Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft
File:                     TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft (raw, json)
Hash identifier:          ESBA4u5SsZKlzQ5EMhewJbSzmylfyt8Mz3F+Tvw6ooc=
Subject key identifier:   12:03:9C:AC:E5:89:B9:28:84:95:71:59:97:3F:DA:A7:6F:34:BF:38
Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23
Certificate issuer:       /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23
Certificate serial:       1900
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft
Manifest number:          18CB
Signing time:             Sun 24 Aug 2025 16:28:33 +0000
Manifest this update:     Sun 24 Aug 2025 16:28:33 +0000
Manifest next update:     Sun 31 Aug 2025 16:28:33 +0000
Files and hashes:         1: TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl (hash: 57+sATkeF87rypQBTnC6nmcjTbS8YNLXFKtycLmQzCM=)
                          2: 974F9BA0A87011EFB3944C13C4F9AE02.roa (hash: Y73x6wR5jcOY6BkNKlI0WoDh01ODb0bGEnsYPJ8kMjk=)
                          3: 9680FCD2A87011EFB3944C13C4F9AE02.roa (hash: zs+47Dsw1gUVHnfCNkqFYR5V7IW/citmpclZUpon2fQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl
                          rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Aug 2025 16:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6400 (0x1900)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D6BF, serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23
        Validity
            Not Before: Aug 24 16:28:33 2025 GMT
            Not After : Aug 31 16:28:33 2025 GMT
        Subject: CN=68ab3db1-95a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b9:c5:cb:4b:32:3b:95:97:e1:fb:02:82:5c:
                    41:0c:f4:40:c6:fc:2f:8f:83:fa:8e:25:6b:c5:6c:
                    6d:e1:4c:a1:20:06:7d:06:bc:7a:e4:f1:43:c3:98:
                    8d:5a:c1:a1:70:88:f5:cc:69:3e:7b:2c:3a:c2:ed:
                    b0:bb:81:ee:cd:20:bd:b6:d0:5b:60:6f:13:2b:55:
                    b6:07:4e:1e:62:25:0b:f3:a5:be:d6:6d:a4:b0:34:
                    a8:23:eb:66:17:0c:06:dd:26:7f:4d:da:4e:6c:e7:
                    52:19:c4:f6:2b:3b:aa:8b:ca:93:24:dc:59:83:a7:
                    01:1d:fd:2c:7d:51:2b:d6:7a:22:e2:94:b7:41:18:
                    0d:fe:90:c6:68:21:7c:ff:38:0b:8e:b1:81:44:c9:
                    ef:99:69:67:47:af:31:25:b1:18:e2:16:eb:cd:ec:
                    3b:de:63:78:e5:91:a4:b9:88:00:f8:1f:83:74:e5:
                    98:9b:88:0d:63:98:60:03:ea:29:f4:a7:80:1d:54:
                    09:d7:f7:a8:89:22:c6:11:88:62:e3:ab:3c:f4:e8:
                    a2:16:e6:68:5e:81:aa:cb:81:c1:89:b6:00:92:a8:
                    64:34:f7:ea:17:db:41:a9:92:f3:bc:6a:45:90:a8:
                    ad:98:ff:d9:68:54:7c:3a:a1:5d:4e:00:1b:4e:82:
