Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
File:                     tgEhTJYoyfQh02c0s4HN7JKJR0g.mft (raw, json)
Hash identifier:          d930xBdNyLT7cwqdA2IcooIcpMEhQvq6sbT0A62l9nQ=
Subject key identifier:   BF:DD:B9:29:1F:B3:55:80:9E:2C:B6:98:50:50:E3:C2:DC:AB:57:A6
Authority key identifier: B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48
Certificate issuer:       /CN=A917544F/serialNumber=B601214C9628C9F421D36734B381CDEC92894748
Certificate serial:       0269
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
Manifest number:          0261
Signing time:             Wed 23 Jul 2025 02:15:22 +0000
Manifest this update:     Wed 23 Jul 2025 02:15:22 +0000
Manifest next update:     Wed 30 Jul 2025 02:15:22 +0000
Files and hashes:         1: tgEhTJYoyfQh02c0s4HN7JKJR0g.crl (hash: MY+bplFKj+ZEDs5qF4k75hMiQD3FV8jxbGFgMgXMAkQ=)
                          2: AF17D342228A11EDBBB7C135C4F9AE02.roa (hash: nhFejZbPmF/mHGnNhHKJIEbR5bZWtdWdp3ZM+fASALI=)
                          3: 2E0FE566659A11ED8981D533C4F9AE02.roa (hash: vBxsFzT5gC7QzQ1XTLVC3PqbT6UzqTD7wUR9KYNT0TI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl
                          rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 02:15:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917544F, serialNumber=B601214C9628C9F421D36734B381CDEC92894748
        Validity
            Not Before: Jul 23 02:15:22 2025 GMT
            Not After : Jul 30 02:15:22 2025 GMT
        Subject: CN=688045ba-31e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a5:dc:e6:f6:a1:e9:0d:a0:11:90:3d:ab:ef:
                    a4:16:46:05:69:95:4a:da:69:23:17:54:f1:40:ca:
                    37:5b:c9:ec:e7:af:6f:1a:bd:b1:70:c9:51:21:0e:
                    32:07:d9:8b:02:1f:28:cb:aa:09:68:dc:18:69:25:
                    71:30:41:7f:2f:44:df:3d:aa:22:fa:2f:4a:f6:83:
                    8c:a0:0c:7d:1a:85:e3:c7:91:9e:23:7a:3b:a0:6a:
                    5c:a4:3b:bd:d8:16:74:32:c8:29:4f:4f:cd:77:fb:
                    d0:eb:1e:f8:81:40:34:18:16:22:05:71:95:60:84:
                    24:f2:3e:ac:77:97:a8:89:77:6e:2b:d1:a4:25:88:
                    c7:ad:a4:1e:3a:dd:40:84:89:dd:d5:23:3a:c5:2c:
                    42:62:21:1f:72:a4:42:99:52:ed:ff:d2:da:ae:45:
                    d1:5a:64:d3:b3:e4:48:23:87:c5:aa:52:89:60:ce:
                    3f:f7:9e:cb:a4:2f:cd:3c:a8:8d:6a:a0:45:d7:86:
                    76:05:2d:b8:93:af:f8:13:a6:4d:4b:ed:3b:1c:7d:
                    6b:01:b8:dd:ae:b2:be:80:bb:13:8e:32:ee:c1:6b:
                    08:a4:37:61:70:ef:64:01:f4:f6:1a:52:cd:25:56:
                    e4:b4:72:c2:a9:26:91:71:d6:9c:07:24:9c:10:bf:
                    5c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DD:B9:29:1F:B3:55:80:9E:2C:B6:98:50:50:E3:C2:DC:AB:57:A6
            X509v3 Authority Key Identifier:
                keyid:B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:a4:a6:5b:51:7d:bf:8f:7d:26:be:16:69:47:42:61:14:90:
         92:52:d5:73:5c:a1:7b:7b:64:3e:f9:03:eb:e4:24:ef:8c:a8:
         84:29:9f:f2:95:6b:eb:27:b1:8c:35:b8:23:6e:1e:e1:85:1e:
         ac:b6:25:4f:b6:c2:a0:d3:60:d4:a7:f5:40:61:01:13:9d:06:
         f6:74:16:dc:a7:11:6b:e1:7e:36:bb:d6:e1:36:4c:56:31:c1:
         6c:da:a6:cb:cf:ce:06:0e:69:b8:45:66:ee:89:56:ef:aa:fc:
         f6:44:de:88:5f:ef:f7:f3:d2:01:0e:d7:3f:8f:b9:09:8d:da:
         77:19:9a:99:f7:a1:a1:67:28:41:33:93:fd:63:1e:c4:f4:26:
         73:ab:e8:99:c9:58:6c:f4:49:08:5d:4c:37:4c:93:86:6b:1e:
         67:eb:5d:1f:fa:cd:d1:60:5e:9e:af:c3:ae:d7:f2:9f:4f:9f:
         ab:5b:ee:22:ef:34:af:86:aa:d5:02:06:2a:32:14:b5:bd:21:
         19:6f:e3:b4:ce:38:b4:4e:f6:1b:33:f1:6d:52:09:7c:22:94:
         d3:00:f9:e5:ca:dc:6b:d6:09:d9:a6:59:92:55:b8:bf:50:8c:
         9b:b3:97:f9:d2:56:b4:56:4a:6b:74:d9:23:84:38:5b:a5:d5:
         e2:bc:b9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:25:29 2025 by rpki-client