Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
File:                     TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft (raw, json)
Hash identifier:          Ggr9k+RiYvlG0DDXKbv4O6X0NME1FHqXLDUXRYOuvE8=
Subject key identifier:   75:4B:2E:9B:45:74:27:D9:BE:0D:39:05:49:65:B2:5D:E0:91:CC:47
Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
Certificate issuer:       /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Certificate serial:       3515
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
Manifest number:          34C6
Signing time:             Sat 14 Jun 2025 14:56:42 +0000
Manifest this update:     Sat 14 Jun 2025 14:56:41 +0000
Manifest next update:     Sat 21 Jun 2025 14:56:41 +0000
Files and hashes:         1: TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl (hash: Aa910IAgNeJ1B65SRW5E9F7yD20vBKs0R/XiuE0F580=)
                          2: 9A05BA12D86B11E9B8BFCE0AC4F9AE02.roa (hash: HY9xEfn+6vmYO3c1datQhbAoooE89tpJMmhSBq7P9FI=)
                          3: D7F4292A53BE11EF819E6347C4F9AE02.roa (hash: 6rzzTql+rTT5ufDrgPaNF73NsxCvIwZoNJ1l8tZG9WU=)
                          4: E205744CABA111EAB7C51982C4F9AE02.roa (hash: laK+kcTp64rmHx5UZtIAMh0A8AiPDalPZEgzDpJugKw=)
                          5: 502A4A36AAA611EE998EEF3AC4F9AE02.roa (hash: QGLpro3Wg9RRxiV3dBB3mLGl9CU0O3EMGlKK9vOKA6w=)
                          6: CBCB218CD86F11E9A6AF7518C4F9AE02.roa (hash: Cjspd4V4N7gagsLdfV+ocIxYxqn67hzo7d5AHdbayAQ=)
                          7: E2A6885AABA111EAB7C51982C4F9AE02.roa (hash: wEtmlVbcpasnLwFOnZ9sSdZ3rM/5plaOGYJHa+ILEY4=)
                          8: D85FB84853BE11EF819E6347C4F9AE02.roa (hash: a88bdbcZV1jdTzb2F4syO3InnwblBpew5fiNIneHXUk=)
                          9: 78488CF4AD7411EAB93BA123C4F9AE02.roa (hash: Q/8rzRBntJhGnrqAJxtvuvI+OGkDcgTsqGlJB0preS4=)
                          10: 586B5D9ED9F811E9A6874F46C4F9AE02.roa (hash: 2b861Gw7KtYnxwN46YbZbKvZk9MpRlO5/ir/m7ma7WU=)
                          11: D99C6B9853BE11EF819E6347C4F9AE02.roa (hash: L0W7cRGzuMkg347Pz9hozTnaB7Tyl+NuXuVxktrd6xk=)
                          12: 4754ED7C16BF11EBB31D5A6AC4F9AE02.roa (hash: U9fyIm2NmXEuQVuMNuljEU3QyW88+XoUu1PsqGUQ4wY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
                          rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 14:56:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13589 (0x3515)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
        Validity
            Not Before: Jun 14 14:56:41 2025 GMT
            Not After : Jun 21 14:56:41 2025 GMT
        Subject: CN=684d8daa-2aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5c:7f:96:d8:b8:44:19:c7:20:31:e9:35:3d:
                    95:16:7f:b1:79:38:7a:6a:3d:85:48:0a:6f:e0:c2:
                    6f:05:4e:24:dc:1a:09:41:c6:26:26:17:7f:ba:db:
                    f5:e9:a7:e3:4a:2a:19:09:47:95:5c:5e:67:ac:90:
                    a3:a6:99:62:b6:96:79:e9:a9:3f:89:98:7e:85:2d:
                    26:11:cb:e3:28:3d:92:de:2e:80:28:a9:7e:10:e9:
                    84:dd:be:60:3d:1b:c5:ad:8e:f5:53:c8:6b:94:0c:
                    d2:f4:e8:47:a3:63:4f:d1:8c:2f:6e:e8:9c:09:79:
                    e1:1c:7e:7c:61:80:d2:f7:c0:b9:e7:ca:e8:49:b8:
                    c5:8a:b9:98:32:03:20:fd:57:6b:27:b4:77:57:21:
                    0b:e6:f1:ee:dd:e2:1a:1d:62:ff:11:53:0a:6e:5b:
                    fb:05:3d:07:06:b4:7d:ce:d8:4c:4f:07:b2:f1:0a:
                    ec:f2:cf:b4:6f:76:6b:b3:18:b1:7d:36:46:05:f3:
                    45:c8:ec:55:59:cc:ec:89:c0:39:56:6b:71:7f:ff:
                    b6:74:e8:24:38:ae:f3:78:90:62:91:36:68:b4:06:
                    72:9c:f0:5d:65:f9:b0:7f:0c:64:fb:a8:ef:47:0e:
                    1a:24:84:3d:4d:fe:ad:4f:95:b4:98:b1:22:82:6a:
                    76:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4B:2E:9B:45:74:27:D9:BE:0D:39:05:49:65:B2:5D:E0:91:CC:47
            X509v3 Authority Key Identifier:
                keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:79:f5:96:6c:14:23:99:2b:9a:86:0e:6c:f9:d0:84:2e:68:
         ac:a8:9b:bd:58:56:7a:52:0e:e0:99:fc:19:4b:b0:14:91:b1:
         2d:9b:e1:37:e9:a4:2f:dc:74:b9:d0:6f:32:8d:3c:13:48:f4:
         e7:6a:38:32:c9:be:e8:d9:8c:45:93:ed:1c:b9:95:dc:96:69:
         2d:83:36:e0:20:fa:05:61:2d:ab:63:c5:a7:5f:0a:32:a7:b6:
         dc:c5:e0:25:99:4c:da:02:91:6f:d5:da:69:8f:d6:13:e9:8f:
         22:26:71:c9:2e:47:51:bf:c1:ab:f5:0e:04:af:2f:a1:f0:b6:
         22:52:11:aa:e1:c9:a0:e9:d7:88:35:16:62:d8:03:44:b7:d3:
         44:9e:10:65:62:00:ff:3c:8f:c0:56:75:76:32:0f:e9:a8:27:
         71:48:f2:40:ea:3c:65:26:2d:3b:bf:9d:d4:71:2e:e2:00:bd:
         7d:2c:ef:fc:e2:07:05:9e:49:dd:61:38:98:72:0f:54:2a:91:
         e9:2f:0e:f4:b4:47:2f:38:5b:e4:6c:c6:c7:13:dc:82:7b:c2:
         11:63:9d:ef:e4:4b:98:18:94:b9:7b:7b:d5:0a:5e:12:b7:b3:
         ea:46:4b:b5:d0:4b:57:c9:c6:1d:0f:f7:0b:d5:7a:30:79:b1:
         34:ec:a6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:50:23 2025 by rpki-client