Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft
File:                     tLhVi-xUNiD-bqkv68XoqSchTDk.mft (raw, json)
Hash identifier:          Cr6fbkP9ZbQvwR96TDbYcdrIejFi8ZrOtOdmYcXVnOY=
Subject key identifier:   1B:9F:0E:87:66:EE:81:0B:F0:3B:19:31:03:B2:E7:76:7F:3F:DF:59
Authority key identifier: B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39
Certificate issuer:       /CN=A9110BA6/serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39
Certificate serial:       0A4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft
Manifest number:          0A44
Signing time:             Fri 22 Aug 2025 19:50:56 +0000
Manifest this update:     Fri 22 Aug 2025 19:50:55 +0000
Manifest next update:     Fri 29 Aug 2025 19:50:55 +0000
Files and hashes:         1: tLhVi-xUNiD-bqkv68XoqSchTDk.crl (hash: R/K843K9MoY32obh0QJzU9xuTFOFqdBMnxF2kXzoXhg=)
                          2: 2AFC632E458511EE8566F97AC4F9AE02.roa (hash: NWOEkiwK2HZWYeANTytTEoCMF7Sk6idGr2hPPPV7240=)
                          3: 7BF0DB503ECF11EEA6759B55C4F9AE02.roa (hash: CrfveQoqOhRCPxQazR6Rs3pm4eRMhY2PEiNU6IjJdl8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl
                          rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 19:50:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2636 (0xa4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110BA6, serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39
        Validity
            Not Before: Aug 22 19:50:55 2025 GMT
            Not After : Aug 29 19:50:55 2025 GMT
        Subject: CN=68a8ca1f-64ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ed:e8:98:db:b1:70:37:32:8b:38:5c:0c:92:
                    73:f8:ce:0d:04:c9:41:db:ed:79:e0:98:8d:5e:4d:
                    a0:71:87:b0:41:a9:2a:bb:ca:a7:cf:df:ed:af:1c:
                    f2:d7:de:3c:11:f4:d8:4e:2f:af:25:e4:d4:a6:e2:
                    89:cd:81:fa:bc:e7:2a:44:9b:09:8c:d8:f7:bf:2f:
                    01:40:0f:0b:3a:15:e7:fb:93:d4:a2:98:92:a3:5c:
                    f6:73:a8:ed:e5:69:40:ac:52:16:ae:f8:2b:5f:26:
                    95:45:b9:2f:dc:ec:c5:bd:c4:68:03:04:1b:b2:8d:
                    58:78:c1:36:5b:c5:69:94:b9:3a:d6:85:00:03:e7:
                    6a:66:24:d8:f7:86:b1:2f:bf:40:26:e6:40:10:98:
                    28:e4:e9:19:50:cb:bd:4a:c8:12:dd:0e:d3:84:78:
                    57:79:d7:da:9c:ea:9b:99:d4:7a:0d:32:1e:af:35:
                    ae:30:af:6c:13:de:03:20:38:22:68:53:5b:97:f9:
                    6b:d0:0e:70:97:bd:ab:d6:20:64:db:1f:b3:3a:9a:
                    ef:eb:5c:f2:5d:2a:f8:21:c0:bd:dc:68:47:8e:b6:
                    b6:ca:bf:c8:74:12:07:8d:0d:73:d6:dd:aa:ee:f7:
                    b3:b7:cb:5f:d2:37:d0:9d:b5:09:66:6d:d0:16:b4:
                    ee:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9F:0E:87:66:EE:81:0B:F0:3B:19:31:03:B2:E7:76:7F:3F:DF:59
            X509v3 Authority Key Identifier:
                keyid:B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d1:65:30:9a:eb:b9:2f:e8:4a:65:f5:ba:ef:10:7d:f5:33:
         20:b3:b0:5d:8b:7e:31:0d:ec:26:6d:4d:42:26:d3:63:ce:17:
         e6:a3:58:da:5d:d2:b2:3e:6f:fd:76:8d:b0:b1:02:b8:b1:07:
         13:40:04:c3:f0:4c:75:c9:d9:8f:79:93:3a:63:89:40:64:62:
         04:cc:0b:9c:aa:db:71:df:8f:ae:4a:29:ce:11:6d:94:2d:dd:
         1d:2d:be:7d:e8:6f:9f:34:49:8f:46:2d:04:ef:46:a8:04:6d:
         39:c1:34:4b:fd:eb:92:b3:5e:d1:f5:b6:9a:02:af:c4:e6:4d:
         fa:48:7f:1c:55:36:3a:79:5b:4e:b0:c0:65:13:05:6a:a7:67:
         17:ea:75:37:81:d6:88:c3:21:f4:72:87:76:e6:df:dc:f8:4f:
         60:c4:04:f5:9c:ef:1e:d1:25:75:54:9e:ac:93:61:75:ae:57:
         7d:80:47:f3:f1:65:45:69:e3:68:89:dc:02:f8:0f:ac:22:3e:
         65:c7:23:c8:84:ef:66:49:56:60:a9:99:c4:d7:b8:6c:00:37:
         74:53:db:d8:73:f2:6d:cd:97:a2:f2:eb:61:7e:de:8e:b5:78:
         b8:77:97:7c:0b:35:60:0e:ec:ac:f2:f8:41:13:cb:e8:10:f9:
         b2:86:db:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:39:30 2025 by rpki-client