Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft
File:                     GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft (raw, json)
Hash identifier:          n5q3ys45ohZMs0RRWhe7t/p/bIQzMoz5CyEZKIBD3eY=
Subject key identifier:   83:E8:8B:6C:93:B2:D0:B7:2D:B9:DE:9C:98:2E:75:61:BB:05:F9:11
Authority key identifier: 1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D
Certificate issuer:       /CN=A91B0720/serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D
Certificate serial:       0422
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft
Manifest number:          03F7
Signing time:             Wed 05 Nov 2025 00:43:38 +0000
Manifest this update:     Wed 05 Nov 2025 00:43:37 +0000
Manifest next update:     Wed 12 Nov 2025 00:43:37 +0000
Files and hashes:         1: GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl (hash: 8x/HWCFWk/Qe2SWt52L5KENWqiwVGeKzvJxfQgHfomc=)
                          2: 3D3FCB5EC8F911EFA0603266C4F9AE02.roa (hash: 8BJmRiErzxldmGuPcVm3YUprnJm+HfKbTIGSnCrNI1I=)
                          3: F0223A56C8F711EFB2542D5FC4F9AE02.roa (hash: slEYVdAk6tIbZpblC8w7KpBF1oowZxGxHf1f2574AkA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl
                          rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 00:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1058 (0x422)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0720, serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D
        Validity
            Not Before: Nov  5 00:43:37 2025 GMT
            Not After : Nov 12 00:43:37 2025 GMT
        Subject: CN=690a9dba-8eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:15:9b:17:30:6c:70:76:40:61:1d:61:bd:72:
                    8f:45:0f:0e:f5:1f:4f:ad:f7:54:c9:1f:51:47:78:
                    06:80:84:89:04:99:bc:a8:58:bd:cc:15:6b:58:29:
                    a1:37:5d:52:14:f4:d4:0b:06:be:d4:54:3e:91:c5:
                    7a:c3:e8:1d:bf:3b:b6:68:ea:b8:3f:cc:95:b4:32:
                    fa:40:2d:7c:1d:fd:e2:93:cf:76:35:97:b1:c7:2b:
                    3c:b1:57:54:55:29:30:54:cb:e0:69:73:01:02:e3:
                    a3:3e:4f:2d:78:cb:41:e5:90:1a:59:53:f7:85:92:
                    b7:71:9f:b0:c2:e2:ba:98:5b:ad:73:0f:2a:a2:7a:
                    2e:57:fb:88:7d:5b:df:80:c0:63:c1:b3:52:ba:51:
                    50:3d:3a:a8:05:c8:ea:73:62:9a:6b:5c:06:e2:5a:
                    04:f5:e1:fc:90:58:13:fa:31:08:8b:23:47:3c:45:
                    b4:8a:0e:58:a6:8a:12:b6:b4:76:ff:0c:b7:37:9b:
                    85:7e:3a:6c:14:29:58:7f:b0:a7:b0:5f:4c:d3:21:
                    8b:30:71:a0:e0:7e:53:ba:98:86:be:c9:59:8f:3d:
                    4b:11:05:ea:07:05:28:a0:11:c6:f8:6d:f0:de:1b:
                    46:5b:a3:9e:56:ef:1c:f9:75:f8:5c:5d:d5:a7:6a:
