Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft
File:                     tXSEdav1kHeBiVHMH-bti9LzEhM.mft (raw, json)
Hash identifier:          fWVWIolsRtAj+TRqV3Q+LS3eaQ2H/Gl99Zfy4tJrePU=
Subject key identifier:   4C:B8:FC:9D:45:74:A1:28:6E:5F:86:45:B9:74:C2:92:FD:94:27:D6
Authority key identifier: B5:74:84:75:AB:F5:90:77:81:89:51:CC:1F:E6:ED:8B:D2:F3:12:13
Certificate issuer:       /CN=A913DA50/serialNumber=B5748475ABF59077818951CC1FE6ED8BD2F31213
Certificate serial:       0CC5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft
Manifest number:          0CBD
Signing time:             Fri 08 Aug 2025 18:21:38 +0000
Manifest this update:     Fri 08 Aug 2025 18:21:38 +0000
Manifest next update:     Fri 15 Aug 2025 18:21:38 +0000
Files and hashes:         1: tXSEdav1kHeBiVHMH-bti9LzEhM.crl (hash: MH9KnnTOay7EI4B1BsdNTABze/GCBOnaGNd5ESrrY/s=)
                          2: E458D4E0F4A011E98C19332EC4F9AE02.roa (hash: Kuacwrd9xmPbCRcHxM/w7AGXBwpLtTpK06rVdfJjAc4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.crl
                          rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3269 (0xcc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DA50, serialNumber=B5748475ABF59077818951CC1FE6ED8BD2F31213
        Validity
            Not Before: Aug  8 18:21:38 2025 GMT
            Not After : Aug 15 18:21:38 2025 GMT
        Subject: CN=68964032-2128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:e1:d3:60:d9:d0:5d:20:b9:46:ac:73:96:e3:
                    d7:02:73:5e:bc:37:eb:df:80:cb:17:8b:30:f3:4d:
                    2d:1a:8b:0b:0d:d9:ab:86:a9:3f:fc:78:6a:95:0c:
                    8f:29:50:69:84:d1:04:2b:38:2a:0f:e3:91:91:b9:
                    82:3a:cf:e4:53:fd:d0:55:55:ce:4c:c5:c7:b0:2f:
                    d6:89:9c:fe:6e:0e:88:df:15:cb:10:96:9d:53:da:
                    13:9d:5a:b5:38:9c:a3:c6:89:71:78:d2:9b:7d:6d:
                    dc:22:d8:58:4d:a9:de:b5:93:42:9f:25:1f:e0:6c:
                    76:60:ca:30:13:ad:46:de:6f:e9:22:99:31:98:11:
                    57:fd:c3:0b:b6:0b:d2:b5:7b:d3:f1:3b:53:7b:2c:
                    ca:be:e4:7b:c1:58:12:a8:75:be:2e:b4:5d:4e:38:
                    8d:64:27:14:5c:19:d2:c1:5b:48:dd:0a:86:a2:e6:
                    ae:ae:a0:7b:43:ad:a8:b6:e9:bc:12:11:b9:62:b1:
                    b1:6a:19:19:03:7f:81:8a:53:dd:3a:55:01:d8:36:
                    73:47:ea:b4:b1:47:38:6a:ce:2c:f6:89:4e:19:16:
                    d2:4f:9b:6f:6d:41:c8:38:53:d3:6d:16:50:f7:60:
                    b2:19:af:a1:96:c8:75:f4:5c:69:31:92:63:38:6d:
                    ee:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B8:FC:9D:45:74:A1:28:6E:5F:86:45:B9:74:C2:92:FD:94:27:D6
