Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
File:                     TRdqC0V6blaV03p-y43LOnPLSBI.mft (raw, json)
Hash identifier:          V/xMoaBwOmY9h/JBJM0oGgwBcY3g01xJnqKamN0kMGI=
Subject key identifier:   AD:2A:19:71:95:28:04:80:BC:86:18:13:43:1B:35:5B:65:10:23:FA
Authority key identifier: 4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12
Certificate issuer:       /CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812
Certificate serial:       123F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
Manifest number:          1214
Signing time:             Wed 02 Jul 2025 17:21:25 +0000
Manifest this update:     Wed 02 Jul 2025 17:21:24 +0000
Manifest next update:     Wed 09 Jul 2025 17:21:24 +0000
Files and hashes:         1: TRdqC0V6blaV03p-y43LOnPLSBI.crl (hash: S4ZgvoRpni1WtICN9MVUscuXHg06oBX8tTOBNhFxe1U=)
                          2: FDBAF28A0DD911F083E3DA5FC4F9AE02.roa (hash: kIAHkFLOpwolSJf04aD3JLXYoBABYe2ZStZeaKIW870=)
                          3: 20FA35820DD811F08B2CB42FC4F9AE02.roa (hash: ivlmtXesZi45jYGzQTce8ZrgJvENn+C2mo88/M8f84c=)
                          4: E7C319C60DD911F0A4D25B5FC4F9AE02.roa (hash: Fb+Ti1WbP+2ky2gp08ieDxdIQQX1VZl4dWu/c8T0fjM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl
                          rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 17:21:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4671 (0x123f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A8A4, serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812
        Validity
            Not Before: Jul  2 17:21:24 2025 GMT
            Not After : Jul  9 17:21:24 2025 GMT
        Subject: CN=68656a94-21d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:db:e2:55:7e:d4:9c:60:bc:61:a8:f2:10:cd:
                    4b:20:8f:76:84:8f:ae:b2:fc:09:89:e2:5d:a9:93:
                    6c:79:c1:3b:19:07:a7:19:2c:94:14:f2:4b:ae:65:
                    05:12:08:b3:ce:bb:04:1a:3b:20:4b:0f:98:cf:4f:
                    cb:de:c8:f6:8e:53:50:d6:61:18:20:eb:24:6b:22:
                    29:16:97:83:77:82:c6:aa:ff:ce:4a:77:2c:74:88:
                    ab:fc:d8:e5:e2:e9:f3:c4:98:6d:3c:cf:43:c8:4f:
                    78:e9:d6:b0:f1:61:9c:22:64:7f:69:8b:35:b2:84:
                    fb:4b:25:d9:0d:6f:95:9d:78:18:e5:70:b4:ac:38:
                    24:4c:1f:8b:c2:43:db:9a:d6:9a:09:eb:12:43:41:
                    3b:fc:4e:29:36:e7:7d:bf:d6:14:36:19:02:06:b5:
                    bf:ed:ca:cf:0a:0d:26:41:1c:80:02:bd:b3:40:16:
                    e3:08:80:82:83:9f:db:6e:c6:38:6e:3f:f1:c7:64:
                    33:db:2d:85:d4:5c:2b:be:28:06:8c:7a:ce:97:1c:
                    31:ae:49:af:3c:82:5e:d3:61:1e:1a:43:a3:82:20:
                    92:02:4a:a0:44:9c:0c:44:e1:ec:85:60:b8:55:a4:
                    df:5c:e1:df:76:4f:6c:f1:a9:08:af:47:1d:08:86:
                    4c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:2A:19:71:95:28:04:80:BC:86:18:13:43:1B:35:5B:65:10:23:FA
            X509v3 Authority Key Identifier:
                keyid:4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b5:3a:9d:5a:33:12:77:fb:1e:cb:ee:4d:a0:b3:bc:5d:bf:
         6d:7e:7d:ff:a8:02:d2:b9:f6:58:a0:85:57:de:f3:ee:8d:b4:
         82:51:d5:64:23:40:bf:09:cb:d8:c1:95:7f:14:57:29:c3:04:
         6f:c0:7f:4b:8c:51:48:98:5c:2a:e3:90:3a:f1:2d:cb:ce:ee:
         d4:7c:93:68:96:9d:e2:28:83:69:8c:20:6d:8b:e3:f5:46:94:
         62:c5:ae:1f:a6:49:2a:9f:68:d6:26:7e:a4:37:f6:67:4d:83:
         05:87:04:05:56:7e:48:24:78:28:cb:67:2e:12:4d:f0:c4:23:
         3d:de:99:9c:a1:8a:da:37:1e:f1:15:68:eb:79:d6:46:79:28:
         b4:a1:d6:7f:41:67:05:29:38:41:48:40:de:e1:55:03:25:bd:
         8a:aa:73:93:c9:e3:06:e3:44:95:3d:08:3d:69:15:d9:bc:f7:
         c5:87:0e:c0:72:70:7d:01:e0:8d:9a:e5:7d:fe:34:2b:89:b3:
         5a:12:9c:c3:ed:f3:b9:2d:51:5c:c1:5a:e6:98:56:ea:a3:8a:
         cf:85:08:15:3b:72:c0:fe:2e:63:56:39:18:3e:c8:54:c8:56:
         c6:f3:4c:51:23:38:e8:fe:10:5b:c6:96:52:37:53:4c:8b:9d:
         0a:08:8d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:34:29 2025 by rpki-client