Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
File:                     TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft (raw, json)
Hash identifier:          U1lM+4rxMWJFJZZiz8aDcUpxObZ4vGvR/YQnyesduVA=
Subject key identifier:   7E:AF:F0:17:0F:F9:57:D9:FE:F4:DF:6A:0E:9F:84:C6:4B:2C:8C:1F
Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
Certificate issuer:       /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Certificate serial:       3567
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
Manifest number:          3510
Signing time:             Sat 18 Oct 2025 15:04:42 +0000
Manifest this update:     Sat 18 Oct 2025 15:04:41 +0000
Manifest next update:     Sat 25 Oct 2025 15:04:41 +0000
Files and hashes:         1: TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl (hash: RXlWGz+3h8epR9gwirJewzxET+/U5hNiFLS0bVL+Z2w=)
                          2: 9427EF0A7CA411F09AE49B57C4F9AE02.roa (hash: aouKDvCEBWeanCsawlBT9lWakaxS2ZXwGK+L0tskXDM=)
                          3: 9A05BA12D86B11E9B8BFCE0AC4F9AE02.roa (hash: HY9xEfn+6vmYO3c1datQhbAoooE89tpJMmhSBq7P9FI=)
                          4: D7F4292A53BE11EF819E6347C4F9AE02.roa (hash: 6rzzTql+rTT5ufDrgPaNF73NsxCvIwZoNJ1l8tZG9WU=)
                          5: E205744CABA111EAB7C51982C4F9AE02.roa (hash: laK+kcTp64rmHx5UZtIAMh0A8AiPDalPZEgzDpJugKw=)
                          6: 502A4A36AAA611EE998EEF3AC4F9AE02.roa (hash: QGLpro3Wg9RRxiV3dBB3mLGl9CU0O3EMGlKK9vOKA6w=)
                          7: CD072488981C11F081BD5721C4F9AE02.roa (hash: N9MkZB62gv52kczhap1clJNdPPPk6LnEG5YOZM6fSHE=)
                          8: CBCB218CD86F11E9A6AF7518C4F9AE02.roa (hash: 2PsbwQ/Mb5l3f+Cdk57knkEjUItMjEy4PsgyTD/0teQ=)
                          9: E2A6885AABA111EAB7C51982C4F9AE02.roa (hash: wEtmlVbcpasnLwFOnZ9sSdZ3rM/5plaOGYJHa+ILEY4=)
                          10: D85FB84853BE11EF819E6347C4F9AE02.roa (hash: a88bdbcZV1jdTzb2F4syO3InnwblBpew5fiNIneHXUk=)
                          11: 78488CF4AD7411EAB93BA123C4F9AE02.roa (hash: Q/8rzRBntJhGnrqAJxtvuvI+OGkDcgTsqGlJB0preS4=)
                          12: 49FEE4EA83CC11F09BE0565EC4F9AE02.roa (hash: 4ydKeIYhxRWj9VQ3bZF8Gr1cN244ryelD9eyYIk71Nw=)
                          13: 586B5D9ED9F811E9A6874F46C4F9AE02.roa (hash: 2b861Gw7KtYnxwN46YbZbKvZk9MpRlO5/ir/m7ma7WU=)
                          14: ABE74AD463B111F0B7B37637C4F9AE02.roa (hash: DqzdQrRpgCZA76Zft7OxsTuV0Tphmfdeu35sIE7ZBzQ=)
                          15: 4754ED7C16BF11EBB31D5A6AC4F9AE02.roa (hash: U9fyIm2NmXEuQVuMNuljEU3QyW88+XoUu1PsqGUQ4wY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
                          rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13671 (0x3567)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
        Validity
            Not Before: Oct 18 15:04:41 2025 GMT
            Not After : Oct 25 15:04:41 2025 GMT
        Subject: CN=68f3ac89-2bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2d:12:03:14:e2:39:20:6e:54:31:63:72:ad:
                    ea:35:dc:a3:d1:29:f3:f5:36:91:af:9c:55:89:8d:
                    0b:e3:3b:9e:09:f0:31:06:cf:2d:21:9e:60:41:d9:
                    02:b5:0d:99:9d:db:8c:33:0d:14:50:45:5c:2d:2c:
                    31:f8:23:ff:3a:aa:c9:07:c4:83:1d:51:ad:fe:26:
                    74:8e:e9:3c:25:57:03:4f:1f:84:b1:e8:d0:a9:d8:
                    8e:87:11:e4:1b:26:d6:13:7b:ae:91:bb:d9:24:b6:
                    0c:56:94:76:75:a0:f9:d9:d0:92:59:52:58:7e:15:
                    02:07:82:a6:d9:21:ad:96:77:c8:41:1e:64:f1:d2:
                    be:53:50:f0:bf:f9:98:7b:f9:40:e0:35:d6:73:f0:
                    b4:63:0b:60:1a:10:96:30:00:da:2c:09:60:49:02:
                    6e:57:ea:db:f1:38:88:32:32:fa:a3:08:2b:a2:28:
                    14:28:8c:f8:69:e3:67:75:4f:9a:05:e9:ff:a8:3d:
                    01:c9:dd:58:29:c8:01:8e:67:0a:78:df:54:ce:5c:
                    52:1f:6a:e7:30:68:4a:27:0a:c5:dc:92:3a:a5:26:
                    79:9d:cf:4f:06:00:8c:eb:c2:3e:59:7d:86:d7:b0:
                    a4:c7:1a:37:b4:3d:42:e1:0a:a6:15:69:85:e8:f5:
                    b5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AF:F0:17:0F:F9:57:D9:FE:F4:DF:6A:0E:9F:84:C6:4B:2C:8C:1F
            X509v3 Authority Key Identifier:
                keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:e8:e6:d5:ce:19:54:cb:3a:ee:59:71:62:32:81:de:c3:d7:
         8c:ae:ec:c0:a5:0f:83:04:aa:8d:f7:72:37:e4:e9:ec:6f:7f:
         0d:be:83:58:44:da:61:fa:6e:0f:37:51:de:99:f3:21:99:53:
         be:ff:f1:e9:15:7c:b8:9f:2d:cf:3b:32:9e:79:f3:72:f0:e0:
         2a:4d:e2:7f:0b:1c:0e:dc:e4:1c:37:e5:88:c9:87:fb:c9:c0:
         5d:c2:35:4e:b0:7c:71:74:12:e7:1e:3e:8b:4a:49:22:87:07:
         98:e4:17:18:ea:95:b3:81:67:a9:dd:d3:28:32:48:1d:05:6d:
         13:5e:da:68:0b:69:f5:26:0e:a1:8e:f8:85:09:cf:78:83:80:
         94:5b:29:15:49:0f:56:69:cb:a6:4e:ba:d4:78:61:e7:67:5a:
         c9:52:f8:4f:80:ce:6d:6a:e4:0c:2f:7b:e2:3a:36:ff:01:44:
         c1:78:75:4c:9c:67:3c:8b:b1:f4:b6:26:00:d1:ce:64:9e:a3:
         4f:be:48:75:86:37:34:82:69:cb:61:49:9d:c3:77:17:e8:d8:
         cd:bf:7d:fa:ea:07:ac:fc:fb:1e:47:3b:8d:66:c2:03:e3:0d:
         52:a4:33:12:15:78:50:6a:2c:d1:30:65:c6:ce:67:a7:29:b8:
         66:62:dc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:28:31 2025 by rpki-client