Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft
File:                     tljvayeSnHt_X7Jsue5qQSzoXdQ.mft (raw, json)
Hash identifier:          tGdHMiOJh4jdG9PXwCRfvZd71R10qs4z1n5glyjhJtA=
Subject key identifier:   9A:A6:FC:9A:4A:07:D9:D1:22:95:1B:4C:D4:95:2E:43:61:BB:6A:5E
Authority key identifier: B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4
Certificate issuer:       /CN=A9123072/serialNumber=B658EF6B27929C7B7F5FB26CB9EE6A412CE85DD4
Certificate serial:       07E1
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft
Manifest number:          07CD
Signing time:             Sat 06 Sep 2025 21:27:07 +0000
Manifest this update:     Sat 06 Sep 2025 21:27:06 +0000
Manifest next update:     Sat 13 Sep 2025 21:27:06 +0000
Files and hashes:         1: tljvayeSnHt_X7Jsue5qQSzoXdQ.crl (hash: lWdduT3BjsoEnUakQ996lbDkwx/AQ+R6TQydWabQGc8=)
                          2: 0886DE60D4D311ECBE99375AC4F9AE02.roa (hash: uazG73UaMnx6WsXKrRFqrUld6ba1Rwlrt5W45/vO4zY=)
                          3: EFC0CAB2F81111EEB4681B75C4F9AE02.roa (hash: HLeHhf7z+DQd8E9vrX8KAr3EM5GCzgmJjqLeg2zSKbM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.crl
                          rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 21:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2017 (0x7e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123072, serialNumber=B658EF6B27929C7B7F5FB26CB9EE6A412CE85DD4
        Validity
            Not Before: Sep  6 21:27:06 2025 GMT
            Not After : Sep 13 21:27:06 2025 GMT
        Subject: CN=68bca72b-efe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6b:52:8f:d3:53:7b:bd:ce:5e:e7:a4:cc:d3:
                    c8:75:5c:9f:c3:99:f0:1c:9d:a1:79:6b:aa:6f:a4:
                    63:d7:fc:6c:2a:b2:c9:37:ea:73:65:d3:1b:8c:eb:
                    ec:ce:3c:c4:66:40:0e:d2:62:15:09:85:0a:b3:93:
                    2c:42:8f:d5:e5:5c:61:02:c0:3f:a7:6e:53:50:05:
                    c6:4d:1e:90:f1:80:a7:62:39:54:d8:36:eb:c0:5b:
                    1b:96:c2:66:43:ec:f6:90:fa:b3:e2:d5:cd:ee:cc:
                    ed:5a:17:33:3b:e2:04:ee:65:b5:c6:93:29:81:75:
                    9d:41:a3:2b:88:6c:a0:1d:b4:9c:18:34:7d:7a:e5:
                    d0:63:6a:0e:1d:99:32:fe:6d:a5:a8:82:5e:5d:8d:
                    9e:40:cb:a5:40:b0:ba:5b:a1:63:c8:fe:a2:df:a8:
                    64:d9:d3:9f:d3:77:8d:c5:8f:b2:f0:4e:2c:c4:a8:
                    10:cb:a6:c5:4d:9d:b5:a4:7d:9b:64:ee:07:fa:bd:
                    15:6e:38:2b:8b:48:a1:78:5b:7b:63:be:75:23:71:
                    79:0b:66:9f:92:db:d2:db:d5:9f:eb:0b:56:fe:73:
                    19:84:da:cd:c1:af:15:aa:0b:66:eb:98:b5:91:2c:
                    41:d8:99:ea:a5:91:c3:34:3b:5b:ce:a1:73:f6:21:
                    18:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A6:FC:9A:4A:07:D9:D1:22:95:1B:4C:D4:95:2E:43:61:BB:6A:5E
            X509v3 Authority Key Identifier:
                keyid:B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:5d:2a:64:41:6b:be:1d:67:fe:93:18:53:c6:05:9c:4c:77:
         1a:08:fa:6f:57:98:2c:28:e5:76:3b:c6:9f:59:fd:4f:ad:d5:
         4d:24:35:07:c9:35:ca:04:98:71:d3:f3:99:3f:84:59:7f:d2:
         65:47:a6:be:61:79:88:e6:91:11:0e:d5:04:3a:ee:3a:b9:39:
         b2:b0:37:c7:8a:89:89:bc:9b:8c:30:4b:2c:51:90:40:2c:b6:
         b8:2a:d3:35:39:b7:92:8c:ea:05:e1:61:d0:53:e7:b2:45:89:
         c1:0b:99:86:a9:ce:43:41:9f:6a:dc:6e:c7:86:b1:83:4b:45:
         26:4c:ba:44:b6:c2:9a:36:b1:f0:12:58:4e:05:b9:04:25:42:
         49:56:d0:92:37:86:7d:f8:00:7a:41:54:38:31:7f:fd:e0:c3:
         93:5a:ae:93:93:80:0a:8e:f3:90:34:86:e9:78:ac:8c:7f:19:
         f3:7f:94:2d:97:32:3d:3a:36:47:93:0c:06:a2:e1:e5:76:73:
         69:4b:1b:d7:c5:18:cf:83:02:44:d5:8f:9e:30:ce:00:58:c4:
         6f:33:44:84:0f:94:c4:6d:b2:b0:de:5d:3e:16:e1:81:a9:fa:
         c4:1b:73:ff:34:c6:37:1b:bb:c3:3c:99:3e:e5:90:77:30:5b:
         68:af:12:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:44:19 2025 by rpki-client