Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
File:                     Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft (raw, json)
Hash identifier:          zy7himLp33ssRLHH/Mb60fTGQoro158Tde+v1kyMOrk=
Subject key identifier:   96:94:AA:0D:9C:E6:06:54:90:2F:9C:02:72:65:E0:3A:CB:74:F6:53
Authority key identifier: 4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9
Certificate issuer:       /CN=A911155C/serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9
Certificate serial:       0836
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
Manifest number:          082E
Signing time:             Thu 18 Sep 2025 21:03:57 +0000
Manifest this update:     Thu 18 Sep 2025 21:03:57 +0000
Manifest next update:     Thu 25 Sep 2025 21:03:57 +0000
Files and hashes:         1: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl (hash: /KHLkm7lm5q1TxRdcMdo2tw+Z/yNGv9I16FH1jRKZ6E=)
                          2: 8AE9FE88E63111EAAC43244EC4F9AE02.roa (hash: QdFj4b+G66zoM24orGpWvQKYWAowBUe3I5QM3qjwxak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl
                          rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 21:03:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2102 (0x836)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911155C, serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9
        Validity
            Not Before: Sep 18 21:03:57 2025 GMT
            Not After : Sep 25 21:03:57 2025 GMT
        Subject: CN=68cc73bd-3960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e3:d0:1d:65:75:cd:d7:6e:fc:0f:1b:a4:0f:
                    8d:23:af:c3:31:f2:99:02:ac:94:aa:fa:62:54:cd:
                    a8:c7:5a:db:ee:09:7a:73:6c:ad:34:9c:7e:44:9d:
                    bd:6f:96:78:3b:63:69:a5:88:81:f3:e4:f8:d0:14:
                    1c:b5:df:40:33:7b:4c:05:13:67:e4:28:e8:92:6f:
                    0b:49:6d:76:11:7d:c9:f9:d1:80:43:57:2d:0a:f7:
                    a8:8b:b4:1a:90:44:41:b1:32:87:02:3c:c5:90:3d:
                    03:c5:a8:78:49:b8:cd:3a:95:fc:50:15:8d:38:28:
                    d1:1f:c4:7d:fe:37:15:f7:18:8e:5e:fe:7c:00:be:
                    a5:8e:8f:b2:c8:74:78:17:97:ee:a4:20:0e:81:f3:
                    ab:85:71:96:71:b2:79:60:fd:3a:c4:23:9d:88:63:
                    0b:2c:c4:3f:a5:fe:e0:55:26:74:8e:37:c3:2c:8e:
                    57:e6:37:c7:e2:26:8a:95:97:49:78:55:bd:e8:de:
                    8d:20:10:b9:1c:1b:f0:27:c7:fc:b0:3a:1c:c8:8d:
                    6d:64:8b:b3:02:07:6d:2d:02:4d:f9:b6:e3:43:b6:
                    a4:de:70:de:3b:d3:10:bd:b6:db:a8:6c:da:96:d0:
                    8a:f5:75:b6:62:d3:14:d1:c6:ed:05:e8:d3:4d:b9:
                    10:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:94:AA:0D:9C:E6:06:54:90:2F:9C:02:72:65:E0:3A:CB:74:F6:53
            X509v3 Authority Key Identifier:
                keyid:4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:d2:4d:4d:d2:f8:7d:01:1e:a4:ba:72:1f:12:5e:e8:7e:84:
         d8:f9:db:68:b9:d2:4f:2b:a9:c8:7c:6e:80:0e:90:be:10:9a:
         b9:37:d1:7d:07:a9:48:47:a7:0e:7c:82:11:6a:97:7e:ab:77:
         52:b0:09:64:75:e7:db:11:d1:a3:08:3c:62:58:a1:45:b9:00:
         06:ff:6a:97:3e:86:c8:13:12:73:2b:0a:4d:27:4c:78:36:62:
         41:0b:02:bf:48:fc:de:ad:b0:24:51:ad:57:93:91:75:ab:12:
         88:d3:7e:46:4a:86:54:26:21:bf:48:c1:3c:0e:de:5e:71:21:
         ab:a6:a9:2c:e8:c0:68:68:09:14:6c:d0:bd:ad:0c:c6:c1:e3:
         55:d3:46:73:d3:e9:c6:13:a7:c5:e8:e0:dc:da:fd:b2:02:a2:
         11:e2:74:6a:71:4c:f8:a7:65:86:fb:ce:a8:d5:02:97:77:67:
         9b:62:9c:e9:06:78:a1:cc:fe:07:15:99:c3:4e:30:77:71:b5:
         18:c0:0b:f7:24:e5:15:df:8f:bf:6e:65:ec:96:b0:ad:69:3b:
         04:3e:f1:d1:2f:67:54:7d:6c:db:c8:5b:e7:c9:30:19:ba:d4:
         34:9d:09:cb:4b:53:b4:9d:f7:40:8c:66:77:fc:99:b9:b2:f2:
         7c:98:81:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 04:01:59 2025 by rpki-client