Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
File:                     tv1vS0-3wyR8WZKZsui6-1qLunI.mft (raw, json)
Hash identifier:          Be5vbDcJQjiUkGSkP2ea/R6z1MVdGgpJWv12VUEg/Ps=
Subject key identifier:   6A:EA:C4:B5:D9:16:72:F3:A4:D0:3F:16:2A:4E:85:C8:AE:31:84:4E
Authority key identifier: B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
Certificate issuer:       /CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Certificate serial:       06AC
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
Manifest number:          069A
Signing time:             Fri 22 Aug 2025 22:25:23 +0000
Manifest this update:     Fri 22 Aug 2025 22:25:22 +0000
Manifest next update:     Fri 29 Aug 2025 22:25:22 +0000
Files and hashes:         1: tv1vS0-3wyR8WZKZsui6-1qLunI.crl (hash: ysqJPBR+o2YbCjWZpBZgUZtU4+944zO46dpoHbrCuu0=)
                          2: EC427D64B16311ECA18ED12FC4F9AE02.roa (hash: Ga4Z3DpE9aUbX7W5p2tUSOPgf7WkxMTRgFBKaq09Cxs=)
                          3: 35341F3E4EAE11EF811DC17BC4F9AE02.roa (hash: 1g7V3yJi0/XsTFsCpcEg/UcPiKQqpqW1UWTVYTWMIZE=)
                          4: A40873CE7FB811EB82018D29C4F9AE02.roa (hash: x1uMmRK43yay8ZPmLxVu8RIg3TAXDE9HwOF5tkl8BVc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
                          rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1708 (0x6ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE3C4, serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
        Validity
            Not Before: Aug 22 22:25:22 2025 GMT
            Not After : Aug 29 22:25:22 2025 GMT
        Subject: CN=68a8ee53-3a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:92:a5:44:88:f2:9a:5a:cf:31:d5:66:a4:c2:
                    e8:0c:30:41:24:29:64:92:50:ef:b5:1a:b5:41:5a:
                    ef:7f:36:59:5c:80:a8:4e:93:65:88:ba:d2:3f:10:
                    7f:a0:9e:b4:1d:9a:2b:b3:17:d6:61:33:09:2a:fe:
                    3f:3c:b4:02:ec:3a:d2:0a:18:6d:c6:55:52:f2:f6:
                    59:7f:2c:37:f9:0d:c1:bd:a6:8c:07:da:e9:ba:2f:
                    d8:54:b8:eb:f2:07:5c:86:0a:96:eb:fb:9c:be:c9:
                    f4:58:c8:bd:aa:34:c9:9c:42:bb:7f:ab:48:2c:63:
                    bd:3d:a8:0a:02:96:8a:99:23:f2:d7:a9:05:fe:04:
                    13:80:02:df:03:7f:d0:56:6c:f6:b9:a3:03:04:dd:
                    1b:64:fe:04:72:53:98:14:c2:c3:fb:67:61:fe:43:
                    29:10:93:5f:1e:a2:e9:da:75:66:c2:a7:b1:04:de:
                    22:5d:bb:e4:fb:3d:1f:5c:26:33:17:ec:ac:c8:07:
                    bb:0b:50:13:b8:52:d4:f5:92:c1:54:92:0e:02:4c:
                    d7:f7:fe:3a:1d:e8:97:6f:05:a8:d4:93:85:bf:a2:
                    72:8e:55:e6:ea:d0:56:b8:87:6a:19:e6:c5:c9:56:
                    91:0a:7d:a8:1c:5b:55:17:cf:a7:a0:fd:32:c5:b6:
                    24:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:EA:C4:B5:D9:16:72:F3:A4:D0:3F:16:2A:4E:85:C8:AE:31:84:4E
            X509v3 Authority Key Identifier:
                keyid:B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:56:25:f5:1b:73:b6:bd:d0:2d:0a:6a:bc:b1:93:7b:18:0b:
         d1:a3:18:38:da:e5:55:ce:59:a3:15:28:42:61:22:26:83:3d:
         a2:22:4e:08:b5:76:62:07:6b:9a:25:15:76:14:eb:e4:ad:bd:
         71:f2:4f:f6:18:a2:7c:cf:55:3d:fa:47:84:f5:03:db:6a:8e:
         d5:75:d0:e1:be:4e:70:3e:13:00:8d:dd:9a:65:32:a8:7e:90:
         18:df:7a:92:f6:9c:9b:f4:aa:25:73:ee:0b:e2:a7:31:cf:0f:
         ac:07:5c:79:3c:a1:ae:6c:76:16:96:50:12:97:6c:f5:b5:c4:
         f0:17:fc:8b:10:3c:df:10:73:01:fa:b7:cf:7f:e4:0e:e2:81:
         1c:83:1b:c4:f7:13:20:52:6c:0d:b5:00:6b:72:b0:1c:40:aa:
         35:b3:90:8b:48:4e:a0:a3:21:0d:5e:54:c2:d3:56:8d:f1:c3:
         54:b7:59:c2:23:28:8a:43:04:c2:d7:f5:f4:53:52:8d:7c:1a:
         60:0a:af:77:25:30:1c:71:80:6c:e5:10:25:92:2e:6b:9b:bd:
         3c:ec:6d:73:6f:be:0e:8e:44:b7:95:4a:1f:e3:55:55:1c:1a:
         fd:6f:6a:15:b4:d5:e1:50:c2:78:ef:91:63:18:3b:0d:fc:ea:
         90:75:b4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:02:30 2025 by rpki-client