            X509v3 Authority Key Identifier:
                keyid:B5:74:84:75:AB:F5:90:77:81:89:51:CC:1F:E6:ED:8B:D2:F3:12:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:18:b3:e1:22:58:69:85:c3:65:91:a5:06:65:7f:e3:8e:58:
         fe:f3:04:08:cc:db:35:3d:4d:f9:fc:f0:7b:af:dd:66:ee:46:
         37:7a:ed:f8:c9:1c:9a:4f:bc:27:cd:bb:6b:45:dc:c8:24:84:
         81:dc:7a:e7:ea:b5:d2:9d:9a:6f:0a:ea:31:09:ef:2a:8a:2c:
         b0:80:01:6b:59:4b:df:27:96:69:57:50:7d:b0:bb:9c:bd:59:
         6b:fc:3b:56:89:06:16:1c:b7:9c:8a:ca:c8:c2:71:c5:12:73:
         54:f2:15:9e:17:a3:24:65:62:ed:16:f3:17:fe:d6:6d:cf:af:
         1e:0b:8b:15:57:01:8a:eb:7a:0e:ea:5d:b4:86:85:aa:6a:b2:
         f0:9d:0e:f2:cf:83:ae:87:19:16:81:43:84:fc:f0:56:da:43:
         cc:da:9d:12:de:37:0a:81:31:ed:66:b5:fd:6d:76:bf:1b:6d:
         f5:5a:33:86:00:76:79:c6:6e:22:f5:7a:17:cb:d5:66:f8:d9:
         15:ff:f2:30:16:a4:fb:03:d8:75:f5:36:1f:7b:62:3c:56:38:
         c5:1e:42:e5:a8:47:a6:83:46:5c:2a:bf:da:48:cb:7d:29:4c:
         d3:ce:c0:b9:ee:a2:ea:00:7e:8e:1d:1b:b6:8d:5e:9a:ea:09:
         7d:b6:2e:2f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0RBNTAxMTAvBgNVBAUTKEI1NzQ4NDc1QUJGNTkwNzc4MTg5NTFDQzFGRTZFRDhC
RDJGMzEyMTMwHhcNMjUwODA4MTgyMTM4WhcNMjUwODE1MTgyMTM4WjAYMRYwFAYD
VQQDEw02ODk2NDAzMi0yMTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9OHTYNnQXSC5RqxzluPXAnNevDfr34DLF4sw800tGosLDdmrhqk//HhqlQyP
KVBphNEEKzgqD+ORkbmCOs/kU/3QVVXOTMXHsC/WiZz+bg6I3xXLEJadU9oTnVq1
OJyjxolxeNKbfW3cIthYTanetZNCnyUf4Gx2YMowE61G3m/pIpkxmBFX/cMLtgvS
tXvT8TtTeyzKvuR7wVgSqHW+LrRdTjiNZCcUXBnSwVtI3QqGouaurqB7Q62otum8
EhG5YrGxahkZA3+BilPdOlUB2DZzR+q0sUc4as4s9olOGRbST5tvbUHIOFPTbRZQ
92CyGa+hlsh19FxpMZJjOG3uGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEy4/J1F
dKEobl+GRbl0wpL9lCfWMB8GA1UdIwQYMBaAFLV0hHWr9ZB3gYlRzB/m7YvS8xIT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREE1MC9ENDlCRDIxMEY0
OUYxMUU5OEJGRkY4MkNDNEY5QUUwMi90WFNFZGF2MWtIZUJpVkhNSC1idGk5THpF
aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RYU0VkYXYxa0hlQmlWSE1ILWJ0aTlMekVoTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
REE1MC9ENDlCRDIxMEY0OUYxMUU5OEJGRkY4MkNDNEY5QUUwMi90WFNFZGF2MWtI
ZUJpVkhNSC1idGk5THpFaE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC8GLPhIlhphcNlkaUGZX/jjlj+8wQIzNs1PU35/PB7r91m7kY3eu34
yRyaT7wnzbtrRdzIJISB3Hrn6rXSnZpvCuoxCe8qiiywgAFrWUvfJ5ZpV1B9sLuc
vVlr/DtWiQYWHLecisrIwnHFEnNU8hWeF6MkZWLtFvMX/tZtz68eC4sVVwGK63oO
6l20hoWqarLwnQ7yz4OuhxkWgUOE/PBW2kPM2p0S3jcKgTHtZrX9bXa/G231WjOG
AHZ5xm4i9XoXy9Vm+NkV//IwFqT7A9h19TYfe2I8VjjFHkLlqEemg0ZcKr/aSMt9
KUzTzsC57qLqAH6OHRu2jV6a6gl9ti4v
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:17:25 2025 by rpki-client