Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
File:                     TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft (raw, json)
Hash identifier:          lx/7Gx9/X3R5Mqv/Gyv0nJauHWiD9FIoKvpwvmLNED8=
Subject key identifier:   E4:82:0F:B0:22:85:3E:32:6C:A8:C0:8F:8A:12:61:05:EA:97:12:64
Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
Certificate issuer:       /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Certificate serial:       353C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
Manifest number:          34EB
Signing time:             Fri 22 Aug 2025 14:59:19 +0000
Manifest this update:     Fri 22 Aug 2025 14:59:19 +0000
Manifest next update:     Fri 29 Aug 2025 14:59:19 +0000
Files and hashes:         1: TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl (hash: 40J7o/ErlIMRDZrNEdbnlE1sNZEewgdm4b/YWn7e+60=)
                          2: 9427EF0A7CA411F09AE49B57C4F9AE02.roa (hash: aouKDvCEBWeanCsawlBT9lWakaxS2ZXwGK+L0tskXDM=)
                          3: 9A05BA12D86B11E9B8BFCE0AC4F9AE02.roa (hash: HY9xEfn+6vmYO3c1datQhbAoooE89tpJMmhSBq7P9FI=)
                          4: D7F4292A53BE11EF819E6347C4F9AE02.roa (hash: 6rzzTql+rTT5ufDrgPaNF73NsxCvIwZoNJ1l8tZG9WU=)
                          5: E205744CABA111EAB7C51982C4F9AE02.roa (hash: laK+kcTp64rmHx5UZtIAMh0A8AiPDalPZEgzDpJugKw=)
                          6: 502A4A36AAA611EE998EEF3AC4F9AE02.roa (hash: QGLpro3Wg9RRxiV3dBB3mLGl9CU0O3EMGlKK9vOKA6w=)
                          7: CBCB218CD86F11E9A6AF7518C4F9AE02.roa (hash: Cjspd4V4N7gagsLdfV+ocIxYxqn67hzo7d5AHdbayAQ=)
                          8: E2A6885AABA111EAB7C51982C4F9AE02.roa (hash: wEtmlVbcpasnLwFOnZ9sSdZ3rM/5plaOGYJHa+ILEY4=)
                          9: D85FB84853BE11EF819E6347C4F9AE02.roa (hash: a88bdbcZV1jdTzb2F4syO3InnwblBpew5fiNIneHXUk=)
                          10: 78488CF4AD7411EAB93BA123C4F9AE02.roa (hash: Q/8rzRBntJhGnrqAJxtvuvI+OGkDcgTsqGlJB0preS4=)
                          11: 586B5D9ED9F811E9A6874F46C4F9AE02.roa (hash: 2b861Gw7KtYnxwN46YbZbKvZk9MpRlO5/ir/m7ma7WU=)
                          12: ABE74AD463B111F0B7B37637C4F9AE02.roa (hash: DqzdQrRpgCZA76Zft7OxsTuV0Tphmfdeu35sIE7ZBzQ=)
                          13: 4754ED7C16BF11EBB31D5A6AC4F9AE02.roa (hash: U9fyIm2NmXEuQVuMNuljEU3QyW88+XoUu1PsqGUQ4wY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
                          rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 14:59:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13628 (0x353c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
        Validity
            Not Before: Aug 22 14:59:19 2025 GMT
            Not After : Aug 29 14:59:19 2025 GMT
        Subject: CN=68a885c7-c08e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:59:10:73:51:be:01:75:b9:6d:4f:40:c4:aa:
                    8f:ad:04:fe:13:7c:4e:e6:98:41:9d:5d:2d:e9:fc:
                    d3:6a:2f:14:83:da:00:cb:9c:22:bb:93:09:5d:32:
                    4c:60:e0:75:07:58:1e:77:6a:78:be:fe:f9:ee:29:
                    a6:56:c2:cd:25:ce:07:08:79:67:06:34:55:3d:5a:
                    00:ec:4f:e0:3f:78:f1:03:50:24:6e:98:20:b7:7d:
                    0f:85:58:63:62:29:80:8c:ff:bc:08:06:55:17:de:
                    90:ca:6b:c1:c4:39:b3:7b:2c:0f:e8:2e:30:a3:6e:
                    f0:63:ed:6a:fe:8a:88:79:20:92:b0:9e:cf:38:94:
                    80:c6:9d:4b:22:42:ef:ad:a5:b0:68:47:af:f1:76:
                    c5:eb:6a:77:67:be:74:97:b6:3a:24:ba:e2:c5:3f:
                    64:ef:4f:61:5d:52:ff:d0:c0:84:4e:98:5c:38:72:
                    f4:be:38:cd:13:8e:1f:9d:60:68:74:a9:db:eb:b8:
                    a1:91:9d:2c:62:cb:5e:bf:a1:d5:ab:55:1a:45:82:
                    44:a2:c0:63:65:14:66:ed:c3:9f:68:18:43:b1:7d:
                    ff:2a:4f:82:26:56:0a:9d:c3:25:26:2e:d6:6a:37:
                    90:17:50:5c:9e:9e:bc:d2:c3:8e:95:3c:d1:d8:5b:
                    5b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:82:0F:B0:22:85:3E:32:6C:A8:C0:8F:8A:12:61:05:EA:97:12:64
            X509v3 Authority Key Identifier:
                keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:cb:a3:6b:90:00:41:33:cd:f3:7a:2b:8a:01:d9:82:d4:73:
         97:ce:1c:08:8f:b0:4a:b2:8a:ae:66:93:65:d4:94:97:52:3d:
         b8:58:1b:e3:90:ef:8c:26:72:99:29:3d:a1:1b:10:73:f3:27:
         34:56:ef:59:78:63:9c:d7:57:65:e5:6e:55:7c:3b:95:62:05:
         da:6f:1a:ee:83:29:fc:68:cd:66:3c:5a:c1:bc:94:bc:d1:85:
         fe:5e:77:5a:01:ed:42:38:8b:01:13:5b:f4:1f:54:f6:c0:7b:
         87:74:a8:ad:e5:d6:b5:54:f0:12:44:5a:07:66:81:00:d2:74:
         96:3a:5f:af:15:31:b5:11:de:fb:a2:6c:6d:e1:45:4a:ad:bb:
         3e:6b:5a:cb:91:87:c0:68:02:f7:3d:f2:ce:36:c2:6e:30:4a:
         f4:6a:ca:2c:c9:4b:7f:2e:6c:c7:88:19:97:bc:44:24:a6:39:
         63:94:bf:d1:8b:03:d5:c9:91:9a:cc:14:b7:65:8d:53:57:4e:
         29:c5:51:8e:22:97:47:68:27:68:e0:93:46:da:66:d4:1d:7a:
         af:7b:e1:67:7e:ac:8b:68:ba:1b:2c:b3:3a:48:6a:60:8b:61:
         53:83:ce:e0:8a:f6:86:83:f5:4d:e8:04:e7:4b:19:a5:a6:98:
         21:b4:16:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:13:51 2025 by rpki-client