Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft
File:                     TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft (raw, json)
Hash identifier:          PlsBJxi3Lrbh2YmVEhEKKjr4/4Fs8qvu40LkLonDJIQ=
Subject key identifier:   19:81:B8:87:44:8C:F1:C4:E2:A1:6F:1B:A3:EE:4F:D2:59:69:83:B4
Authority key identifier: 4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9
Certificate issuer:       /CN=A918664E/serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9
Certificate serial:       022B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft
Manifest number:          020D
Signing time:             Wed 05 Nov 2025 02:45:34 +0000
Manifest this update:     Wed 05 Nov 2025 02:45:34 +0000
Manifest next update:     Wed 12 Nov 2025 02:45:34 +0000
Files and hashes:         1: TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl (hash: vaL8XllW5BSdGO/XVsO+ypaFNOdXAj791chdQbb/WtY=)
                          2: B029CB28E36C11EF876EED6BC4F9AE02.roa (hash: V3tolroHRaGOLdSfU09EMMCLQ91f3/wTHDGeGETd7+4=)
                          3: AF4851DEE36C11EF876EED6BC4F9AE02.roa (hash: ucY0XY6Bcm//g56ep6E5DclBK994njK3cXgVUMlbK2Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl
                          rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 02:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918664E, serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9
        Validity
            Not Before: Nov  5 02:45:34 2025 GMT
            Not After : Nov 12 02:45:34 2025 GMT
        Subject: CN=690aba4e-f923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:88:39:6e:05:bd:33:78:ec:dd:95:67:7d:
                    1e:8e:f0:51:0f:aa:78:d9:7f:11:2a:f1:c7:fc:62:
                    c5:ac:5f:16:c3:ca:ab:71:8d:f5:de:80:eb:c4:cc:
                    9e:fd:22:53:13:82:dc:d7:da:80:22:d5:e8:68:0b:
                    3b:55:ed:eb:a5:6d:20:8b:08:c0:66:f6:5f:f7:62:
                    2f:78:d0:a1:75:9b:02:58:65:ad:a1:eb:e8:21:32:
                    fb:b7:d3:13:8f:d7:7c:71:f3:1f:df:00:18:f7:4b:
                    de:af:aa:75:cf:99:8c:1b:06:41:54:23:4b:8b:27:
                    8b:c1:49:0d:7d:7a:f5:14:6e:b5:41:0d:a3:02:01:
                    72:16:ff:0c:5a:7a:41:68:de:c2:1b:67:03:b9:6a:
                    a1:eb:e3:0d:53:c9:ce:48:ae:bf:e6:9d:6c:e1:5b:
                    44:f5:6f:9d:02:c0:08:6e:4a:49:07:c7:21:18:15:
                    0d:66:7f:f2:78:9d:21:2d:c9:30:dd:d5:0e:22:a7:
                    6e:da:bb:f2:08:35:d9:30:9a:8b:2b:f5:d6:4c:e8:
                    1c:b6:14:fd:fc:68:6f:7a:a3:89:01:c7:68:8b:03:
                    d0:73:21:a1:31:4d:22:88:0c:3f:3a:b5:18:fa:1c:
                    86:3b:cd:d1:03:e1:b1:7b:75:0c:1f:e8:4a:70:d7:
                    82:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:81:B8:87:44:8C:F1:C4:E2:A1:6F:1B:A3:EE:4F:D2:59:69:83:B4
            X509v3 Authority Key Identifier:
                keyid:4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:e8:f5:89:a0:d4:04:29:e9:f4:27:cc:15:ef:ab:b2:d3:5b:
         59:b4:e3:59:af:82:47:b0:97:35:ec:97:d2:43:70:53:09:08:
         50:a1:0c:4d:37:a5:8a:dd:fe:0c:d5:96:52:95:78:50:04:bd:
         37:7b:4b:22:6f:1f:8b:7e:60:71:65:6c:4c:a1:2f:39:02:6b:
         32:df:50:03:f4:f1:6e:26:5e:45:06:57:6f:cd:dd:e2:f8:d3:
         ce:7a:22:82:be:91:57:56:0a:fe:07:46:a5:61:cb:39:8b:76:
         03:8f:17:ac:11:2d:c9:2a:de:cb:29:66:37:f0:9b:5f:85:64:
         ea:7a:c7:2f:29:d9:a3:3a:0f:05:1d:aa:b2:07:45:1f:ad:a9:
         7e:41:c8:5d:bc:be:70:a1:ac:2f:9a:b3:2f:ea:ad:b6:0c:92:
         27:7a:12:20:43:55:0c:b3:f8:67:45:79:09:a0:d3:82:45:5f:
         94:7a:08:02:c1:00:98:87:ff:f9:df:5f:c1:80:58:26:2d:3a:
         ab:3b:4b:5e:6c:16:86:27:31:e1:c9:9d:d7:0c:1b:7a:f9:20:
         27:f3:db:b0:23:67:2d:ca:fb:a2:4e:3a:82:bd:3e:9c:c0:48:
         8a:00:ac:31:60:f2:45:83:82:dc:69:99:5d:fe:e7:1f:54:e0:
         36:8d:e9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:39:28 2025 by rpki-client