Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
File:                     tLEObLONU2XQVOjb6Q808sOIsQw.mft (raw, json)
Hash identifier:          sb77a3sUrWLwcUJ2pyWomW+ZkzAmf+YrNKcLn5vL520=
Subject key identifier:   73:E3:5C:20:FC:53:A1:1B:8A:DD:8E:A3:D6:19:27:37:7E:32:C4:23
Authority key identifier: B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C
Certificate issuer:       /CN=A91CE3A3/serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C
Certificate serial:       0CAC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
Manifest number:          0C8E
Signing time:             Fri 22 Aug 2025 18:29:06 +0000
Manifest this update:     Fri 22 Aug 2025 18:29:05 +0000
Manifest next update:     Fri 29 Aug 2025 18:29:05 +0000
Files and hashes:         1: tLEObLONU2XQVOjb6Q808sOIsQw.crl (hash: QtCyge+J3zDXDtUVc6L4og6oEskHfhZTDM/bSI5qUSQ=)
                          2: 618AD7B6638A11F08BC2A840C4F9AE02.roa (hash: MwSFvEabk32pabHGDjMhMjg7Y9hSaRRoCFJNVkHfvCo=)
                          3: 30256B5CF7B911EEAB0C6C36C4F9AE02.roa (hash: YgmB/miyciCfel1NRXhzBbmgg6ljB6KT231oPhcSu5M=)
                          4: 610856EC638A11F08BC2A840C4F9AE02.roa (hash: mM2/OSyuyrdTMbuzL984YaUAfl+IdF87FO8qvYOz9Co=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl
                          rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 18:29:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3244 (0xcac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE3A3, serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C
        Validity
            Not Before: Aug 22 18:29:05 2025 GMT
            Not After : Aug 29 18:29:05 2025 GMT
        Subject: CN=68a8b6f1-a0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8c:84:42:b2:ce:36:ef:d4:0f:a8:4c:65:d9:
                    6c:28:fe:56:da:5b:be:2d:30:02:bf:f7:e6:c4:19:
                    73:f0:b6:dc:e7:fc:95:dd:bd:22:0d:97:46:59:53:
                    38:f7:59:51:2e:02:f3:70:c1:3c:f9:1c:87:05:fb:
                    84:09:df:dd:dc:09:2a:e4:d8:e2:8f:73:98:49:16:
                    91:0c:81:91:79:f9:07:7d:a8:31:2c:3b:42:b3:28:
                    fe:02:01:b2:e5:6b:2e:e3:cb:97:ea:9b:7b:e9:59:
                    8d:24:11:fe:4e:5f:e4:08:9d:2e:32:6a:ee:b1:d8:
                    76:82:d8:f0:ff:71:17:ea:79:e4:45:64:15:df:ea:
                    fc:a0:11:1d:ab:58:8b:33:24:ec:1d:9a:8b:04:68:
                    a3:76:e7:eb:cb:2b:83:84:6c:a1:46:fc:6b:4d:8c:
                    10:a0:47:fc:15:0b:f4:ed:57:49:c3:dc:c7:de:03:
                    41:ab:ad:b3:c9:fb:eb:f9:6a:90:df:30:4b:ad:b0:
                    65:88:9e:b8:bc:a7:94:f8:04:9d:c8:5a:84:79:65:
                    f0:4f:2c:3a:35:69:a9:e8:fc:ed:20:7f:6a:4e:54:
                    55:f8:46:e8:87:5b:6e:29:95:91:69:a9:1f:64:fc:
                    49:f0:99:6f:29:21:e0:6f:4a:70:eb:51:41:58:a9:
                    1b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E3:5C:20:FC:53:A1:1B:8A:DD:8E:A3:D6:19:27:37:7E:32:C4:23
            X509v3 Authority Key Identifier:
                keyid:B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:b3:ba:3a:d4:a5:9a:04:ff:68:d4:90:17:a8:66:7d:95:72:
         e9:9b:05:76:d0:3f:2a:73:10:19:65:c6:16:60:e5:18:a4:31:
         81:9c:43:6d:2e:2e:0d:8f:c3:dd:ef:fc:7d:39:6c:4a:6e:6c:
         d7:19:54:80:10:0d:44:e3:a2:53:93:68:1e:05:73:ef:70:f3:
         f9:7c:f7:20:42:af:8e:5d:90:08:d3:f4:da:21:bf:23:93:9a:
         73:77:48:b9:31:84:bf:58:18:8f:04:48:79:19:6e:23:5a:a6:
         3b:23:e1:5e:be:1a:4f:3f:9c:91:d5:58:a4:af:f3:d8:0e:09:
         3e:7f:02:c3:5b:1a:8e:b2:ff:7e:0c:d0:82:4f:4a:fb:9a:ee:
         b9:10:62:88:1d:13:f0:e2:8a:f5:03:59:c0:d8:ed:9d:4b:6a:
         99:9e:60:d0:e0:62:ca:ed:96:f4:b6:0f:c5:60:06:84:03:e0:
         89:0b:68:6a:a3:3f:ff:0e:61:f6:de:87:24:0c:c6:2f:72:be:
         21:51:5c:0b:63:12:a2:d6:ca:e1:16:54:86:84:2f:46:0a:2d:
         31:bc:58:60:e7:77:9e:9a:08:ba:fe:c0:7b:21:7b:85:28:61:
         92:b2:ca:93:5b:70:56:de:b1:4b:1c:81:a9:e7:1a:74:28:cc:
         75:a0:11:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:58:36 2025 by rpki-client