Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
File:                     TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft (raw, json)
Hash identifier:          qDkmUDC81qppOnHNl1A2ITlZa5jCKxkYUZ8By+h9cH8=
Subject key identifier:   A6:38:61:4E:34:96:10:C7:1D:8F:66:89:C4:28:E7:67:AC:25:57:7A
Authority key identifier: 4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C
Certificate issuer:       /CN=A91EF590/serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C
Certificate serial:       0753
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
Manifest number:          0745
Signing time:             Sun 10 Aug 2025 21:47:03 +0000
Manifest this update:     Sun 10 Aug 2025 21:47:03 +0000
Manifest next update:     Sun 17 Aug 2025 21:47:03 +0000
Files and hashes:         1: TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl (hash: kdV0syIdp6dr+4mNiNXk90dU5cjy/YdY+MTE1/ok7Tk=)
                          2: 3B85CDCC5AC611F0A650577AC4F9AE02.roa (hash: xmCa0S6gH7UT6IXBmoA13nKDzBCa881kyZEoIomnGCw=)
                          3: 3C4D39C05AC611F0A650577AC4F9AE02.roa (hash: UDmf7YDCi7nUXuyz+EQ/ianBiDIEB+Xhn6jTOtoUZ/Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl
                          rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1875 (0x753)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF590, serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C
        Validity
            Not Before: Aug 10 21:47:03 2025 GMT
            Not After : Aug 17 21:47:03 2025 GMT
        Subject: CN=68991357-db09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e9:3c:4d:b9:b2:f0:6d:ff:16:61:0d:b6:62:
                    79:33:7f:aa:67:6f:a8:50:bb:53:c0:42:c4:ea:0a:
                    d6:55:df:fa:e0:12:5a:f8:53:28:13:65:2a:f6:df:
                    1b:81:8b:2a:0e:11:07:4c:bc:25:39:ac:a2:da:75:
                    13:9d:64:29:ff:ae:f8:0e:9b:0b:52:63:03:09:5b:
                    cc:b2:a8:c3:be:fc:8d:1c:fb:d6:2b:40:9c:0d:9c:
                    85:cb:6a:04:94:96:09:f3:3c:68:88:cc:33:68:3e:
                    3c:70:3e:8b:b2:d7:d5:cf:88:0b:ea:3f:2d:ee:0d:
                    d8:1a:8e:cc:ea:1d:d6:12:3e:fb:75:7b:22:66:7c:
                    75:98:50:a5:1b:16:9b:9c:d4:9e:b7:5b:c9:48:7f:
                    b6:d1:29:b0:ac:29:a7:4a:1f:43:04:2b:12:57:00:
                    b4:9e:b8:5a:80:2a:7c:47:cd:60:3f:bf:ab:39:ff:
                    46:fa:79:fc:e6:94:4d:95:44:d6:e0:9e:82:4a:fc:
                    8e:d1:86:51:82:a8:0d:ff:2e:15:c0:a4:15:60:8a:
                    66:22:fa:d5:f1:dd:c9:bf:9e:65:fd:b8:ed:91:6e:
                    07:1c:f8:07:7c:e0:b6:6e:ae:8c:87:f6:5a:04:59:
                    d6:6e:9d:8b:3b:a7:b7:c4:a1:a9:4e:b2:c2:93:8e:
                    a0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:38:61:4E:34:96:10:C7:1D:8F:66:89:C4:28:E7:67:AC:25:57:7A
            X509v3 Authority Key Identifier:
                keyid:4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:75:e3:3a:ff:a2:31:b5:f6:55:b7:5f:a0:9e:9d:e5:f4:69:
         5b:43:84:c9:8d:f9:6b:b0:46:f3:8c:94:35:2e:09:f9:30:09:
         94:d9:5c:cd:97:17:56:89:c6:9b:f4:e4:65:63:d6:5c:f7:a3:
         6f:e4:14:37:c1:3c:9c:43:91:72:2e:49:a1:d9:06:44:51:3d:
         ee:a3:5f:1e:ab:6a:c1:ba:ef:46:44:bd:dd:6d:7e:b9:79:0b:
         7d:e7:dc:44:2d:53:15:a4:01:7e:6d:97:85:95:58:19:74:eb:
         07:32:a9:34:6d:cd:62:10:b4:9d:ca:19:af:db:72:68:76:40:
         a0:13:de:41:19:e0:87:d7:88:46:de:e4:f7:eb:37:c3:48:96:
         b9:57:d4:dd:ff:59:51:65:4b:c4:74:14:f3:60:31:93:b4:6d:
         ea:28:a8:db:e8:da:09:47:00:a0:c2:2e:6f:7d:3d:8a:3d:e5:
         3c:a4:e5:4d:2b:ee:02:23:3f:a7:e4:35:82:a3:86:9d:82:cf:
         f5:94:a4:35:91:be:df:c0:21:4d:2f:f4:14:b0:ad:2b:84:94:
         31:68:7c:6a:36:ce:75:d1:b9:5d:d0:df:5a:0d:fb:e7:7a:79:
         4b:62:ec:f9:01:9c:2c:0c:09:3d:3a:c2:13:8f:dd:9b:1e:fe:
         03:c5:23:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:51:31 2025 by rpki-client