                    f8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E8:8B:6C:93:B2:D0:B7:2D:B9:DE:9C:98:2E:75:61:BB:05:F9:11
            X509v3 Authority Key Identifier:
                keyid:1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:f0:11:ec:5d:8b:33:ce:9e:34:5b:76:98:7d:aa:b4:aa:4e:
         23:b3:7a:f7:38:d7:d1:57:5a:ef:f1:79:92:aa:65:b5:10:08:
         eb:d5:e4:17:1d:13:50:be:0d:87:69:76:8f:34:72:32:8d:70:
         2e:c2:45:88:45:53:68:94:b1:de:cc:d9:60:17:38:a2:2c:02:
         04:66:cb:18:6e:03:75:00:57:ac:c6:cb:b9:d4:8d:e5:c5:0f:
         b0:98:ea:ef:ac:a8:df:e4:e6:4b:30:c0:df:2a:e1:66:c7:3e:
         ad:49:54:09:18:5b:af:b1:ba:20:d1:9c:a8:22:c7:3f:24:3d:
         40:9c:b8:79:25:f5:8d:44:d8:7e:e5:14:6f:a1:f4:4b:69:93:
         8e:66:a5:3a:f7:24:16:ac:90:3b:8e:82:a9:1e:ca:ca:5b:7b:
         f7:88:70:fa:25:94:e0:49:8c:9c:8b:35:18:be:27:69:fe:bf:
         71:e4:a8:3f:69:fe:c2:60:36:1c:15:62:a4:57:ec:d9:08:80:
         c1:b9:00:52:a6:10:3a:a4:09:1c:5f:73:77:77:a9:a0:ec:ec:
         de:0f:0e:a3:37:65:82:ba:a8:98:54:e1:c4:34:42:aa:bd:3e:
         61:20:76:1c:54:be:9c:08:26:e7:7a:d6:6a:9f:b4:ca:63:88:
         61:b3:53:89
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjA3MjAxMTAvBgNVBAUTKDFCMDM2QkZGODc4MDdDQkZDNkU5MTIzNkNCMDg2RDRG
RTJCMDk5M0QwHhcNMjUxMTA1MDA0MzM3WhcNMjUxMTEyMDA0MzM3WjAYMRYwFAYD
VQQDEw02OTBhOWRiYS04ZWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7xWbFzBscHZAYR1hvXKPRQ8O9R9PrfdUyR9RR3gGgISJBJm8qFi9zBVrWCmh
N11SFPTUCwa+1FQ+kcV6w+gdvzu2aOq4P8yVtDL6QC18Hf3ik892NZexxys8sVdU
VSkwVMvgaXMBAuOjPk8teMtB5ZAaWVP3hZK3cZ+wwuK6mFutcw8qonouV/uIfVvf
gMBjwbNSulFQPTqoBcjqc2Kaa1wG4loE9eH8kFgT+jEIiyNHPEW0ig5YpooStrR2
/wy3N5uFfjpsFClYf7CnsF9M0yGLMHGg4H5TupiGvslZjz1LEQXqBwUooBHG+G3w
3htGW6OeVu8c+XX4XF3Vp2r4wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPoi2yT
stC3LbnenJgudWG7BfkRMB8GA1UdIwQYMBaAFBsDa/+HgHy/xukSNssIbU/isJk9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDcyMC8yMDlGOEI3NEE3
OUIxMUVDOEREMkIxNTdDNEY5QUUwMi9Hd05yXzRlQWZMX0c2UkkyeXdodFQtS3dt
VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d3TnJfNGVBZkxfRzZSSTJ5d2h0VC1Ld21UMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDcyMC8yMDlGOEI3NEE3OUIxMUVDOEREMkIxNTdDNEY5QUUwMi9Hd05yXzRlQWZM
X0c2UkkyeXdodFQtS3dtVDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAl8BHsXYszzp40W3aYfaq0qk4js3r3ONfRV1rv8XmSqmW1EAjr1eQX
HRNQvg2HaXaPNHIyjXAuwkWIRVNolLHezNlgFziiLAIEZssYbgN1AFesxsu51I3l
xQ+wmOrvrKjf5OZLMMDfKuFmxz6tSVQJGFuvsbog0ZyoIsc/JD1AnLh5JfWNRNh+
5RRvofRLaZOOZqU69yQWrJA7joKpHsrKW3v3iHD6JZTgSYycizUYvidp/r9x5Kg/
af7CYDYcFWKkV+zZCIDBuQBSphA6pAkcX3N3d6mg7OzeDw6jN2WCuqiYVOHENEKq
vT5hIHYcVL6cCCbnetZqn7TKY4hhs1OJ
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:26:15 2025 by rpki-client