Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
File:                     TRdqC0V6blaV03p-y43LOnPLSBI.mft (raw, json)
Hash identifier:          mOE5wMBhczOW73pnjaYCa5KL/aSSmm+YG+e11UOJrdo=
Subject key identifier:   A7:D6:D1:58:C6:A7:08:9C:3C:FC:64:3B:CF:25:F8:C9:99:89:61:CC
Authority key identifier: 4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12
Certificate issuer:       /CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812
Certificate serial:       1252
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
Manifest number:          1227
Signing time:             Fri 08 Aug 2025 17:20:19 +0000
Manifest this update:     Fri 08 Aug 2025 17:20:18 +0000
Manifest next update:     Fri 15 Aug 2025 17:20:18 +0000
Files and hashes:         1: TRdqC0V6blaV03p-y43LOnPLSBI.crl (hash: gqZqWojaxLDb0oSAwSn9zHlusqZGxUCrAnRMratYf6Q=)
                          2: FDBAF28A0DD911F083E3DA5FC4F9AE02.roa (hash: kIAHkFLOpwolSJf04aD3JLXYoBABYe2ZStZeaKIW870=)
                          3: 20FA35820DD811F08B2CB42FC4F9AE02.roa (hash: ivlmtXesZi45jYGzQTce8ZrgJvENn+C2mo88/M8f84c=)
                          4: E7C319C60DD911F0A4D25B5FC4F9AE02.roa (hash: Fb+Ti1WbP+2ky2gp08ieDxdIQQX1VZl4dWu/c8T0fjM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl
                          rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4690 (0x1252)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A8A4, serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812
        Validity
            Not Before: Aug  8 17:20:18 2025 GMT
            Not After : Aug 15 17:20:18 2025 GMT
        Subject: CN=689631d3-a701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9d:5c:50:04:52:93:00:28:ef:35:c5:4c:c9:
                    9f:d3:1f:c7:38:15:44:0f:ef:ef:a5:05:8c:12:41:
                    f2:58:8b:fc:e5:76:de:69:21:2a:b1:4a:ca:37:72:
                    e4:2f:b6:11:76:2b:37:52:b4:24:4d:eb:2d:de:95:
                    a6:96:ce:cc:e2:bd:ee:05:80:61:16:a3:d7:ec:f0:
                    fb:90:8b:7c:c6:e5:bd:ad:8b:ad:b2:d1:0a:93:36:
                    c9:f7:3b:73:7d:83:ba:88:71:86:b8:eb:36:3a:65:
                    dd:40:34:0d:1a:fd:0f:e6:86:71:88:81:1c:a1:e6:
                    57:c2:53:34:e9:14:dd:5b:2a:a0:c8:ee:cc:91:69:
                    b1:31:46:62:6f:4b:55:12:e6:6c:44:f7:65:41:5a:
                    9e:c5:6f:17:85:83:17:35:03:bc:7d:f1:f2:78:9f:
                    1b:92:75:42:11:e4:e0:55:cb:e6:1f:1d:18:98:53:
                    d3:49:77:8c:e5:e1:21:a6:ad:47:e5:b6:46:30:7e:
                    cb:86:d2:ee:76:2d:09:ef:4e:21:a5:2f:03:5b:5f:
                    31:d9:a8:1d:7c:35:24:02:2a:45:13:47:2e:ec:a8:
                    09:be:d7:bd:e5:4a:ed:26:79:88:15:f1:8c:14:61:
                    39:d8:85:7e:27:92:b8:7b:e1:79:be:6f:95:aa:46:
                    a4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D6:D1:58:C6:A7:08:9C:3C:FC:64:3B:CF:25:F8:C9:99:89:61:CC
            X509v3 Authority Key Identifier:
                keyid:4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:aa:f6:ee:b1:29:2d:29:e9:5e:a6:a7:44:2b:59:e7:15:39:
         d3:32:c5:51:57:89:84:79:13:80:30:c8:c0:79:4e:23:1c:f7:
         3e:b1:6a:43:ef:4b:95:59:6c:43:95:a0:98:d3:f6:3d:a3:1c:
         77:4b:64:67:54:e8:1f:32:ce:53:65:44:dc:42:3c:94:ee:85:
         5d:35:bf:80:43:d1:01:28:52:b8:80:85:d2:4f:38:82:bb:75:
         0a:89:b6:af:65:d5:b9:c1:e7:5f:84:12:0d:c3:f2:7e:84:d6:
         08:c8:80:5d:03:df:a8:38:35:8d:92:0f:1e:cb:b5:06:28:0a:
         ab:e8:48:e6:59:bd:4c:20:e9:e1:cb:dd:c4:43:e5:bf:a3:38:
         04:dd:22:86:cf:0f:fd:4a:2e:c6:1d:95:5d:0f:86:6e:6e:a9:
         18:4a:8b:89:4b:f1:39:27:be:5a:fc:c7:25:16:6a:3b:1a:64:
         e9:b1:74:d2:03:5f:0b:33:77:6a:b4:17:75:f5:1c:66:aa:cd:
         f6:77:31:3e:8e:54:82:1f:76:f6:67:f8:d5:66:f9:53:9a:30:
         c5:dc:66:00:41:d7:6e:26:61:7e:b8:d7:52:12:91:84:ba:5f:
         aa:ee:b6:fa:2b:6c:5d:77:a3:66:27:66:90:ee:5e:c3:1e:19:
         cd:2c:a5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:24:37 2025 by rpki-client