Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
File:                     -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json)
Hash identifier:          weVahTo2qPdoBZnXb9lMYL4pSliKMyAXDIgJXEUwWdQ=
Subject key identifier:   FB:28:85:00:38:47:83:B9:FD:D5:34:E9:20:EC:8A:42:7E:B3:48:7F
Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
Certificate issuer:       /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Certificate serial:       043B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
Manifest number:          0421
Signing time:             Sat 09 Aug 2025 00:56:32 +0000
Manifest this update:     Sat 09 Aug 2025 00:56:32 +0000
Manifest next update:     Sat 16 Aug 2025 00:56:32 +0000
Files and hashes:         1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: cOS+ZlneR0gzkqkNQzIpJyvRQD5MiP2I3J+WDq6aitk=)
                          2: 81E1EC606D3B11F0BDAB3A37C4F9AE02.roa (hash: IklsNcZMU61keTG/RlPGDM9ghDVa6JBLN2a2SdX6u1A=)
                          3: 9132838C6D3B11F08FAF5337C4F9AE02.roa (hash: A0B5Fh827t09j9A9jIoA5e7FS/oK5UGgKqUFdUr5wZ0=)
                          4: 7E4872CC507E11ED92705949C4F9AE02.roa (hash: mAHBF8HDNKFsy35CCtaeECNz5IjKYVYafJciZ5zIOHA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
                          rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1083 (0x43b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
        Validity
            Not Before: Aug  9 00:56:32 2025 GMT
            Not After : Aug 16 00:56:32 2025 GMT
        Subject: CN=68969cc0-7b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a3:84:20:8c:17:bf:a0:8d:58:70:d6:ff:01:
                    96:a5:88:38:5b:02:ed:db:1b:2c:30:90:49:0e:d7:
                    78:c2:99:b6:90:8d:61:27:4c:d6:ee:4a:18:92:e8:
                    24:09:39:d7:06:ea:39:b1:be:f6:c0:96:4f:db:b7:
                    d4:cc:07:2c:4f:ad:32:33:5f:99:9e:53:a2:33:93:
                    8f:71:09:06:36:b8:f6:56:aa:c9:91:0b:fe:50:28:
                    91:c4:7a:52:ae:49:d5:a5:04:b1:e7:46:d8:b8:f7:
                    ee:34:9b:5d:5d:0d:f4:27:3e:b4:7c:b0:13:d8:3c:
                    33:44:5c:1d:09:ce:eb:58:37:4e:ee:6f:c8:a8:70:
                    1a:75:fb:9a:bb:7b:c0:db:8c:7a:38:fb:44:e3:7f:
                    42:d7:00:4f:cd:36:64:2b:2f:48:4e:0e:7c:0b:af:
                    46:47:67:5c:57:4e:c8:9b:b5:70:cf:17:06:bf:18:
                    01:b3:64:7a:69:4b:18:44:80:80:02:07:9c:4b:30:
                    da:45:5a:99:37:ea:80:45:ed:5e:a3:06:d0:99:25:
                    0e:d6:46:57:99:5b:9a:ee:3a:bc:0c:96:d9:b1:b8:
                    7d:8a:4f:95:11:fb:ff:e0:d1:e0:d9:16:52:24:18:
                    93:ac:ab:d6:cb:22:84:73:14:18:00:5e:3d:4d:ca:
                    22:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:28:85:00:38:47:83:B9:FD:D5:34:E9:20:EC:8A:42:7E:B3:48:7F
            X509v3 Authority Key Identifier:
                keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:10:db:2b:93:d7:79:08:ec:36:f3:83:72:5f:23:d0:53:52:
         a2:12:be:7f:f0:9e:c4:9b:1d:a1:bc:8a:45:7d:9b:af:bb:14:
         51:d9:1f:37:4d:c3:7b:6b:e0:db:7e:f0:e3:46:19:7e:fb:fb:
         ed:f0:f3:d2:82:fe:b0:98:bd:97:e2:f2:27:96:1a:0a:77:d0:
         d9:f9:4b:80:96:af:97:10:44:3c:40:0d:a9:db:82:65:46:9d:
         48:30:aa:08:3b:12:a4:25:d8:d0:cc:b9:6d:37:6f:17:94:71:
         f3:ba:47:44:5d:a7:7a:7b:a4:07:c5:37:e6:5c:9a:87:64:d0:
         89:09:f5:b3:76:96:89:81:82:a4:36:79:b4:78:87:b3:91:4e:
         55:92:ef:9c:47:d0:0c:68:d0:cc:75:0e:5b:75:a7:56:ff:fd:
         26:a3:4e:f9:d4:92:25:f6:3b:c5:af:53:51:cf:1c:54:cc:d6:
         8d:d1:d8:d4:3f:fc:99:25:8e:67:83:cd:a6:fb:85:b6:3e:f2:
         f9:a5:fc:8e:9d:6e:2f:d1:63:09:3d:16:26:ae:15:24:02:f1:
         ae:5d:e1:70:41:6c:55:3c:8c:a3:b7:86:ca:9b:57:51:94:5f:
         c2:a0:01:7c:0e:2b:e5:90:2e:62:a0:e2:c9:ab:c8:6b:9e:92:
         52:fb:0d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:40:12 2025 by rpki-client