Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
File:                     tsJDxjmzEemHjsBr8kf3reVLCT4.mft (raw, json)
Hash identifier:          PCpXxF/Qcq7HNsPht2h6czf/UDaJNjT9MivpqBo9Ug0=
Subject key identifier:   57:1E:52:F1:73:95:94:A4:80:BA:72:00:35:64:EB:DB:DE:78:C4:85
Authority key identifier: B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E
Certificate issuer:       /CN=A91549E0/serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E
Certificate serial:       1530
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
Manifest number:          14FC
Signing time:             Fri 22 Aug 2025 16:58:38 +0000
Manifest this update:     Fri 22 Aug 2025 16:58:38 +0000
Manifest next update:     Fri 29 Aug 2025 16:58:38 +0000
Files and hashes:         1: tsJDxjmzEemHjsBr8kf3reVLCT4.crl (hash: I+5hxNbTJD90o+m2tCSpm6injQy7L9pDJdjpEHwGrwA=)
                          2: E944914AF0F111E999D61615C4F9AE02.roa (hash: XKJY2ruAbdxVwtFmFD8vDTB2DhG2dJOeU2QViXOeUk8=)
                          3: 0E171AA850D511F0B4943476C4F9AE02.roa (hash: 9AflqGyFKx05qIN4kyuCqzbSR97xKUg46U/Rr1tuz0g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl
                          rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 16:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5424 (0x1530)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91549E0, serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E
        Validity
            Not Before: Aug 22 16:58:38 2025 GMT
            Not After : Aug 29 16:58:38 2025 GMT
        Subject: CN=68a8a1be-d17b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4e:05:08:da:4f:56:35:20:2a:fd:07:97:0e:
                    1a:4e:7a:79:8f:b7:01:e7:b5:5f:cf:9c:87:2c:0d:
                    52:27:06:ae:05:50:27:94:fb:79:90:97:67:50:d4:
                    82:d8:de:bc:59:1f:4a:76:9e:f7:b5:d0:01:cd:b3:
                    8f:7f:86:04:58:48:40:c3:e5:6b:b9:78:4e:97:14:
                    12:67:db:1e:d7:36:8b:b6:0c:91:4f:89:4a:d8:61:
                    a5:be:d8:61:12:41:dc:47:3b:ed:24:e1:1e:b2:39:
                    d6:b6:63:e9:f9:86:91:da:b0:e3:b7:d6:0d:3c:79:
                    22:9a:b7:d7:38:3b:52:2e:d4:a1:5a:bd:b1:ce:37:
                    30:4a:30:ae:74:bd:6a:55:63:87:13:83:ea:5d:b2:
                    d3:fd:f1:99:f4:7b:ba:c7:69:e4:7c:63:b5:ad:8a:
                    19:38:80:39:4b:ba:5a:a8:68:42:27:44:0f:4d:db:
                    74:fb:e1:bc:55:3e:81:04:36:7b:5b:08:44:6d:6d:
                    7b:00:4c:3f:a2:d9:2e:7b:e8:77:2c:cb:54:8a:d5:
                    8e:ca:d3:79:25:95:1e:a8:b8:dc:ac:88:31:13:fc:
                    c1:1a:ef:f4:7c:52:94:a2:94:12:15:32:0d:04:83:
                    e8:7b:5e:87:93:1a:e9:de:bd:35:3e:e0:19:99:e5:
                    b2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1E:52:F1:73:95:94:A4:80:BA:72:00:35:64:EB:DB:DE:78:C4:85
            X509v3 Authority Key Identifier:
                keyid:B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ac:87:7d:49:19:c1:bd:4d:dc:27:37:d9:bb:65:64:79:12:
         38:f4:ea:4e:94:cc:5e:db:02:2a:c3:6d:a6:07:24:00:60:ae:
         99:ba:1a:6a:e8:74:45:54:37:f1:b9:1c:76:7e:74:43:a6:c5:
         cd:7c:37:c9:ea:27:b6:4c:7f:39:3f:72:e6:23:2c:bb:7b:bf:
         c1:a1:1b:5e:17:3b:f7:b9:c4:fa:68:c9:63:9d:99:1a:5f:9a:
         26:02:c7:4b:77:50:2c:c9:4e:e3:98:77:56:c6:8a:f7:af:40:
         2c:62:87:ca:7e:ce:18:e0:37:3e:81:9d:38:29:64:6c:31:00:
         be:e7:dd:05:f8:2f:38:c8:30:c0:42:e4:96:15:75:19:27:0f:
         98:a1:f6:c8:e5:db:a5:af:50:c9:53:76:ec:8a:97:c8:e0:59:
         38:e5:11:95:a7:eb:55:3e:05:e8:12:a3:61:d8:7b:2a:93:97:
         a6:86:c5:bb:08:03:18:26:77:63:c9:3e:a6:b3:b7:a0:5b:2e:
         aa:51:ec:86:89:45:50:73:02:0c:84:92:21:48:33:f4:40:a9:
         1c:fa:6f:82:39:e2:9c:ae:26:69:b6:bd:d4:bd:00:a6:4b:1e:
         8e:b8:c6:17:59:41:73:c2:c0:eb:e6:e8:a9:c9:5f:98:2d:23:
         1b:da:24:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:13 2025 by rpki-client