06:6b:20:08:f8:84:1e:74:60:0d:55:
         a7:bb:71:5e:ef:01:f7:78:3f:55:4f:de:8c:77:55:ce:cc:36:
         7e:c6:e4:ca:44:21:af:b0:75:0b:33:a9:01:89:fb:c1:ae:c6:
         16:a8:f5:42:f6:32:c7:7e:93:13:1b:8d:86:1e:2f:87:23:63:
         f2:4b:30:c2:59:56:84:bd:43:7d:bb:51:f4:81:ab:79:89:61:
         cf:34:62:f0:99:69:14:00:75:b8:fb:cf:0e:9a:d6:7e:c1:39:
         e7:df:9e:a5:95:5a:04:94:36:2c:0c:94:d1:7e:ff:d9:ba:c2:
         9c:96:fd:29:37:71:10:86:04:00:c4:71:80:56:b5:d2:bf:13:
         de:4b:0e:06:8c:17:ad:08:e6:a4:10:3b:e0:06:05:30:2f:7b:
         9b:93:d5:c8:6a:d4:bb:9e:7c:b2:0c:b0:f4:27:2d:c6:4a:a8:
         e0:d5:f5:a8:33:1f:a2:e4:ae:66:70:52:f6:8f:44:b4:13:3e:
         36:a6:3c:44:91:28:e6:83:c1:1a:18:e1:76:9b:95:64:8e:85:
         ca:be:d6:d7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0Q0NzIxMTAvBgNVBAUTKDE4OUYyREVDNUE3MDNGN0Q2Q0ZENUY5NkFBQjVBMkU4
QThERDk0MDYwHhcNMjUwODA5MDU1OTU2WhcNMjUwODE2MDU1OTU2WjAYMRYwFAYD
VQQDEw02ODk2ZTNkYy1kYzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1hSuixnQC0Vv5Wppyd271MPbXVuRZZ2aV4tTy+Z3LQIWWvIwWZZgePlXN+2w
tUt6qzrdRZUVvXnnRh6P9CJXdYHS2CUotKNJnZFN8lwWJQc5CNLDZtpfmvcCYczC
BuRTru1HCBI7N0fgHsebfhEldKK7ohFzdGXcqUH/xfz67VNHfCfdyDJxZDXBPhtX
vg/ccaBs2rCDxm0vktWuuvSYw6wii9Z/SCrEyl8Po6EVyrEvjMCuZJy6Jx/0LfT9
+6mQ5KK8g5IGI/tBnWiHWO2s1kvEwyT2gUW8Xy1aI7KZrLXcK6ptVLIdYWDWWFmK
KfeVa1a13YeYFONbDylXTI06WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNd0kiR
iqOSFI0Vbkssfg8GXgC1MB8GA1UdIwQYMBaAFBifLexacD99bP1flqq1ouio3ZQG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDQ3Mi8xM0E4RkI0NDMx
RTYxMUVGQUU5RUU0NjBDNEY5QUUwMi9HSjh0N0Zwd1AzMXNfVi1XcXJXaTZLamRs
QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dKOHQ3RnB3UDMxc19WLVdxcldpNktqZGxBWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RDQ3Mi8xM0E4RkI0NDMxRTYxMUVGQUU5RUU0NjBDNEY5QUUwMi9HSjh0N0Zwd1Az
MXNfVi1XcXJXaTZLamRsQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAZQ/zhZZuXhhjaVrPERPvwYq2Kol+s3qf1iTQ0DnJPg6wZnjk9gT6h
ogYXBmsgCPiEHnRgDVWnu3Fe7wH3eD9VT96Md1XOzDZ+xuTKRCGvsHULM6kBifvB
rsYWqPVC9jLHfpMTG42GHi+HI2PySzDCWVaEvUN9u1H0gat5iWHPNGLwmWkUAHW4
+88OmtZ+wTnn356llVoElDYsDJTRfv/ZusKclv0pN3EQhgQAxHGAVrXSvxPeSw4G
jBetCOakEDvgBgUwL3ubk9XIatS7nnyyDLD0Jy3GSqjg1fWoMx+i5K5mcFL2j0S0
Ez42pjxEkSjmg8EaGOF2m5VkjoXKvtbX
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:09:37 2025 by rpki-client