Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft
File:                     tendxr8J-JRYVWCHRC2UjEQDRTA.mft (raw, json)
Hash identifier:          xNqzUHidCIzo9n1xFZHpAtMdZracia6F2iBhJTcsnvI=
Subject key identifier:   AE:1E:56:1A:5E:92:12:F5:C7:FA:11:D7:FD:21:5A:7A:76:B2:11:EE
Authority key identifier: B5:E9:DD:C6:BF:09:F8:94:58:55:60:87:44:2D:94:8C:44:03:45:30
Certificate issuer:       /CN=A915568B/serialNumber=B5E9DDC6BF09F89458556087442D948C44034530
Certificate serial:       01CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft
Manifest number:          01C5
Signing time:             Sat 09 Aug 2025 03:19:35 +0000
Manifest this update:     Sat 09 Aug 2025 03:19:35 +0000
Manifest next update:     Sat 16 Aug 2025 03:19:35 +0000
Files and hashes:         1: tendxr8J-JRYVWCHRC2UjEQDRTA.crl (hash: lAXLobGfKDRLPofHdXPgPOw3fz/AfPznJaNCopzsRYQ=)
                          2: 4FD4AF70C39511ED99703D2AC4F9AE02.roa (hash: +f458BpYNQXJWNiE1S64iQtoNN+WOZY8faBLRWwapzs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.crl
                          rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458 (0x1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915568B, serialNumber=B5E9DDC6BF09F89458556087442D948C44034530
        Validity
            Not Before: Aug  9 03:19:35 2025 GMT
            Not After : Aug 16 03:19:35 2025 GMT
        Subject: CN=6896be47-dd0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:64:4d:27:8a:cf:42:73:5d:32:1f:df:3e:08:
                    a6:ab:8c:8b:f6:ea:0c:87:25:fd:a3:e4:85:55:79:
                    10:e9:b9:21:26:0d:b2:e9:59:87:d1:d2:65:78:dc:
                    bd:26:cd:3d:94:c7:09:0d:9d:07:d7:ae:11:05:39:
                    34:ec:4c:f2:6d:47:0f:48:0c:78:df:d0:ee:f4:75:
                    d5:58:04:25:46:b7:64:cc:ce:1e:21:55:3a:4d:cf:
                    1e:51:37:eb:5d:99:1c:6e:33:c1:7a:ac:be:4b:1a:
                    c0:47:4b:9f:67:b0:b3:18:48:a0:a3:b8:a4:6b:53:
                    80:d1:45:89:ee:94:64:f9:ef:2b:53:42:e0:49:b4:
                    af:b3:93:07:ac:a9:08:cf:8b:f0:4a:38:90:01:b2:
                    59:b6:bb:ed:43:e7:14:49:d6:c7:13:33:19:79:d9:
                    60:a1:f1:49:67:31:21:4d:b7:84:a3:7d:f0:dd:57:
                    15:f1:00:f3:0a:9c:b9:9b:1b:32:78:55:2e:92:f3:
                    c9:ad:d2:9e:cb:6b:3b:0f:28:66:19:94:38:b1:f3:
                    e1:6a:4c:6d:19:b7:c5:7d:61:5d:9e:f2:1b:53:86:
                    b8:21:42:a8:7e:c7:d3:7c:79:e7:6a:a7:cb:08:3b:
                    c0:60:24:27:84:35:d8:97:11:56:49:a3:5e:30:09:
                    09:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1E:56:1A:5E:92:12:F5:C7:FA:11:D7:FD:21:5A:7A:76:B2:11:EE
