Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
File:                     TRdqC0V6blaV03p-y43LOnPLSBI.mft (raw, json)
Hash identifier:          NcZPuvmkieOS9AcYcDX9WSybBviiuNCbawXo2A5tErg=
Subject key identifier:   54:CD:3C:3C:19:E5:D3:51:8F:A4:FD:F5:BF:99:9C:45:99:B4:C1:4D
Authority key identifier: 4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12
Certificate issuer:       /CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812
Certificate serial:       1259
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
Manifest number:          122E
Signing time:             Fri 22 Aug 2025 17:16:49 +0000
Manifest this update:     Fri 22 Aug 2025 17:16:48 +0000
Manifest next update:     Fri 29 Aug 2025 17:16:48 +0000
Files and hashes:         1: TRdqC0V6blaV03p-y43LOnPLSBI.crl (hash: Ym/+MIxBgYKI44ngQaqarNRSlvYQkHHS/73Tx+n6wmE=)
                          2: FDBAF28A0DD911F083E3DA5FC4F9AE02.roa (hash: kIAHkFLOpwolSJf04aD3JLXYoBABYe2ZStZeaKIW870=)
                          3: 20FA35820DD811F08B2CB42FC4F9AE02.roa (hash: ivlmtXesZi45jYGzQTce8ZrgJvENn+C2mo88/M8f84c=)
                          4: E7C319C60DD911F0A4D25B5FC4F9AE02.roa (hash: Fb+Ti1WbP+2ky2gp08ieDxdIQQX1VZl4dWu/c8T0fjM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl
                          rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:16:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4697 (0x1259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A8A4, serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812
        Validity
            Not Before: Aug 22 17:16:48 2025 GMT
            Not After : Aug 29 17:16:48 2025 GMT
        Subject: CN=68a8a601-0047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:97:07:e9:5d:75:d0:81:e8:2b:a6:1c:8b:68:
                    a9:c0:73:c3:49:c1:60:98:f4:0b:b4:56:03:10:9f:
                    50:ff:16:8a:de:ad:d0:20:e7:d6:c0:f4:fd:78:57:
                    2b:78:57:4b:6d:a8:2b:4c:fc:13:62:35:ff:d5:ab:
                    d6:9b:80:e5:a2:de:1e:35:ad:c0:d8:44:ac:b4:ce:
                    b5:46:29:b8:44:5c:8e:4b:ad:bd:73:5c:19:93:2d:
                    bb:af:52:b5:a3:56:c6:59:93:27:a8:73:26:95:27:
                    36:f3:3a:22:48:41:db:2f:c4:69:03:93:dc:eb:ef:
                    55:a8:98:fa:f2:74:e7:b4:c0:f7:09:70:55:d1:01:
                    49:45:77:20:7a:09:18:92:44:68:fb:82:ff:f1:d0:
                    a0:93:4b:52:80:2d:37:c9:d9:8f:dc:4a:4d:dc:19:
                    24:88:9c:cf:ee:76:96:c1:6b:79:b9:37:06:63:fc:
                    9d:23:ac:fc:4a:fc:b8:f8:72:e8:57:c7:15:45:f9:
                    1f:ca:1a:35:f2:a8:36:9c:8e:93:ec:aa:db:97:5e:
                    f7:93:56:e5:15:6d:68:62:81:ad:e8:f2:35:70:37:
                    a3:67:c0:b7:8d:e5:97:fb:49:3c:09:8e:8b:b0:9f:
                    44:75:03:ab:a5:23:bb:af:e6:46:a2:e5:40:4c:96:
                    08:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CD:3C:3C:19:E5:D3:51:8F:A4:FD:F5:BF:99:9C:45:99:B4:C1:4D
            X509v3 Authority Key Identifier:
                keyid:4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:21:f9:49:fc:e2:95:24:eb:9e:0c:bc:50:75:83:fb:01:44:
         75:7b:53:96:4a:3c:ec:d7:78:c6:a2:b1:4d:c0:d4:8f:4f:30:
         be:ba:d8:e7:14:1a:48:a7:8b:bb:6a:35:ca:e7:d1:dc:78:f2:
         10:f0:93:29:50:07:ee:d2:db:82:f3:2f:cb:6e:fa:3c:a1:8b:
         6f:23:64:71:2e:06:eb:be:9c:09:77:19:3e:95:66:e9:67:16:
         0b:a2:b3:ef:b6:c7:da:8f:a3:06:8a:6f:c2:d5:8c:0d:da:56:
         fd:57:e7:e5:b3:13:22:0f:59:7b:1b:92:ba:41:03:97:07:8b:
         dd:96:45:eb:b5:25:cc:11:a4:86:89:0c:0e:a0:5d:8a:cf:8f:
         e4:2b:71:04:57:63:3a:f0:56:b4:50:40:f5:79:0b:b3:d5:03:
         20:5d:87:8c:16:94:29:75:04:54:5d:72:71:e0:22:de:15:19:
         a0:a6:fa:ba:97:da:49:f3:e3:55:27:f5:de:c1:d3:6c:38:05:
         66:7b:1f:b9:9d:09:60:ee:61:0b:76:8a:24:8a:de:4d:e3:f7:
         56:13:53:2d:59:ec:4e:17:a3:d2:b3:5a:6d:c3:4d:e6:21:7a:
         fa:f7:3d:ed:e3:49:4a:d2:66:b6:62:2f:c8:b4:7f:4a:30:6a:
         e9:df:10:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:34:55 2025 by rpki-client