Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
File:                     tGadMNIQ5JB80oiL50uJpt08tsg.mft (raw, json)
Hash identifier:          KNOOxU1fuwdK2jdG+JNHZKKHzRFX/QLW2hSZTVVfAc4=
Subject key identifier:   33:4E:76:2F:C0:9F:F2:D5:14:6F:95:75:F6:7C:D8:55:72:00:E3:FA
Authority key identifier: B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8
Certificate issuer:       /CN=A9161A58/serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8
Certificate serial:       096F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
Manifest number:          095A
Signing time:             Sat 18 Oct 2025 21:14:49 +0000
Manifest this update:     Sat 18 Oct 2025 21:14:48 +0000
Manifest next update:     Sat 25 Oct 2025 21:14:48 +0000
Files and hashes:         1: tGadMNIQ5JB80oiL50uJpt08tsg.crl (hash: 8Fyivuox85Kk9eur0vtTj8HVFIUhlASMGmXlTec85Sg=)
                          2: 6E6FFF6A92F911ED8A66E70CC4F9AE02.roa (hash: p54CFofowbUbktzQ5l2cM2w3M6idGp06vDW+Qt3EoTM=)
                          3: B350B67E964611EDA10D8777C4F9AE02.roa (hash: dqgw7Vjah1kgl1Eb2Qsi3T+K4Ggh+1iUdEI4VBpnCIA=)
                          4: D7120558A7ED11EA95BED565C4F9AE02.roa (hash: 69e6c/vHo1P1XZkYWN+UCZupbdC0oSmCyhIpttIVtDU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl
                          rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:14:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2415 (0x96f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161A58, serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8
        Validity
            Not Before: Oct 18 21:14:48 2025 GMT
            Not After : Oct 25 21:14:48 2025 GMT
        Subject: CN=68f40349-5ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9c:f4:e2:dc:3c:6b:96:da:68:1d:63:76:29:
                    0c:c0:32:6b:ca:30:4f:20:f1:0b:00:be:67:3c:33:
                    7c:88:0a:2f:05:4b:d4:b0:70:84:22:bb:ad:3b:8e:
                    83:73:f7:cb:3c:1e:60:82:82:f6:e7:e1:f2:cb:d6:
                    a7:63:cc:98:bc:91:ad:17:e2:21:2c:b0:b7:58:2d:
                    aa:95:2b:d8:b4:e0:66:75:89:66:4e:63:7f:df:e3:
                    60:d4:2c:0c:e2:81:2f:91:d8:ef:26:35:d8:70:a9:
                    a6:69:c2:95:63:99:a4:b7:fa:3e:9b:9b:57:7d:db:
                    20:16:4d:6b:8f:d3:6a:c0:58:36:0b:18:2d:be:dd:
                    c3:38:53:79:76:cb:e5:40:17:6e:e2:8f:b1:8b:3a:
                    62:6d:4e:20:7e:9a:87:f1:91:4a:80:4e:cc:e8:48:
                    a7:79:b6:53:d1:75:a4:64:ab:c1:0a:a6:76:12:5c:
                    61:12:11:1e:3e:b7:b2:f2:9a:82:01:ad:f1:5b:79:
                    3f:7a:3d:67:dc:db:df:5a:ba:0a:54:6d:c1:bf:74:
                    7b:5d:cb:7d:e8:97:e1:27:2a:4a:f5:de:5f:bc:92:
                    3f:d0:26:a9:06:0e:e6:18:58:43:4f:0d:64:08:28:
                    ec:02:12:e9:32:59:a1:36:fe:3d:fd:54:e5:e0:e4:
                    b9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4E:76:2F:C0:9F:F2:D5:14:6F:95:75:F6:7C:D8:55:72:00:E3:FA
            X509v3 Authority Key Identifier:
                keyid:B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:03:d8:f9:a7:19:32:47:f0:40:cc:90:a7:d0:2c:09:e9:84:
         60:7f:a8:09:59:4e:2f:2d:a5:fa:e7:81:9e:a1:5b:47:5f:97:
         af:dc:b4:00:7a:82:e3:b3:b8:6d:ac:5e:fb:9e:39:e0:9c:bd:
         ad:56:39:07:47:ab:f3:d0:a1:c6:28:d4:44:7f:e4:b9:7e:d8:
         a6:58:cb:68:26:39:76:bc:46:a6:ba:8d:a4:29:dc:4c:8e:8b:
         7b:3d:b6:3c:e1:e5:73:99:08:41:64:5d:fd:f2:40:d9:57:25:
         95:8f:cc:57:c6:42:de:e4:e5:58:c5:4e:71:cb:b9:50:1c:ab:
         1c:e2:0a:67:77:fa:cb:92:71:5a:d3:9e:51:40:79:f4:aa:27:
         b6:48:19:bb:d0:67:63:06:45:1b:6c:e9:b1:f8:66:55:9a:80:
         42:a7:9b:7e:7a:40:53:1d:c0:91:2f:01:f8:5a:d4:7f:ae:ad:
         85:38:5f:f0:3c:f4:fd:c1:f7:7c:83:ad:fb:43:d7:17:50:1d:
         8b:2d:28:e8:2d:74:66:91:50:93:a4:44:60:4a:3c:c6:58:a6:
         50:6d:9e:24:e6:62:4e:ba:b3:a1:05:86:b2:e4:26:d3:c7:30:
         9a:0b:52:9b:8a:53:bf:0e:42:87:e3:8b:b5:81:cd:b0:9a:c1:
         a2:64:13:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:31:53 2025 by rpki-client