Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
File:                     TG0zuIPIM699cikDd67c0LWjzdA.mft (raw, json)
Hash identifier:          a0TITPW+aXsIF6NxsJbOU6qnTTzhUlASrrbYGCJy278=
Subject key identifier:   1D:84:41:D9:66:48:26:8F:E3:7E:97:93:C5:2E:08:36:EF:8D:B8:26
Authority key identifier: 4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0
Certificate issuer:       /CN=A9132C14/serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0
Certificate serial:       054C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
Manifest number:          0544
Signing time:             Sat 14 Jun 2025 23:09:26 +0000
Manifest this update:     Sat 14 Jun 2025 23:09:26 +0000
Manifest next update:     Sat 21 Jun 2025 23:09:26 +0000
Files and hashes:         1: TG0zuIPIM699cikDd67c0LWjzdA.crl (hash: 6KHYoh83KwxNdBde0ivs0UC4OUagje42V6AgSFss5gM=)
                          2: 58BB655AF47C11EBB34AB831C4F9AE02.roa (hash: YGvbQnTcIdlfOTH6YnyF9Rzx2xpGEbYHp7xYeN5ch34=)
                          3: 595C959CF47C11EBB34AB831C4F9AE02.roa (hash: WH1se2Qhy8RI1ONvLaN4qa1WrKYL/nqvZGw9A9exjh8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl
                          rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 23:09:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1356 (0x54c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132C14, serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0
        Validity
            Not Before: Jun 14 23:09:26 2025 GMT
            Not After : Jun 21 23:09:26 2025 GMT
        Subject: CN=684e0126-5896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:30:83:50:42:21:bd:d1:3c:bc:80:6d:b6:95:
                    e4:05:77:88:95:ed:e2:9f:ac:de:6a:77:de:c2:77:
                    ce:8b:30:71:e0:d1:d4:2d:62:73:5b:8d:58:a7:68:
                    dc:61:24:b1:e1:b8:bd:22:ec:af:d1:a2:94:3a:3d:
                    eb:67:64:09:7f:99:75:e2:ee:72:36:6d:19:35:d8:
                    53:ef:c5:79:85:97:1e:8a:a0:24:92:ae:d1:6a:d7:
                    45:7b:9b:44:10:6a:59:5f:52:0a:9e:8e:29:1f:46:
                    e5:b1:e0:2e:2d:2c:57:e5:0e:4a:41:9e:f8:41:61:
                    f6:2e:99:b0:6e:13:ff:c9:36:d1:e2:0f:42:eb:b2:
                    7b:63:c7:77:e5:d2:5a:6a:41:72:18:28:85:e0:fe:
                    ee:5d:ef:ea:4b:65:b2:b3:0b:e0:b9:39:e3:e6:15:
                    15:d9:90:a5:91:06:68:c0:1f:ce:6f:36:3a:5b:6b:
                    5d:e7:be:ba:24:57:72:dd:e0:58:ab:2e:32:21:40:
                    26:cc:82:dd:5a:eb:c0:76:55:16:97:66:20:47:84:
                    1d:2d:95:fe:db:92:6e:d0:59:a8:77:b2:43:d4:ad:
                    21:6f:76:a7:78:f3:b9:be:e5:94:34:2b:71:65:93:
                    97:da:24:5a:b7:41:2d:01:b3:bf:08:ae:f7:99:ad:
                    71:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:84:41:D9:66:48:26:8F:E3:7E:97:93:C5:2E:08:36:EF:8D:B8:26
            X509v3 Authority Key Identifier:
                keyid:4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:2c:1f:46:4f:4f:a6:6f:31:24:51:c0:94:8b:38:21:a0:65:
         14:a8:39:cf:9a:0a:44:6c:0b:7a:c4:e8:e7:99:7e:72:96:4d:
         bc:48:51:4a:c7:e2:3a:dd:43:e6:7a:3b:82:a1:ee:da:7d:05:
         7f:60:2a:3f:e1:19:93:81:98:37:7a:68:e2:70:77:a1:f5:81:
         c4:d0:57:7e:d6:06:96:21:2a:7b:b0:ff:9f:79:d5:38:4b:fc:
         45:02:e0:57:e9:65:f5:7e:92:15:64:e4:5e:59:95:b9:4f:de:
         4c:9d:00:4e:59:55:5b:3d:e3:9a:f1:ea:b5:fe:87:75:70:e2:
         c0:c8:2e:fe:62:05:2b:a7:bb:4a:a7:24:42:b9:ba:8d:37:0b:
         cb:e1:d8:ca:e4:1f:08:57:01:ee:60:c2:35:9c:f6:a6:1c:08:
         6c:03:e0:89:fc:67:cc:06:88:4c:7a:e0:7f:f5:a3:64:cc:16:
         98:31:04:02:c6:34:2f:94:6f:12:20:ab:fd:43:8f:d0:e3:a6:
         bd:65:1c:8b:76:95:f8:a2:b8:24:e5:dd:5a:b3:24:c6:f7:77:
         34:9d:56:f1:74:ca:a0:94:44:a6:a6:24:c9:57:f9:d6:14:49:
         9c:b6:c9:6a:d8:e2:3d:5e:b4:7b:e2:66:37:bd:1e:ce:8a:95:
         b9:b4:50:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:04:31 2025 by rpki-client