Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
File:                     TKAuwRGHSuDn0FVaJf8zAvkS64w.mft (raw, json)
Hash identifier:          8yGWgj20ol2wLhC/Wb3XlXMI3VqHO3eb3taWXZBXyKM=
Subject key identifier:   51:4F:C0:A8:89:C1:5C:AA:AA:30:EE:34:49:43:30:16:24:24:8B:2F
Authority key identifier: 4C:A0:2E:C1:11:87:4A:E0:E7:D0:55:5A:25:FF:33:02:F9:12:EB:8C
Certificate issuer:       /CN=A915825D/serialNumber=4CA02EC111874AE0E7D0555A25FF3302F912EB8C
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
Manifest number:          82
Signing time:             Tue 15 Jul 2025 07:00:20 +0000
Manifest this update:     Tue 15 Jul 2025 07:00:19 +0000
Manifest next update:     Tue 22 Jul 2025 07:00:19 +0000
Files and hashes:         1: TKAuwRGHSuDn0FVaJf8zAvkS64w.crl (hash: yXXHG4lcERaZ0Y4N3MGgfub0mkelyYToP42fj0YJyOI=)
                          2: 109B1A6AC14F11EFAE8F4B0BC4F9AE02.roa (hash: m6Ln5a7ZSeIX81Tm2886H7n9SlKXj8hnsIcbsYsTN7o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.crl
                          rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Jul 2025 07:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915825D, serialNumber=4CA02EC111874AE0E7D0555A25FF3302F912EB8C
        Validity
            Not Before: Jul 15 07:00:19 2025 GMT
            Not After : Jul 22 07:00:19 2025 GMT
        Subject: CN=6875fc83-d316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b3:57:1c:8b:33:49:28:d2:16:64:78:45:a6:
                    19:34:7d:38:a9:e4:08:d1:83:ea:50:45:a3:b2:0e:
                    ec:2f:cc:e2:65:ca:c2:f2:ed:93:03:3f:52:60:3c:
                    9a:cd:e0:a2:c9:30:d1:a1:22:87:19:30:80:c4:5b:
                    77:a1:dd:df:16:b5:0e:2d:64:47:63:ea:bd:70:d6:
                    dc:c0:7b:f3:e4:d9:f2:f6:e3:16:18:ac:60:14:30:
                    18:05:23:90:a4:03:8f:d4:dd:3f:32:50:d3:59:c3:
                    41:50:ed:ca:1b:d4:10:fc:1a:da:89:4e:83:d6:96:
                    c8:1d:4e:0e:ee:e4:df:66:ea:a3:81:f1:1f:fa:97:
                    e0:32:22:3c:78:ab:24:ae:fd:1f:a6:28:1f:17:c7:
                    9f:dc:ca:cf:22:cb:df:2d:0d:b6:00:c2:8d:47:4f:
                    0f:30:60:f9:0d:5d:ad:bd:2c:68:88:81:8b:f3:8a:
                    2e:74:05:43:8e:80:0f:06:ad:cc:0a:73:b1:72:d8:
                    d8:12:4b:f7:8c:d3:68:ea:b4:53:86:6d:8e:58:01:
                    b1:cb:14:0f:84:2d:6a:c7:50:b2:f2:56:f1:9a:af:
                    a8:c4:24:fd:30:93:1f:df:d4:71:a0:b0:78:4c:f5:
                    df:d9:d1:3e:b4:1f:a6:b0:8f:9b:fb:ee:53:3c:6e:
                    49:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4F:C0:A8:89:C1:5C:AA:AA:30:EE:34:49:43:30:16:24:24:8B:2F
            X509v3 Authority Key Identifier:
                keyid:4C:A0:2E:C1:11:87:4A:E0:E7:D0:55:5A:25:FF:33:02:F9:12:EB:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:15:ee:7c:81:20:aa:f2:8f:ad:24:91:4f:7d:f5:f5:3f:14:
         f5:88:3e:6c:b0:d6:6f:f9:d5:12:0a:71:77:f9:f2:c3:8a:e1:
         0e:80:48:9c:17:37:04:a2:55:e4:17:4c:95:0d:56:e3:6a:c8:
         07:44:ba:20:d7:b5:7b:a3:e9:6d:0d:64:98:8c:34:3c:7e:1e:
         36:b8:6d:65:68:97:9a:64:3d:8d:31:61:66:46:6f:2b:3b:64:
         90:0d:3e:64:4b:ec:b3:f9:ee:08:70:f8:e7:97:45:69:e2:cc:
         d7:8e:ae:d2:f7:02:cb:d9:bf:7a:c1:1c:f7:04:2d:46:79:f1:
         36:30:5a:93:ae:03:b8:b1:69:2b:3b:9c:ff:87:a3:f0:60:04:
         43:24:28:70:e9:13:9f:3d:6c:a6:f9:e5:31:d3:ad:e4:20:e1:
         cf:15:4f:85:a5:70:da:1d:0f:9a:a3:92:67:17:2f:c7:fe:20:
         6d:b5:7c:fa:6c:b6:16:c9:73:af:45:97:8f:e7:45:d7:94:66:
         b3:15:62:ad:9e:45:9e:ef:49:0f:ce:b6:8d:8d:7b:32:34:d7:
         47:db:6d:72:65:c3:b4:ee:30:bf:9a:8c:11:8b:59:d2:f4:2c:
         c2:76:e9:0e:43:ad:9d:88:fe:4d:3a:b3:e0:7f:69:4a:ea:c8:
         8a:07:93:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 16 23:09:52 2025 by rpki-client