Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
File:                     tNb_1d_56sQTq0QI4JY3sJSU28g.mft (raw, json)
Hash identifier:          SDTHst/CUt63akwQ0fcsMqUGO3oltlzttNcaTI+6aK8=
Subject key identifier:   A4:44:0D:29:AE:AA:02:12:F4:42:91:D0:28:8D:E0:82:FF:8C:3D:63
Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8
Certificate issuer:       /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
Certificate serial:       0780
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
Manifest number:          0708
Signing time:             Sun 19 Oct 2025 00:03:19 +0000
Manifest this update:     Sun 19 Oct 2025 00:03:18 +0000
Manifest next update:     Sun 26 Oct 2025 00:03:18 +0000
Files and hashes:         1: tNb_1d_56sQTq0QI4JY3sJSU28g.crl (hash: mJtQ7F5nyU0SLPiWxHtCuP+934E6zuxIEQIReNMWsak=)
                          2: BE76C8186C6811F0B3FF7E69C4F9AE02.roa (hash: nVi2F1h98I6eFhDtm7NoIpz9Is13r6Zxvgjimh4KJP0=)
                          3: FFFBCAEE9A9511EBB49D7E1AC4F9AE02.roa (hash: Ybb2csXFZo9W1XG+GRQhzLexAF28aEoPNkvLGKQiexs=)
                          4: DEB93E12828F11EF9E87BB73C4F9AE02.roa (hash: 4/7UnX5ze5wrjMqFOLuyIDjnmWsUK84zcdUUtFoXAm8=)
                          5: EE2DC576942811EEAA69EB54C4F9AE02.roa (hash: uZyAHanV/dsvce0LE5DxDJIkDTak4REE2s1BDI3t2SM=)
                          6: A716CA94954611EC9B320352C4F9AE02.roa (hash: 29eINthckTF8RKNey1Kdeos3g3mQUi6TqxaM8+tcS1o=)
                          7: DF7AF1FC42D811EF8EEF4E51C4F9AE02.roa (hash: JkA2VjRkGVaoGTtSe3EFAkpmSjP2mBiftG09Gd2raHk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl
                          rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1920 (0x780)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DEA4, serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
        Validity
            Not Before: Oct 19 00:03:18 2025 GMT
            Not After : Oct 26 00:03:18 2025 GMT
        Subject: CN=68f42ac6-2172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:02:8c:1e:4c:72:20:7f:d6:fc:53:89:83:a5:
                    22:87:47:4d:83:9f:ea:dc:ed:3a:7a:74:85:e8:c6:
                    3b:c7:52:51:ca:97:21:90:24:57:52:a5:81:d5:79:
                    88:49:82:41:f5:24:f7:9f:88:3d:66:5e:40:b3:6e:
                    54:b6:d7:b0:ae:67:92:d5:c5:db:63:25:80:06:a8:
                    b9:63:e1:09:2d:6c:50:f2:ae:df:d0:f4:07:e9:72:
                    8f:68:6f:30:84:aa:92:4d:1b:65:f0:b4:91:74:56:
                    d2:7d:1a:e1:32:7c:e0:ba:99:24:e2:c5:ad:c3:f7:
                    d9:be:1a:2c:d4:84:8a:46:5e:93:ff:47:d4:8d:d0:
                    42:ba:33:dd:d9:15:99:1d:51:ee:da:a4:c4:bb:ce:
                    ac:51:63:95:37:d3:75:d6:d1:cd:53:e1:82:13:b6:
                    60:92:3a:37:3e:33:68:19:17:52:85:47:98:e6:0c:
                    43:f4:7f:f4:ec:86:90:84:25:d3:e7:79:da:14:f3:
                    1f:58:1f:e1:95:e4:d5:6a:eb:19:40:08:46:e9:6f:
                    80:dd:d1:73:54:a4:29:b0:7d:7a:9e:96:e0:8f:81:
                    f7:2e:0a:36:2e:21:41:56:34:28:75:69:89:7d:a1:
                    36:ab:69:3a:62:d8:94:c7:81:81:8b:53:ff:33:82:
                    f7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:44:0D:29:AE:AA:02:12:F4:42:91:D0:28:8D:E0:82:FF:8C:3D:63
            X509v3 Authority Key Identifier:
                keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:c9:e6:e7:a0:ab:7d:07:26:37:70:46:10:56:0f:3b:34:67:
         7f:ae:47:cf:68:b1:e2:d8:79:31:50:77:79:b5:37:b4:87:e3:
         86:2c:dc:2f:80:bd:c6:c2:4e:fc:85:b0:df:a6:7c:bc:8d:b4:
         10:7c:95:08:72:9d:ec:d5:e0:39:20:fd:4a:fb:3f:99:af:1c:
         fd:f2:ca:31:0e:82:e5:29:43:18:87:14:1d:a6:3f:9b:e8:b5:
         24:17:df:6b:a4:e7:e8:87:67:a5:1a:25:98:80:dc:38:70:a8:
         ef:4f:29:9d:a9:0d:b6:cf:a5:ea:5b:e4:c9:ca:c8:90:6c:18:
         c1:af:b3:05:a7:c0:0b:30:26:9c:83:16:ee:c0:24:d9:3a:0a:
         80:3d:50:90:75:ff:d5:67:5c:56:b0:f4:b9:78:ac:1f:20:7b:
         5a:f4:99:05:6f:fc:be:ac:8d:6b:45:77:94:be:ec:15:89:d0:
         17:31:74:67:2f:af:2e:82:70:ae:68:b3:be:b4:48:c3:e0:4c:
         6f:c7:92:35:b1:91:44:b9:cb:20:15:f7:81:22:c5:30:a8:ad:
         85:aa:f3:d2:24:d7:d8:a3:66:eb:80:5e:92:7a:c5:db:98:1c:
         ee:23:81:dd:c1:cc:ee:e4:1d:5b:6f:71:05:ce:b5:91:d1:41:
         6b:db:4a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:42:38 2025 by rpki-client