            X509v3 Authority Key Identifier:
                keyid:B5:E9:DD:C6:BF:09:F8:94:58:55:60:87:44:2D:94:8C:44:03:45:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:1f:bb:de:c9:b0:58:25:d1:43:7f:a3:9d:a1:36:fb:f9:da:
         60:60:90:aa:df:28:58:0d:da:71:37:4e:cb:83:a8:97:df:35:
         2c:06:b6:38:33:84:b3:ae:60:c0:75:de:a8:74:c2:1f:d1:61:
         e3:2e:c6:9a:8a:8c:9f:ae:6f:d5:c3:80:f8:e6:c1:21:db:4d:
         58:96:75:5f:24:2e:3c:68:87:6d:63:56:d9:c5:16:75:2e:07:
         d9:2e:f9:17:8d:da:24:71:df:b6:7c:18:bb:2f:6f:4e:c1:75:
         db:c4:35:87:c6:68:60:64:e9:59:aa:45:48:4c:5f:76:b7:21:
         a9:61:e1:d0:eb:fe:89:df:66:1d:f6:42:cc:48:13:ea:00:d1:
         f6:6f:2a:65:fc:82:49:42:eb:70:39:1c:d4:68:c2:37:26:67:
         73:92:2e:28:22:08:24:4b:ae:7d:e0:dd:aa:74:27:62:dd:60:
         cf:c1:a3:fb:d0:92:35:86:33:23:c4:45:48:5b:4e:3c:38:99:
         b6:07:9a:5b:cc:0a:dd:9e:8a:54:ae:6a:b8:49:97:1b:7c:23:
         85:40:17:00:6d:1e:64:65:99:ef:59:fd:ab:59:bd:ba:a1:2a:
         12:e6:77:83:8c:a4:57:39:4d:62:0e:4b:75:ab:b5:b4:ac:57:
         9f:53:17:e2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU2OEIxMTAvBgNVBAUTKEI1RTlEREM2QkYwOUY4OTQ1ODU1NjA4NzQ0MkQ5NDhD
NDQwMzQ1MzAwHhcNMjUwODA5MDMxOTM1WhcNMjUwODE2MDMxOTM1WjAYMRYwFAYD
VQQDEw02ODk2YmU0Ny1kZDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxmRNJ4rPQnNdMh/fPgimq4yL9uoMhyX9o+SFVXkQ6bkhJg2y6VmH0dJleNy9
Js09lMcJDZ0H164RBTk07EzybUcPSAx439Du9HXVWAQlRrdkzM4eIVU6Tc8eUTfr
XZkcbjPBeqy+SxrAR0ufZ7CzGEigo7ika1OA0UWJ7pRk+e8rU0LgSbSvs5MHrKkI
z4vwSjiQAbJZtrvtQ+cUSdbHEzMZedlgofFJZzEhTbeEo33w3VcV8QDzCpy5mxsy
eFUukvPJrdKey2s7DyhmGZQ4sfPhakxtGbfFfWFdnvIbU4a4IUKofsfTfHnnaqfL
CDvAYCQnhDXYlxFWSaNeMAkJAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4eVhpe
khL1x/oR1/0hWnp2shHuMB8GA1UdIwQYMBaAFLXp3ca/CfiUWFVgh0QtlIxEA0Uw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY4Qi8xRjdCMUQwOEMz
OEQxMUVEQTdFMUNBNjRDNEY5QUUwMi90ZW5keHI4Si1KUllWV0NIUkMyVWpFUURS
VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RlbmR4cjhKLUpSWVZXQ0hSQzJVakVRRFJUQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTY4Qi8xRjdCMUQwOEMzOEQxMUVEQTdFMUNBNjRDNEY5QUUwMi90ZW5keHI4Si1K
UllWV0NIUkMyVWpFUURSVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA+H7veybBYJdFDf6OdoTb7+dpgYJCq3yhYDdpxN07Lg6iX3zUsBrY4
M4SzrmDAdd6odMIf0WHjLsaaioyfrm/Vw4D45sEh201YlnVfJC48aIdtY1bZxRZ1
LgfZLvkXjdokcd+2fBi7L29OwXXbxDWHxmhgZOlZqkVITF92tyGpYeHQ6/6J32Yd
9kLMSBPqANH2bypl/IJJQutwORzUaMI3Jmdzki4oIggkS6594N2qdCdi3WDPwaP7
0JI1hjMjxEVIW048OJm2B5pbzArdnopUrmq4SZcbfCOFQBcAbR5kZZnvWf2rWb26
oSoS5neDjKRXOU1iDkt1q7W0rFefUxfi
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:55:33 2025 by rpki-client