                    11:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:03:9C:AC:E5:89:B9:28:84:95:71:59:97:3F:DA:A7:6F:34:BF:38
            X509v3 Authority Key Identifier:
                keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:3f:a7:fd:8a:54:c1:71:bf:6b:7a:d0:e7:a8:9b:52:82:fa:
         4e:20:a7:ef:13:a1:8f:32:de:8d:20:27:6a:cd:54:a4:a3:ca:
         2f:c2:12:48:7a:a3:6f:f1:cc:39:a7:c6:1e:47:7f:99:c9:79:
         a6:ea:75:5c:2b:f7:35:b5:e0:0a:c4:bf:27:3f:f7:52:47:04:
         ee:4d:ec:ad:3a:4a:bf:7a:79:37:fa:c3:aa:02:1e:ce:14:29:
         ea:48:70:29:50:96:9f:e6:7b:71:c7:5e:15:16:d0:68:ec:04:
         0c:71:df:93:1d:a1:ba:06:6a:89:52:6a:6d:96:03:f0:8a:22:
         c1:7d:1d:59:bc:e2:f5:53:56:fb:ab:3e:e3:7d:09:98:d8:f1:
         ad:fc:fe:08:3a:cf:f9:97:d1:df:79:b7:7a:37:bf:6b:29:ea:
         a0:1e:bc:e6:4b:dc:d6:0c:e8:1e:fc:c0:94:98:d7:a7:7e:81:
         1a:4e:0c:21:fc:90:9e:a5:7d:6e:11:70:f2:f8:da:b3:a6:5d:
         41:84:2e:16:79:7b:08:32:ea:ac:d1:0d:97:37:5f:4b:92:a0:
         df:c1:00:e1:d7:c3:0c:84:c7:a1:1a:e7:34:07:d9:88:1a:da:
         46:21:10:14:1c:e9:77:22:75:26:cb:c6:f8:36:88:f6:fc:07:
         e5:4c:eb:80
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQ2QkYxMTAvBgNVBAUTKDRFMDFGNEZDQTc2REJGOTI5NURFQzYxQzFCMzJBNEVF
NjhBREZEMjMwHhcNMjUwODI0MTYyODMzWhcNMjUwODMxMTYyODMzWjAYMRYwFAYD
VQQDEw02OGFiM2RiMS05NWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq7nFy0syO5WX4fsCglxBDPRAxvwvj4P6jiVrxWxt4UyhIAZ9Brx65PFDw5iN
WsGhcIj1zGk+eyw6wu2wu4HuzSC9ttBbYG8TK1W2B04eYiUL86W+1m2ksDSoI+tm
FwwG3SZ/TdpObOdSGcT2Kzuqi8qTJNxZg6cBHf0sfVEr1noi4pS3QRgN/pDGaCF8
/zgLjrGBRMnvmWlnR68xJbEY4hbrzew73mN45ZGkuYgA+B+DdOWYm4gNY5hgA+op
9KeAHVQJ1/eoiSLGEYhi46s89OiiFuZoXoGqy4HBibYAkqhkNPfqF9tBqZLzvGpF
kKitmP/ZaFR8OqFdTgAbToIRpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIDnKzl
ibkohJVxWZc/2qdvNL84MB8GA1UdIwQYMBaAFE4B9Pynbb+Sld7GHBsypO5orf0j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDZCRi9FMzYxQkEyMEE1
QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1S1Yzc1ljR3pLazdtaXRf
U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RnSDBfS2R0djVLVjNzWWNHektrN21pdF9TTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDZCRi9FMzYxQkEyMEE1QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1
S1Yzc1ljR3pLazdtaXRfU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAZP6f9ilTBcb9retDnqJtSgvpOIKfvE6GPMt6NICdqzVSko8ovwhJI
eqNv8cw5p8YeR3+ZyXmm6nVcK/c1teAKxL8nP/dSRwTuTeytOkq/enk3+sOqAh7O
FCnqSHApUJaf5ntxx14VFtBo7AQMcd+THaG6BmqJUmptlgPwiiLBfR1ZvOL1U1b7
qz7jfQmY2PGt/P4IOs/5l9Hfebd6N79rKeqgHrzmS9zWDOge/MCUmNenfoEaTgwh
/JCepX1uEXDy+Nqzpl1BhC4WeXsIMuqs0Q2XN19LkqDfwQDh18MMhMehGuc0B9mI
GtpGIRAUHOl3InUmy8b4Noj2/AflTOuA
-----END CERTIFICATE-----
Generated at Sun Aug 24 22:23:13 2025 by rpki-client