Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft
File:                     TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft (raw, json)
Hash identifier:          3hmyOJQqx7qJzwcq1D99w2ejpN/TktMZdgenlhXHOEw=
Subject key identifier:   4C:D1:1F:4A:4D:3C:78:A8:85:97:96:66:3B:65:CB:ED:88:E2:AA:E2
Authority key identifier: 4C:A2:77:22:7B:61:C5:CD:DF:0B:5B:FF:C9:30:76:0D:06:26:43:FC
Certificate issuer:       /CN=A91CE813/serialNumber=4CA277227B61C5CDDF0B5BFFC930760D062643FC
Certificate serial:       0B88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft
Manifest number:          0B81
Signing time:             Sat 02 Aug 2025 19:14:33 +0000
Manifest this update:     Sat 02 Aug 2025 19:14:32 +0000
Manifest next update:     Sat 09 Aug 2025 19:14:32 +0000
Files and hashes:         1: TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl (hash: TO/3MoObi+hKilwntVT7jNBs/dZxVMfArSqFASqQM6w=)
                          2: CE560240310D11EAA04D402CC4F9AE02.roa (hash: ACheYQYEXBleb6DdPHzkUhEDmzrchulLT+Neb0c5vYM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl
                          rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 19:14:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2952 (0xb88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE813, serialNumber=4CA277227B61C5CDDF0B5BFFC930760D062643FC
        Validity
            Not Before: Aug  2 19:14:32 2025 GMT
            Not After : Aug  9 19:14:32 2025 GMT
        Subject: CN=688e6398-9a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:92:ff:e9:ef:04:8f:c0:07:fe:97:25:36:e3:
                    e4:15:f7:a9:2c:e5:ac:9b:82:94:e3:98:b1:f2:84:
                    b1:6f:74:09:7d:1c:c3:e2:a1:f9:a1:70:5d:ff:48:
                    31:ad:29:c8:f9:72:6e:ee:11:b6:13:b5:83:c9:24:
                    50:5a:eb:86:48:32:09:1f:65:b2:93:4e:88:67:48:
                    d1:34:4c:26:8c:31:27:00:44:fa:e5:c3:4e:65:31:
                    df:7e:21:cc:52:8a:12:93:28:92:46:9e:91:bb:e5:
                    9a:50:d2:90:ae:f6:14:54:76:22:f6:c0:e1:d6:d2:
                    8d:07:d0:b7:e9:e9:a3:b7:96:03:9b:6e:cd:48:ba:
                    ea:8a:d6:6b:55:30:74:71:91:2c:bd:90:21:8c:d7:
                    ce:43:6f:11:40:83:d7:5f:8d:58:52:6a:ce:52:99:
                    2a:16:f3:a2:59:ef:81:c6:4c:84:f1:ab:79:a5:ee:
                    6d:3b:e5:7f:d2:cd:03:43:b1:4f:17:cb:7f:1c:e8:
                    ab:a7:18:49:4b:5b:db:f5:7c:6d:9c:65:d2:ee:69:
                    f5:1c:fb:e9:43:a2:e3:b1:f1:25:ca:c2:37:2c:8c:
                    ba:81:8c:34:fb:c1:54:7c:d4:16:5d:cd:82:57:9b:
                    9e:f8:c8:ca:fd:4b:ec:30:6e:e7:9f:4d:8b:6a:c3:
                    3b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D1:1F:4A:4D:3C:78:A8:85:97:96:66:3B:65:CB:ED:88:E2:AA:E2
            X509v3 Authority Key Identifier:
                keyid:4C:A2:77:22:7B:61:C5:CD:DF:0B:5B:FF:C9:30:76:0D:06:26:43:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d1:41:18:f2:d8:9a:1a:7e:b3:f4:5b:ae:a8:98:5d:fc:17:
         dc:ba:3a:04:ee:e1:77:15:56:05:e9:35:e9:62:f6:f5:46:6b:
         29:c1:b2:ca:d5:4d:a0:11:17:3b:cc:18:da:1a:64:35:2d:d3:
         ee:bf:d8:b6:ab:a7:a6:e0:52:4c:63:d3:f2:ab:98:bb:7c:a5:
         e3:59:cf:dc:c0:ef:e9:1d:6b:0f:24:2b:34:2d:9b:ce:0a:8b:
         7b:da:84:96:9b:08:0d:d6:0a:20:19:f0:66:05:4c:4b:a6:08:
         95:39:cb:07:a5:e3:f4:f5:ea:28:db:a4:ad:7d:b5:e9:32:59:
         7b:da:3b:dd:df:40:05:0e:b4:ce:7f:b6:d2:68:0f:95:89:6c:
         c9:c3:4e:12:e8:35:d0:e4:47:5d:41:e0:d7:d4:7d:f8:fb:73:
         f0:97:53:66:98:a1:e0:12:1a:ef:7b:d0:5f:ff:32:74:d0:bb:
         12:47:1a:03:22:72:7d:c5:e3:ba:7f:38:47:03:79:d4:77:af:
         15:14:1f:3a:54:65:d5:6a:6a:16:cf:72:57:fe:35:cc:64:84:
         cf:60:07:4f:01:fe:99:d5:5c:34:82:9c:55:cb:9d:d7:9a:5e:
         c1:97:07:1a:a0:00:9a:06:ce:f8:a3:ac:fb:8f:0d:2e:da:af:
         78:ea:a9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:07 2025 by rpki-client