Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft
File:                     xTW2ND6pv1nqgu7uOvuKQADei7I.mft (raw, json)
Hash identifier:          0OyDW4TtZS/8VefU80o1zjCP9XmfDCDDi25LWYyobL4=
Subject key identifier:   79:95:83:A1:75:44:98:A9:5A:FF:4C:E4:BE:4C:6C:B1:19:BD:81:CF
Authority key identifier: C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2
Certificate issuer:       /CN=A912FAA0/serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2
Certificate serial:       0518
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft
Manifest number:          0510
Signing time:             Sun 19 Oct 2025 01:21:48 +0000
Manifest this update:     Sun 19 Oct 2025 01:21:47 +0000
Manifest next update:     Sun 26 Oct 2025 01:21:47 +0000
Files and hashes:         1: xTW2ND6pv1nqgu7uOvuKQADei7I.crl (hash: QEZmORPGrx37kTwXI0ig/BUpOAQBAIFpjzjYLN96yng=)
                          2: 82D6580C6D1111EFA2579E40C4F9AE02.roa (hash: j7cSjk9bGAyIvx6iJpo/WTGEPXuKdTD1Dm2iYrUznn8=)
                          3: 823E55DE6D1111EFA2579E40C4F9AE02.roa (hash: Y2F1zl8mLeyWjYCbu80HQfaHCYqj4Iy83h0ageBQWO8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl
                          rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:21:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1304 (0x518)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FAA0, serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2
        Validity
            Not Before: Oct 19 01:21:47 2025 GMT
            Not After : Oct 26 01:21:47 2025 GMT
        Subject: CN=68f43d2c-ef5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f4:8b:87:bb:b0:f3:aa:22:53:51:44:90:70:
                    d9:c1:7b:1b:49:51:b6:99:2a:03:5b:c8:2c:3a:1e:
                    d1:fd:7d:06:44:fb:04:a7:91:ce:e2:4e:80:52:1d:
                    3e:56:2d:42:02:27:3b:12:08:33:12:7f:b6:0f:c2:
                    cc:00:b1:3d:4d:9d:50:4f:9c:f3:19:58:b2:05:83:
                    5c:25:93:f3:ef:34:e7:bc:d9:f8:89:2a:93:ac:77:
                    fa:b4:f6:6f:28:b6:18:ac:b9:65:77:97:56:2b:6f:
                    b4:7f:75:cf:06:e3:fa:c3:46:d0:83:66:0e:7c:4b:
                    1d:fc:84:95:21:92:f5:79:ff:3f:c3:27:f4:ff:5d:
                    41:55:d2:dc:63:b5:2c:a2:09:a1:a8:75:d0:47:ba:
                    a9:a7:5d:44:07:d6:6d:47:bf:a2:3f:40:5b:85:0b:
                    4c:2d:b6:cf:7e:63:5c:2c:6c:40:1a:45:7e:37:7c:
                    d7:d6:cc:a3:82:b3:c3:f6:20:8d:1a:15:f2:d7:d1:
                    5d:50:ba:50:bc:9c:31:5b:67:26:00:d4:05:f6:4f:
                    7c:56:4e:f4:95:70:66:15:72:a9:d6:ab:e6:ce:24:
                    52:5e:89:61:2d:06:ef:bf:3d:db:d8:23:2e:20:e0:
                    db:60:9c:71:e5:c1:63:8f:92:d7:c9:44:b5:eb:ef:
                    d3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:95:83:A1:75:44:98:A9:5A:FF:4C:E4:BE:4C:6C:B1:19:BD:81:CF
            X509v3 Authority Key Identifier:
                keyid:C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:66:72:a1:c1:18:44:77:af:fe:c2:96:82:65:0d:11:f7:d8:
         22:79:93:25:55:83:87:10:e5:ce:19:9d:b3:63:e8:1a:c9:e1:
         6f:f9:88:a9:e9:6d:07:01:6e:41:85:96:bd:4a:27:17:bc:1c:
         b8:01:29:18:4b:1f:6d:69:56:10:09:7b:a6:69:f1:14:86:ff:
         fd:f1:43:c5:37:f2:8d:6f:34:00:02:c7:28:78:b8:df:82:7e:
         dc:b2:34:6c:d6:82:8e:f0:72:86:b7:38:da:2c:56:01:ea:88:
         ef:ee:f7:73:e6:ca:69:f1:b1:ff:86:e6:c2:3a:86:1e:ff:f3:
         f4:99:8a:2d:f4:8f:00:70:de:8d:4e:a8:f2:80:94:b6:80:e6:
         a0:8d:df:1b:40:8e:81:70:00:63:ec:9b:67:42:45:cb:04:f7:
         3d:ef:da:64:c2:df:8d:3a:63:83:0a:2f:17:97:b0:4f:cd:ba:
         76:9f:a9:2e:52:cc:a9:76:c4:c0:71:a7:9f:e1:ac:99:76:84:
         88:45:19:8a:70:45:e0:b9:b9:0f:eb:ed:6b:8a:9f:2c:ef:71:
         ef:20:7f:e7:41:13:70:b8:3a:77:ea:07:00:1d:72:7b:37:bf:
         10:ea:23:71:6d:76:b6:35:89:d5:23:dd:d0:f9:b0:89:7f:7e:
         da:68:d6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:55:55 2025 by rpki-client