Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft
File:                     TxgnPYhVbjodbtgXi4CVKNmQppE.mft (raw, json)
Hash identifier:          ZwXljnONX/8c/lH7o+kenq7U01SlL3rniXBy4Ps60V0=
Subject key identifier:   ED:73:C4:17:54:F1:12:88:7D:4C:6A:18:1E:28:BF:C0:E3:8C:F8:DF
Authority key identifier: 4F:18:27:3D:88:55:6E:3A:1D:6E:D8:17:8B:80:95:28:D9:90:A6:91
Certificate issuer:       /CN=A9127B24/serialNumber=4F18273D88556E3A1D6ED8178B809528D990A691
Certificate serial:       BF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft
Manifest number:          BC
Signing time:             Sun 19 Oct 2025 09:05:15 +0000
Manifest this update:     Sun 19 Oct 2025 09:05:15 +0000
Manifest next update:     Sun 26 Oct 2025 09:05:15 +0000
Files and hashes:         1: TxgnPYhVbjodbtgXi4CVKNmQppE.crl (hash: dfuK1eWAhiX1hlb5l8K/JjR/to4729GPG1Q4C+r55Hs=)
                          2: 31A0A22E803B11F0BAF8A92DC4F9AE02.roa (hash: M85jCIBYsps3LwVn3AYQZG0OyQL6Ba7RT/TX3KFmVeI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.crl
                          rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:05:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127B24, serialNumber=4F18273D88556E3A1D6ED8178B809528D990A691
        Validity
            Not Before: Oct 19 09:05:15 2025 GMT
            Not After : Oct 26 09:05:15 2025 GMT
        Subject: CN=68f4a9cb-4196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e0:57:f3:b7:42:4c:33:35:22:24:6d:36:17:
                    1a:15:af:42:f7:9b:33:94:6d:90:2c:42:67:14:e3:
                    7f:6a:58:ae:71:bb:05:ed:d0:7d:9a:15:f7:0d:2a:
                    e6:ad:2f:71:2f:ad:71:d1:28:9b:f4:99:9c:76:cf:
                    e0:a6:44:38:87:d0:00:43:36:bb:b7:e5:2b:14:36:
                    e8:ff:30:12:e1:f0:d5:3d:47:51:28:97:01:07:0b:
                    b7:f2:7c:62:c4:94:7a:47:d5:8c:fa:70:63:f6:2d:
                    49:a7:48:e2:cc:50:e3:6e:8e:ab:d8:c8:21:14:ba:
                    b1:b8:5d:bd:5c:19:f7:a9:50:54:d3:ec:e0:7f:dd:
                    b3:26:fa:f7:fa:70:13:83:db:dc:f3:3f:79:d9:e2:
                    65:b2:af:57:56:dd:7a:62:a8:02:e1:b9:20:9c:63:
                    3f:70:39:8c:26:3a:fa:34:85:31:bb:3f:25:d5:93:
                    f3:83:c6:7e:a0:98:95:e3:12:ee:99:93:59:70:50:
                    44:bc:04:a5:92:65:4e:fa:14:ff:d6:33:57:6a:b9:
                    bd:ab:0e:22:b7:e6:8b:e5:d3:86:63:ba:a5:3a:cb:
                    18:49:fb:06:d0:0d:02:a7:c7:50:0d:e6:27:9b:88:
                    03:8c:cf:a0:ff:9f:c5:ee:d4:4c:d6:31:1a:73:48:
                    bf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:73:C4:17:54:F1:12:88:7D:4C:6A:18:1E:28:BF:C0:E3:8C:F8:DF
            X509v3 Authority Key Identifier:
                keyid:4F:18:27:3D:88:55:6E:3A:1D:6E:D8:17:8B:80:95:28:D9:90:A6:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxgnPYhVbjodbtgXi4CVKNmQppE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B24/15475D868F7611EF84EC7715C4F9AE02/TxgnPYhVbjodbtgXi4CVKNmQppE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ee:ac:39:59:03:fb:3f:de:4c:c1:dd:1b:31:a6:76:78:a0:
         87:f9:dd:51:58:7a:38:ab:e4:80:38:40:b1:a5:3d:d8:d6:f6:
         7b:51:db:d4:7e:84:10:5e:de:60:36:9f:27:37:7e:8d:cc:3e:
         2f:d0:fc:f5:19:dc:f7:da:6e:fc:c4:25:41:8b:6e:2c:93:32:
         a8:21:7b:a8:f3:a4:a5:b9:60:7e:7e:c2:cc:c2:f8:13:d9:d7:
         be:72:b7:2f:29:3f:cc:a1:20:63:1e:5c:d0:57:c7:a7:ec:cc:
         ec:70:8d:b9:e6:96:a5:65:ed:bc:de:fc:f8:d5:b1:af:8d:43:
         2a:2b:90:e9:35:84:59:e8:40:a2:11:3e:ed:24:e7:60:17:a3:
         07:12:5b:46:29:db:a3:e2:76:83:3c:cb:56:c2:a5:ca:7a:5d:
         3d:ea:74:1c:ec:70:8c:e3:4a:bc:ef:92:16:f7:89:db:98:2a:
         94:f5:5f:60:0c:df:5a:7f:97:bb:00:39:82:71:cd:43:3b:a6:
         4d:28:7c:83:58:7f:38:7f:98:60:4c:95:03:8f:3b:9b:66:c3:
         48:f2:e3:12:f5:85:55:a0:64:53:39:d9:e5:bb:d6:73:17:e9:
         40:5b:f0:06:e0:cc:97:f2:de:49:4b:3a:96:eb:1d:04:c4:e8:
         f3:a9:52:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:03:41 2025 by rpki-client