Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft
File:                     twc6HQnyOiR_zleFKqS4poDG2nA.mft (raw, json)
Hash identifier:          if2k/AvWa8dg9rx9c0wG3gg3VZN8pcVahCACFlZFp3w=
Subject key identifier:   17:58:08:B9:E8:1F:39:35:EE:88:40:DE:77:5B:1C:A1:FC:8A:0F:2A
Authority key identifier: B7:07:3A:1D:09:F2:3A:24:7F:CE:57:85:2A:A4:B8:A6:80:C6:DA:70
Certificate issuer:       /CN=A917E75D/serialNumber=B7073A1D09F23A247FCE57852AA4B8A680C6DA70
Certificate serial:       3395
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twc6HQnyOiR_zleFKqS4poDG2nA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft
Manifest number:          3395
Signing time:             Mon 20 Oct 2025 15:29:32 +0000
Manifest this update:     Mon 20 Oct 2025 15:29:31 +0000
Manifest next update:     Mon 27 Oct 2025 15:29:31 +0000
Files and hashes:         1: twc6HQnyOiR_zleFKqS4poDG2nA.crl (hash: BLqTBQhY9YAP+tfMikblHMpwhefT2PamXfGTglmOcfg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.crl
                          rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twc6HQnyOiR_zleFKqS4poDG2nA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 15:29:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13205 (0x3395)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E75D, serialNumber=B7073A1D09F23A247FCE57852AA4B8A680C6DA70
        Validity
            Not Before: Oct 20 15:29:31 2025 GMT
            Not After : Oct 27 15:29:31 2025 GMT
        Subject: CN=68f6555c-f05b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:91:4a:f8:5c:63:b7:73:07:2c:3b:b1:c4:95:
                    fd:42:d3:63:a9:58:30:64:fc:16:6e:c6:22:25:3f:
                    53:8e:b2:15:59:a5:b0:b8:6f:65:4b:54:11:05:2c:
                    62:9c:3e:49:08:94:d0:4c:b7:96:27:2f:e3:32:3a:
                    3c:bc:81:40:b8:b4:db:27:69:54:b4:a8:0c:b0:04:
                    c9:60:fd:e7:6d:ca:9b:02:b9:3f:ac:1e:4c:a5:99:
                    29:d8:c1:0e:7c:ce:0d:28:66:ac:f6:19:3d:b1:16:
                    da:6c:54:57:f3:8e:9c:ad:0e:2a:24:05:62:86:40:
                    69:b3:3d:36:d5:31:01:5f:9a:d2:7a:0e:0c:60:36:
                    18:95:55:f1:c5:51:f4:ae:cf:74:b1:21:d6:0d:32:
                    d9:7b:07:41:d6:77:0e:7e:c4:16:8c:be:8d:19:42:
                    6d:0f:5f:8a:5b:30:33:51:35:d9:ab:81:f3:63:53:
                    22:09:21:37:d9:7f:43:6a:ac:6f:cd:27:83:30:67:
                    a6:a7:61:fc:83:9f:ff:b2:a8:74:d8:bb:fa:c8:29:
                    58:c6:c8:4c:d7:1d:85:7a:e5:cb:b3:aa:59:fe:9f:
                    f9:55:61:bc:2c:52:c1:0b:32:89:f8:96:26:76:b0:
                    16:96:18:a2:e0:2a:89:17:7b:d9:5c:15:18:da:1e:
                    6c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:58:08:B9:E8:1F:39:35:EE:88:40:DE:77:5B:1C:A1:FC:8A:0F:2A
            X509v3 Authority Key Identifier:
                keyid:B7:07:3A:1D:09:F2:3A:24:7F:CE:57:85:2A:A4:B8:A6:80:C6:DA:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twc6HQnyOiR_zleFKqS4poDG2nA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:8f:e8:f1:e8:08:e0:d8:e2:d8:13:60:30:c6:f5:84:22:25:
         6e:f8:54:72:41:d3:49:34:21:f9:68:92:c6:a6:ea:c2:54:63:
         06:0d:49:dc:4d:cc:1a:88:e9:c2:0c:94:b6:73:63:fa:be:2c:
         61:ce:6c:10:4a:f6:5f:c1:72:1e:01:c2:a8:2e:81:2e:7b:11:
         cf:68:68:00:12:85:fc:4e:81:1e:d6:17:39:cb:df:7d:78:03:
         e9:45:4c:ba:4a:70:d8:c2:fe:bd:a6:d9:16:db:86:a2:e3:09:
         6d:40:1d:58:d6:c2:3d:65:45:c8:c5:05:1c:5c:84:da:d2:10:
         58:4b:ea:b1:53:bc:09:b0:81:16:57:d3:47:81:a0:80:a4:f1:
         cc:ab:1f:e5:11:dd:ef:5e:67:0c:90:c2:b8:2f:ec:d0:6d:70:
         39:7b:58:a9:24:f2:e6:94:18:b8:a6:83:57:47:c1:08:9e:98:
         f0:7c:b6:39:55:7c:f7:ee:59:a3:98:48:4f:a4:1c:d2:49:b2:
         a1:e4:39:50:03:0e:ff:cf:18:11:70:06:04:1c:41:18:7f:3f:
         a0:17:fb:4d:35:26:ff:6d:69:c3:2b:41:17:4d:2e:58:d8:a0:
         96:7c:45:db:00:61:a8:a3:07:99:1e:c9:13:c4:9d:d4:78:f2:
         39:ba:90:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:53:04 2025 by rpki-client