Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
File:                     TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft (raw, json)
Hash identifier:          dr65aNx5FSpE3zsM3flEY1gEXmoPxodepOB5ylMgbkw=
Subject key identifier:   E4:53:3D:4E:B4:3E:C2:29:9C:E8:5E:4E:02:25:87:7B:72:7F:4A:0D
Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
Certificate issuer:       /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Certificate serial:       351E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
Manifest number:          34CF
Signing time:             Wed 02 Jul 2025 15:00:34 +0000
Manifest this update:     Wed 02 Jul 2025 15:00:34 +0000
Manifest next update:     Wed 09 Jul 2025 15:00:34 +0000
Files and hashes:         1: TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl (hash: JKC0KEx5UnfT2JkGCGGfBPoFfNMv/wO0wyP6iHw7gUo=)
                          2: 9A05BA12D86B11E9B8BFCE0AC4F9AE02.roa (hash: HY9xEfn+6vmYO3c1datQhbAoooE89tpJMmhSBq7P9FI=)
                          3: D7F4292A53BE11EF819E6347C4F9AE02.roa (hash: 6rzzTql+rTT5ufDrgPaNF73NsxCvIwZoNJ1l8tZG9WU=)
                          4: E205744CABA111EAB7C51982C4F9AE02.roa (hash: laK+kcTp64rmHx5UZtIAMh0A8AiPDalPZEgzDpJugKw=)
                          5: 502A4A36AAA611EE998EEF3AC4F9AE02.roa (hash: QGLpro3Wg9RRxiV3dBB3mLGl9CU0O3EMGlKK9vOKA6w=)
                          6: CBCB218CD86F11E9A6AF7518C4F9AE02.roa (hash: Cjspd4V4N7gagsLdfV+ocIxYxqn67hzo7d5AHdbayAQ=)
                          7: E2A6885AABA111EAB7C51982C4F9AE02.roa (hash: wEtmlVbcpasnLwFOnZ9sSdZ3rM/5plaOGYJHa+ILEY4=)
                          8: D85FB84853BE11EF819E6347C4F9AE02.roa (hash: a88bdbcZV1jdTzb2F4syO3InnwblBpew5fiNIneHXUk=)
                          9: 78488CF4AD7411EAB93BA123C4F9AE02.roa (hash: Q/8rzRBntJhGnrqAJxtvuvI+OGkDcgTsqGlJB0preS4=)
                          10: 586B5D9ED9F811E9A6874F46C4F9AE02.roa (hash: 2b861Gw7KtYnxwN46YbZbKvZk9MpRlO5/ir/m7ma7WU=)
                          11: D99C6B9853BE11EF819E6347C4F9AE02.roa (hash: L0W7cRGzuMkg347Pz9hozTnaB7Tyl+NuXuVxktrd6xk=)
                          12: 4754ED7C16BF11EBB31D5A6AC4F9AE02.roa (hash: U9fyIm2NmXEuQVuMNuljEU3QyW88+XoUu1PsqGUQ4wY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
                          rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 15:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13598 (0x351e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
        Validity
            Not Before: Jul  2 15:00:34 2025 GMT
            Not After : Jul  9 15:00:34 2025 GMT
        Subject: CN=68654992-cf90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c9:3a:76:8d:20:7f:ef:f6:1b:8c:7b:2c:68:
                    41:e7:88:5c:41:5d:12:31:f3:37:42:66:b0:e7:b7:
                    63:71:55:86:fa:36:1d:4a:a0:81:c8:3c:77:d2:4f:
                    21:d1:3f:00:60:23:14:11:7f:57:7c:7b:d5:d1:4b:
                    5b:a6:e8:bc:10:f7:26:6a:6c:bb:91:9a:5a:b1:fe:
                    f6:40:e6:e9:84:aa:2f:ae:95:a9:51:3f:16:eb:ff:
                    de:5b:81:b7:fa:5b:dc:90:70:80:62:93:66:ec:c7:
                    50:1a:6d:56:a5:cb:92:c1:0c:19:c8:00:9c:84:bc:
                    9b:0f:e1:bc:65:3f:89:ab:f1:51:da:e8:34:5a:48:
                    3d:6e:70:c7:57:4b:93:f4:a1:f9:48:ea:66:bc:9d:
                    1c:60:bc:e5:15:58:21:60:25:07:4e:0f:4b:c1:2e:
                    c8:5f:e6:74:67:77:1f:4a:98:81:9e:ca:3f:1e:b7:
                    bc:85:04:6b:48:7c:6e:fb:49:9a:60:78:76:99:54:
                    ea:39:f9:00:2c:af:e9:5a:67:a1:89:81:2e:3b:64:
                    b0:7c:98:9a:ac:7b:bb:13:a5:e4:66:65:ae:78:c4:
                    bd:ce:fb:26:5f:19:87:98:b6:4e:69:dd:58:0a:eb:
                    28:16:c5:05:16:06:44:18:3b:59:75:f9:2b:3e:e8:
                    f7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:53:3D:4E:B4:3E:C2:29:9C:E8:5E:4E:02:25:87:7B:72:7F:4A:0D
            X509v3 Authority Key Identifier:
                keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d9:71:5f:59:45:80:6b:d2:06:4f:61:cb:b1:d4:cd:65:5d:
         fe:19:3c:45:f7:83:09:7a:25:95:a6:d0:2d:90:b7:83:03:99:
         fd:10:b8:79:f9:5f:a6:81:90:06:e2:64:ea:6f:62:0d:48:64:
         9c:be:9d:d2:f5:9d:98:4d:c3:a3:80:06:f8:22:30:28:46:46:
         56:68:92:6e:1a:e8:3b:aa:d3:b8:7c:0b:71:6a:a1:bc:48:b0:
         42:a6:46:42:d6:74:d7:64:8d:fb:d8:4d:97:52:19:df:b7:26:
         40:c9:b3:67:4a:79:14:d4:b5:e3:c3:e5:b7:2e:8a:72:e8:3c:
         f5:47:49:f8:4e:8f:ef:cf:f6:29:6c:04:eb:68:a8:50:01:ea:
         30:5b:6c:8a:d9:7b:76:06:98:2a:dd:06:ca:ec:f0:ec:f3:76:
         bf:01:5b:42:32:a0:47:6b:c0:50:64:19:37:06:a3:cd:8b:d7:
         6d:8f:f5:21:49:33:4c:23:26:78:dc:6a:57:ab:41:17:60:a6:
         ed:df:a6:f2:bf:58:08:a4:82:cd:a4:34:7f:cf:cf:48:64:f3:
         f1:36:d0:78:e2:a2:50:2a:46:d4:dd:4e:d4:2f:9a:25:bf:c9:
         4a:20:f6:59:4c:2c:a6:d1:45:71:fa:db:0d:ec:65:a6:61:88:
         58:b7:11:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:12:00 2025 by rpki-client