Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
File:                     TN7H1CHxboUWcqgSOd0Y_IweOVY.mft (raw, json)
Hash identifier:          p4ggVwsfhCjwuW1OQqjcaXKz0xVfN2CWDMMdPVKutOQ=
Subject key identifier:   D3:F1:10:0E:F1:12:3A:7B:22:4A:8E:10:E7:B5:43:C0:C4:82:71:83
Authority key identifier: 4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56
Certificate issuer:       /CN=A91D0A62/serialNumber=4CDEC7D421F16E851672A81239DD18FC8C1E3956
Certificate serial:       04EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
Manifest number:          04E8
Signing time:             Wed 13 Aug 2025 00:11:37 +0000
Manifest this update:     Wed 13 Aug 2025 00:11:37 +0000
Manifest next update:     Wed 20 Aug 2025 00:11:37 +0000
Files and hashes:         1: TN7H1CHxboUWcqgSOd0Y_IweOVY.crl (hash: JXVrnu/webwvWEFlgsWQ+PD2yp7hQeIFkKHw0LQVoIY=)
                          2: C54BA97E283311ECBE887F3BC4F9AE02.roa (hash: XOTWPX30EoXJqKV6109bwG+UksO95BBHigXDmFEItd0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.crl
                          rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 00:11:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1260 (0x4ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0A62, serialNumber=4CDEC7D421F16E851672A81239DD18FC8C1E3956
        Validity
            Not Before: Aug 13 00:11:37 2025 GMT
            Not After : Aug 20 00:11:37 2025 GMT
        Subject: CN=689bd839-1ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3c:42:43:99:e1:c3:49:7d:06:93:b7:55:c4:
                    71:12:e5:e7:2d:1c:3a:e5:ae:41:1e:88:16:88:cb:
                    73:c1:c3:1c:c2:07:3f:b7:d6:2e:55:53:64:9f:ed:
                    d6:62:c3:08:99:00:c3:12:8d:43:62:1c:34:5d:27:
                    84:e4:b0:9e:e7:bb:c7:70:10:f1:55:69:2d:21:cc:
                    69:c6:ea:a1:6b:f9:2d:ab:d7:54:dd:31:59:c9:fe:
                    2d:50:63:9d:1d:c5:f6:5f:cb:41:93:40:99:8c:85:
                    6a:f3:93:ae:1c:15:e0:0e:08:cd:7f:ce:9c:e0:b5:
                    7d:a4:81:41:c4:64:bb:6e:3f:74:75:48:49:d1:e5:
                    c0:49:a9:23:81:38:c2:d2:75:65:db:97:c6:c1:dc:
                    ca:30:58:3a:43:74:57:e5:72:57:22:77:2a:35:50:
                    41:f3:6d:c2:fc:7e:c5:b9:32:ea:57:41:14:35:9e:
                    4e:59:6a:e3:ed:e9:27:6b:8e:ce:09:37:2a:a2:21:
                    3f:ef:4c:49:83:da:fe:02:88:04:04:5a:be:b3:8c:
                    da:e9:bb:5c:53:da:9b:0a:dd:d4:55:91:95:f0:80:
                    97:1b:f7:b1:14:d8:e6:53:ab:1a:c1:6d:a1:d0:83:
                    b8:39:a3:2a:c4:0b:cc:0a:47:42:83:6f:88:0e:64:
                    19:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F1:10:0E:F1:12:3A:7B:22:4A:8E:10:E7:B5:43:C0:C4:82:71:83
            X509v3 Authority Key Identifier:
                keyid:4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:8c:6e:32:2d:d3:b6:7f:a6:99:a4:48:24:df:da:d3:4f:c2:
         5c:44:20:d4:22:63:99:c2:d8:bd:0f:98:6f:ba:1d:43:38:41:
         be:02:d5:99:8f:80:d6:2b:e4:c8:8b:b3:ad:52:97:35:e6:ab:
         bf:de:37:ed:26:b1:d7:06:57:2c:da:38:7e:ec:9d:0e:97:bd:
         c1:47:3c:a0:e9:2d:3f:a6:5b:29:ba:24:8d:89:19:86:e4:5d:
         3a:43:8f:f2:7b:d4:7d:d4:16:57:5b:33:68:f7:51:ca:72:3a:
         5e:96:14:e3:d9:95:b1:19:6d:af:b0:22:74:dc:2a:3d:9d:1b:
         b9:ac:d3:89:05:eb:49:41:bd:fc:70:5c:5e:db:ea:54:27:70:
         28:ac:39:2e:09:bc:ec:89:83:d1:60:40:e4:a8:8f:27:32:1d:
         7a:9e:ac:46:7c:a0:c8:ba:20:04:ee:34:80:a7:94:68:07:ec:
         99:c6:e7:8f:47:5d:00:0e:f4:48:a3:60:37:95:fa:7d:ad:ff:
         b1:74:6d:c6:d1:28:43:02:86:17:a8:19:98:d2:5a:8a:f2:16:
         1d:8a:c6:e5:9e:69:0f:d7:24:28:c7:38:28:d3:71:9c:f6:5a:
         45:bb:23:37:cb:9c:53:cc:71:a1:f5:3e:6b:fc:ca:ef:85:78:
         a2:ff:2b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:50:23 2025 by rpki-client