Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
File:                     TSeJUeK9itKFuUCo6p5X43lxHms.mft (raw, json)
Hash identifier:          NZxHoR8ULOFSzOFN/6rehcH30HWmAGNg1TAcX6O5AGo=
Subject key identifier:   77:22:4B:D3:AF:2E:E9:9A:61:6B:9F:F7:AC:91:7F:05:5A:76:72:61
Authority key identifier: 4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B
Certificate issuer:       /CN=A91342C5/serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
Certificate serial:       03BF
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
Manifest number:          03BA
Signing time:             Fri 05 Sep 2025 01:02:33 +0000
Manifest this update:     Fri 05 Sep 2025 01:02:33 +0000
Manifest next update:     Fri 12 Sep 2025 01:02:33 +0000
Files and hashes:         1: TSeJUeK9itKFuUCo6p5X43lxHms.crl (hash: FcL9KUlCJGIDDbNUq8fczY6Yx8BKvDL/rkv/tEH6Sfc=)
                          2: E8E194B8A5CC11EC85A86A1FC4F9AE02.roa (hash: ypQGr8fcGrxnVWfQ2RrFsZZ4R7tmsDgEITmj6bx0ScA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl
                          rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 01:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 959 (0x3bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91342C5, serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
        Validity
            Not Before: Sep  5 01:02:33 2025 GMT
            Not After : Sep 12 01:02:33 2025 GMT
        Subject: CN=68ba36a9-f014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a2:2e:1c:3c:4d:93:1f:3f:06:28:fa:fb:aa:
                    9c:7e:2d:f9:2c:5b:ec:7e:78:38:5d:de:4a:07:ac:
                    ec:32:ea:0e:75:3b:73:a5:e8:b6:1a:67:43:c8:36:
                    19:63:bd:05:3f:31:2e:71:58:fc:58:91:1d:14:30:
                    f7:b9:84:ac:f5:25:81:e4:9c:ba:54:58:47:8b:61:
                    cd:68:d9:c5:89:cd:30:a3:e2:3a:bc:5f:77:80:94:
                    37:f1:b8:e2:6c:87:2f:06:56:23:19:53:dd:dd:76:
                    9a:a1:35:33:25:bc:1f:a8:52:03:71:52:89:98:03:
                    c2:af:59:2a:44:4e:a1:67:7b:58:ac:93:86:c5:6c:
                    e9:95:95:f0:db:c9:ad:31:cf:eb:a8:7e:27:79:68:
                    a5:82:91:12:0a:c4:bb:8b:07:0d:85:9f:c1:6d:46:
                    bf:ef:e6:29:ea:45:c9:40:6f:e2:d1:1f:44:87:f8:
                    bc:f8:28:b5:d0:b3:2d:ab:5b:9e:cf:b8:06:ea:b7:
                    b8:63:4d:84:25:a4:5d:c5:71:63:92:f8:56:4d:e8:
                    11:7b:b8:84:ec:8b:06:1d:0c:ee:85:63:c9:15:70:
                    03:44:ba:d8:07:98:5f:8b:fa:84:5a:b0:50:c1:46:
                    5c:94:96:31:8f:36:81:15:50:24:30:fc:ca:88:c7:
                    83:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:22:4B:D3:AF:2E:E9:9A:61:6B:9F:F7:AC:91:7F:05:5A:76:72:61
            X509v3 Authority Key Identifier:
                keyid:4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:f7:16:99:0e:8e:9d:d2:46:9c:5b:b0:e9:fc:2e:2e:de:09:
         a2:6c:a0:88:44:3d:37:4d:c9:24:4d:79:b7:eb:46:10:a3:3e:
         a4:38:e2:c0:89:d2:dd:b1:00:f1:43:5a:00:93:4f:79:4f:ec:
         d9:14:69:93:6b:ae:e0:06:1a:87:a7:82:7b:f9:0f:c7:3d:17:
         76:24:47:9b:a7:66:a9:b3:e3:e9:1c:26:5c:5e:3f:4b:92:ca:
         7d:3b:d0:2b:dd:cd:f3:49:64:29:e7:9a:a5:eb:a9:28:64:6f:
         37:34:72:06:ef:39:f3:d9:a7:e9:8e:3a:e8:0e:1d:12:d3:c6:
         90:48:08:da:89:fa:e5:10:d4:67:81:6c:29:21:f2:4f:cb:93:
         fb:90:c9:a0:d1:d7:80:00:a8:e8:9b:fc:2d:43:ab:58:50:d8:
         89:c4:cf:d9:73:3c:b3:b3:e2:5a:5e:39:26:1b:e4:9c:e3:78:
         c0:03:1e:f2:38:cf:cb:8b:42:4a:47:f8:49:d6:2a:27:78:30:
         0b:69:ac:25:5a:b0:ea:32:71:32:04:52:4c:b5:44:1a:15:7e:
         60:48:97:db:c9:3f:85:a4:b9:d3:3a:26:39:ec:e7:ce:a2:fd:
         08:05:8f:37:b0:82:47:49:bd:a3:95:fa:24:15:21:8f:39:27:
         09:60:6e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 06:59:55 2025 by rpki-client