Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft
File:                     tr-xkXvTGlViMihYRudjoUMyymg.mft (raw, json)
Hash identifier:          GOCG5e4Ir6YTm6OGU2rN7+80O8TMzj8NtnhQenADIsA=
Subject key identifier:   46:B7:0C:04:A4:E3:CF:7D:76:67:FA:BC:E1:C4:FD:48:43:A6:B0:68
Authority key identifier: B6:BF:B1:91:7B:D3:1A:55:62:32:28:58:46:E7:63:A1:43:32:CA:68
Certificate issuer:       /CN=A91A6E4D/serialNumber=B6BFB1917BD31A556232285846E763A14332CA68
Certificate serial:       0555
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tr-xkXvTGlViMihYRudjoUMyymg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft
Manifest number:          0555
Signing time:             Fri 22 Aug 2025 23:34:29 +0000
Manifest this update:     Fri 22 Aug 2025 23:34:29 +0000
Manifest next update:     Fri 29 Aug 2025 23:34:29 +0000
Files and hashes:         1: tr-xkXvTGlViMihYRudjoUMyymg.crl (hash: PoO8wHhJR0zgeSCAyc1SYyEEMZx0kqBS92TSFqc4onA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.crl
                          rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tr-xkXvTGlViMihYRudjoUMyymg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 23:34:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1365 (0x555)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6E4D, serialNumber=B6BFB1917BD31A556232285846E763A14332CA68
        Validity
            Not Before: Aug 22 23:34:29 2025 GMT
            Not After : Aug 29 23:34:29 2025 GMT
        Subject: CN=68a8fe85-0ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:95:80:f9:45:2b:b2:30:dd:53:cd:bd:2e:b9:
                    e0:74:b1:1e:8e:8a:62:85:d3:0e:36:4c:34:6b:41:
                    de:28:ac:c1:54:64:94:3b:f5:0e:53:28:3b:cf:60:
                    b5:8a:96:e9:96:ca:f6:68:8d:e4:c1:d2:ad:3e:91:
                    b0:7e:d9:6f:af:4c:26:e3:e1:46:86:49:7e:0c:d2:
                    35:b5:96:83:32:d4:4b:37:d4:37:ee:b2:c3:45:e9:
                    20:bb:dd:fd:74:e1:8d:b7:34:6d:8d:0f:28:d4:06:
                    6b:41:5a:7c:44:ad:b1:9a:0d:85:6e:43:a2:3a:dd:
                    0e:5a:79:32:f7:1e:14:b1:e4:38:cd:6b:20:43:a1:
                    89:40:9d:2a:9a:3d:ba:ce:30:72:7c:9d:8e:de:2f:
                    39:d2:c4:f2:21:f6:34:c1:ff:fd:4e:d8:f9:cb:08:
                    ef:12:74:60:e8:4c:4c:c9:dd:01:c5:63:33:00:79:
                    af:32:a9:67:f8:5b:ed:eb:41:dd:ae:df:ad:66:02:
                    7e:56:56:0d:15:da:e1:d5:d2:92:31:9c:6a:02:74:
                    c4:c2:d3:15:a5:1a:71:99:f2:1d:ec:ee:f0:14:0d:
                    24:99:0f:6b:4b:30:22:bc:64:90:aa:89:87:30:5c:
                    d8:b0:41:c0:4f:40:3d:9c:ea:c0:95:06:10:f4:60:
                    e0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B7:0C:04:A4:E3:CF:7D:76:67:FA:BC:E1:C4:FD:48:43:A6:B0:68
            X509v3 Authority Key Identifier:
                keyid:B6:BF:B1:91:7B:D3:1A:55:62:32:28:58:46:E7:63:A1:43:32:CA:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tr-xkXvTGlViMihYRudjoUMyymg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b7:b5:ad:b4:46:3a:7f:63:67:66:15:9b:3a:93:45:a3:a0:
         30:ff:c4:ef:a6:68:77:60:dd:43:39:62:ad:8f:8e:78:02:8d:
         fe:98:de:ab:ab:85:88:95:32:62:5a:77:fd:c2:43:ef:27:6f:
         92:a8:99:89:e4:fa:9a:24:06:16:c2:55:5a:70:9f:9b:91:7e:
         18:d7:5f:98:15:b7:66:15:2e:d5:9d:fc:d4:0d:10:ee:1a:c4:
         8e:11:99:7b:c3:09:f6:53:aa:e1:4e:4c:98:d2:71:a6:71:d9:
         09:63:76:31:8f:e0:60:43:d4:e7:46:e7:c7:14:f1:c0:4b:6d:
         72:e9:92:b0:c7:64:b6:72:3d:7a:c2:6d:f3:b9:f7:e0:19:e5:
         3b:b7:b1:af:43:d4:fd:d7:31:58:9c:52:b0:08:d1:c2:ad:e6:
         8c:de:cf:b3:bf:01:1d:91:8b:78:b4:4f:1d:e0:47:c5:5b:dc:
         e5:d7:0a:8d:48:e4:ed:f7:f4:b8:8a:a6:53:00:2b:ed:9c:00:
         0d:62:e5:64:10:bb:9c:2a:a8:1b:16:2d:00:fa:b3:5f:dd:01:
         bb:45:90:71:5c:d8:45:24:58:d7:e0:3b:c3:9a:1b:7a:f1:af:
         30:dc:65:2d:9d:79:30:f8:56:45:09:4e:da:5d:14:5e:b9:5c:
         38:43:f6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:31:15 2025 by rpki-client