Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft
File:                     tji5qb9-MI8fus87TDpEVx8p33c.mft (raw, json)
Hash identifier:          gMTQlr5HTL4pPM7e4VAWCWOo2O5HKZTDzK9bxw5S51Q=
Subject key identifier:   E3:0D:E1:6D:A9:00:2A:17:F5:EA:66:89:97:20:C1:2D:3B:F2:03:87
Authority key identifier: B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77
Certificate issuer:       /CN=A917EDAC/serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77
Certificate serial:       090F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft
Manifest number:          0906
Signing time:             Sat 18 Oct 2025 21:25:15 +0000
Manifest this update:     Sat 18 Oct 2025 21:25:14 +0000
Manifest next update:     Sat 25 Oct 2025 21:25:14 +0000
Files and hashes:         1: tji5qb9-MI8fus87TDpEVx8p33c.crl (hash: 69zK/l45TDMU9s6BnWIC19kNeB03Mvq1qhp3cG31KWM=)
                          2: 5B5592F07B0711ED9D595969C4F9AE02.roa (hash: ifSxbXnY7sYMQ8euk4GLmU7jgSJs5yw2GtjSeYMB3Jg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl
                          rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2319 (0x90f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EDAC, serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77
        Validity
            Not Before: Oct 18 21:25:14 2025 GMT
            Not After : Oct 25 21:25:14 2025 GMT
        Subject: CN=68f405bb-80b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:27:d2:38:f1:c6:2e:69:87:64:c5:e9:3e:0a:
                    29:11:8a:3c:98:56:f4:db:b5:0b:66:3d:7e:f9:78:
                    56:de:e0:5e:b2:68:92:b9:fd:21:ae:64:09:30:eb:
                    44:90:96:34:28:c2:33:d4:2a:99:94:f3:c4:b6:58:
                    74:29:06:cf:8f:99:8e:11:f8:38:27:7f:5e:37:0d:
                    b4:a5:a7:76:04:29:ca:ce:de:e7:82:3f:ed:62:13:
                    34:5b:5b:9b:56:2c:cd:6f:6d:f3:4f:80:df:b7:a9:
                    a6:f4:90:f9:60:7c:c1:a0:06:9b:06:60:d8:81:7a:
                    90:0b:bf:41:be:20:3d:22:55:c1:97:9d:e3:11:13:
                    75:49:d6:1c:31:2a:60:78:8b:f2:23:7c:01:e5:87:
                    a9:27:26:c0:4a:9e:c0:72:63:2b:fb:7e:6d:3f:00:
                    af:c0:22:e5:8b:01:a2:b0:5e:b0:a6:c2:89:b8:5a:
                    ca:07:36:f0:a9:fc:3d:c4:e8:a2:51:2f:91:de:26:
                    05:b0:2b:56:ac:4f:11:c4:1b:ac:06:7c:c8:97:b9:
                    5a:ca:11:63:42:fe:bd:51:3e:9c:4d:26:08:e8:b8:
                    36:ba:e3:11:1f:ad:55:20:46:9b:ab:4d:96:e0:c4:
                    8b:6f:3c:f8:39:e3:2e:eb:d8:ad:92:0c:b9:ff:61:
                    1a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0D:E1:6D:A9:00:2A:17:F5:EA:66:89:97:20:C1:2D:3B:F2:03:87
            X509v3 Authority Key Identifier:
                keyid:B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:23:be:29:ee:97:b2:62:0c:d4:8f:ac:a9:a7:79:bf:49:5f:
         bf:dd:21:eb:1f:b9:4c:4e:ae:da:2f:64:62:0e:1f:f5:ad:4b:
         98:db:e9:55:e3:5a:3b:59:5a:ef:60:0e:89:2b:0e:12:93:9f:
         78:a1:92:2c:a6:be:4a:21:96:66:be:65:20:40:4c:ec:7a:46:
         53:6e:f7:6d:f3:73:cf:83:98:b8:c7:21:dd:d2:d6:77:0c:d9:
         b6:70:57:86:8f:69:6e:e5:20:a5:fd:2f:d3:3f:b7:92:3a:4a:
         f1:90:fb:89:ba:7b:9e:5b:e0:c0:61:1f:68:de:65:07:e1:66:
         41:11:d5:a0:2b:b3:79:32:99:7a:5c:15:47:e1:b9:22:a2:1c:
         aa:f2:92:b4:80:25:ad:da:52:ee:e6:7b:b5:7b:9c:dd:a2:b1:
         d0:c0:c5:06:34:de:aa:37:0d:cb:13:ea:c6:cd:9d:25:a3:cd:
         05:bb:b3:69:7d:75:46:96:39:e2:4e:c9:35:5e:36:35:de:52:
         1c:f8:30:2b:fe:2e:13:78:3f:69:c3:81:e6:2e:29:9b:3d:ef:
         8d:89:c3:ba:5b:3d:ea:26:37:d8:6d:45:c7:3d:1e:33:a7:6b:
         73:65:5f:b1:88:4e:bc:32:d5:39:fb:80:2c:ab:cf:98:e0:72:
         76:e2:5e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:26:33 2025 by rpki-client