Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft
File:                     tNHFfu7y2pEKr3lGCpvLIab80v0.mft (raw, json)
Hash identifier:          TuqnCZ/MDFfSsQl+0gQHDIl1rjqc7v6IY3+2G3AGkh8=
Subject key identifier:   77:C7:60:FD:86:3A:CC:93:52:13:65:B7:F6:70:25:73:B4:64:26:99
Authority key identifier: B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD
Certificate issuer:       /CN=A916A033/serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD
Certificate serial:       079E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft
Manifest number:          0792
Signing time:             Sat 18 Oct 2025 22:49:00 +0000
Manifest this update:     Sat 18 Oct 2025 22:49:00 +0000
Manifest next update:     Sat 25 Oct 2025 22:49:00 +0000
Files and hashes:         1: tNHFfu7y2pEKr3lGCpvLIab80v0.crl (hash: vcmURVCFGAEpAcwN9V2s/tzAUyBdINR1xklHHZ39BWI=)
                          2: EB0FEBAA295811EBB519AC70C4F9AE02.roa (hash: 23TiuLPxAaSrXTY2xFHwDsaNfyE9NetpuIlQb209liA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl
                          rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1950 (0x79e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A033, serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD
        Validity
            Not Before: Oct 18 22:49:00 2025 GMT
            Not After : Oct 25 22:49:00 2025 GMT
        Subject: CN=68f4195c-99e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d5:59:05:dd:60:ee:81:27:7c:df:ff:12:97:
                    25:15:c4:ca:2c:e2:82:4d:38:03:54:02:cc:29:9d:
                    80:67:c3:a9:92:3a:02:20:c2:c3:49:3e:b7:a1:57:
                    b9:3d:2a:aa:a7:5b:9c:30:3c:ef:90:52:d5:d3:46:
                    33:c7:58:b4:54:ce:ca:79:a4:64:80:26:e2:41:4b:
                    5d:2f:7c:b2:d6:25:f6:5f:02:bb:f4:d5:24:b9:dc:
                    44:f8:3f:3f:24:ff:1b:a0:75:3f:25:10:83:a6:03:
                    6c:76:41:ae:cc:73:c1:7e:0d:e5:ae:67:af:c6:75:
                    7a:a7:17:89:21:fd:3c:03:e5:49:46:88:08:e6:e8:
                    9f:1e:e7:e1:f8:be:b3:f1:85:c1:2e:e8:3a:c9:25:
                    b9:2b:0b:b2:f6:7d:f5:13:1a:cb:73:6e:a1:88:d1:
                    00:da:e4:8b:cf:34:aa:e0:72:b9:58:88:11:79:d6:
                    1f:60:00:3c:37:e6:0b:2b:44:04:bb:99:e4:d1:26:
                    b1:50:91:6d:ef:98:bd:9a:e6:4a:07:7f:c8:5b:a6:
                    1b:64:64:fb:cc:2e:67:dd:f2:aa:49:2e:c5:d7:0b:
                    c9:e9:fd:20:dc:8e:06:b4:d9:8d:b0:c9:14:9b:38:
                    32:b4:8a:98:ec:ac:e1:3f:05:ca:54:2f:98:2d:fa:
                    aa:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C7:60:FD:86:3A:CC:93:52:13:65:B7:F6:70:25:73:B4:64:26:99
            X509v3 Authority Key Identifier:
                keyid:B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:48:2a:f2:a1:f7:f9:91:bd:00:b9:40:26:2e:9f:f4:45:3a:
         f4:76:64:e9:ca:07:f3:a1:59:f8:05:03:b7:a7:d1:b0:8f:c7:
         cf:36:db:fb:24:10:11:9c:98:1c:9a:2f:0f:2b:03:45:0b:e4:
         1c:dd:73:43:aa:b1:d0:00:98:22:17:cf:59:0f:ef:81:ca:b6:
         28:b9:74:69:00:bb:b6:87:05:da:56:60:a6:97:a9:8d:c4:34:
         06:10:ea:6d:26:65:ec:cd:75:81:7a:2f:08:fb:6a:98:9c:14:
         4a:cf:d4:27:ed:7e:0e:07:17:81:e0:f3:70:99:b7:92:83:05:
         44:1b:df:07:f9:e0:10:aa:21:32:d8:06:cc:c6:5e:65:8f:0e:
         7e:50:2d:bb:77:fd:b8:b8:61:a4:d5:44:5b:30:30:e0:87:0a:
         48:4f:45:4b:d4:58:1b:49:da:a3:5b:d3:42:88:7e:82:71:d9:
         fe:96:05:5a:a7:9d:ea:75:49:0f:db:a4:82:02:51:b2:4a:e0:
         f1:56:92:ec:61:5a:46:f0:6e:cd:d3:c0:c5:71:0f:fd:94:2f:
         24:23:ec:93:f6:c0:29:38:8e:7a:e0:71:77:3c:b0:ce:dc:15:
         8f:5d:9e:3f:10:e3:33:50:0d:95:b6:15:7b:3b:e5:7e:ed:da:
         25:ba:34:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:42:48 2025 by rpki-client