Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
File:                     tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft (raw, json)
Hash identifier:          oUSVsP5jjkBAX5s2vHnfGaTVppkxhhKiczoXn3l6FbE=
Subject key identifier:   B8:FE:1A:C6:8F:FC:03:A6:DF:2F:1B:3A:C5:FE:69:F9:BC:A9:00:DF
Authority key identifier: B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
Certificate issuer:       /CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Certificate serial:       0131
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
Manifest number:          0124
Signing time:             Tue 09 Sep 2025 04:57:45 +0000
Manifest this update:     Tue 09 Sep 2025 04:57:45 +0000
Manifest next update:     Tue 16 Sep 2025 04:57:45 +0000
Files and hashes:         1: tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl (hash: /98+gqg2Ig6tq5dg6oeTQXqdiWMO7+IN9O2cFQeqJ5A=)
                          2: 4CF8923058BC11F09869AC87C4F9AE02.roa (hash: zY90zo/xojHjF1wecs/HwesdG3vMHXP6Ku/hhTPUGd8=)
                          3: 6D85335A58BC11F0983EE987C4F9AE02.roa (hash: hN0xUvCUkBl0EboCBMVqvJWCpE5CmPVA1aB8FayA0Ik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
                          rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 04:57:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4849, serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
        Validity
            Not Before: Sep  9 04:57:45 2025 GMT
            Not After : Sep 16 04:57:45 2025 GMT
        Subject: CN=68bfb3c9-7199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a8:92:c2:28:0d:b7:66:66:4d:a8:73:60:7f:
                    28:fa:a2:7c:8c:c3:a4:47:56:16:13:c4:dd:03:49:
                    94:08:c3:07:af:47:5e:a3:53:d3:d4:e4:39:e1:6c:
                    7f:9a:ac:a3:93:e5:d0:9f:cb:26:01:55:92:40:c0:
                    09:d1:80:81:23:92:4e:73:e5:2f:40:26:e5:b7:09:
                    6e:2e:3f:7b:f4:77:d4:2f:63:32:4a:7b:4c:4c:9d:
                    a7:38:b3:ae:b0:e6:51:37:ee:58:ca:a7:a3:d8:77:
                    3c:85:3c:59:7a:2c:09:91:6e:eb:92:83:3d:9f:0a:
                    99:a6:e7:79:7b:c7:bd:87:ec:4a:a6:e6:15:5e:0b:
                    87:92:6f:84:3b:d0:a3:d5:90:8c:40:58:8c:89:77:
                    83:22:ab:61:68:71:09:89:16:e7:6d:93:cf:89:a0:
                    55:f0:0a:ac:a3:0e:f0:fe:d4:8d:33:66:ee:e5:0b:
                    66:7b:09:2f:5c:19:6f:49:cf:26:e2:95:6d:aa:25:
                    a3:e7:97:f8:a6:d7:05:c3:5c:54:88:16:4c:24:01:
                    40:25:39:34:2a:da:8f:28:05:ee:1a:5d:d6:47:23:
                    f1:1d:6e:a6:55:38:3c:99:04:ab:00:ae:2e:44:b4:
                    93:b9:55:d4:02:7a:23:ec:26:c0:d7:6c:9e:23:db:
                    eb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FE:1A:C6:8F:FC:03:A6:DF:2F:1B:3A:C5:FE:69:F9:BC:A9:00:DF
            X509v3 Authority Key Identifier:
                keyid:B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:27:24:14:e7:2e:06:0d:88:0d:5a:4d:06:cd:12:81:7d:c8:
         87:68:13:82:45:2e:dd:9e:e5:1a:8c:5a:91:eb:f6:f0:55:dc:
         cf:58:4d:4c:6d:09:39:26:39:62:b7:07:4c:57:c9:cc:ae:15:
         02:79:ad:4a:ea:b9:f8:a4:9b:bc:5a:d2:eb:57:70:ea:a5:43:
         8d:ef:56:a8:90:e3:37:f9:94:e8:6b:a9:51:90:bd:d5:2e:9c:
         18:75:96:10:40:9f:17:95:98:b8:39:0c:df:cf:48:ba:ec:4f:
         12:fd:a6:50:cb:2b:f5:e2:9e:da:a7:ff:db:fc:1c:97:e2:c2:
         d0:dd:30:30:65:aa:67:32:eb:3d:3a:4c:9c:2d:27:52:9e:90:
         60:4d:26:66:22:f9:82:ee:74:b4:5e:71:d2:04:ce:30:6a:4b:
         ff:3c:bf:cc:2a:72:14:f2:72:d1:82:de:86:2b:35:63:bf:ed:
         89:c6:a9:d5:9b:1d:18:2f:c0:a4:83:c2:2d:97:1a:df:68:1f:
         bf:82:db:ee:8d:01:90:ea:4e:4b:0a:50:b2:c8:0f:cd:0f:29:
         a0:4f:e8:ec:6a:fa:13:47:92:a9:34:9d:a9:55:1a:26:56:90:
         f9:56:cb:e7:f6:26:33:41:35:88:18:4a:1b:16:aa:f3:65:ca:
         05:ed:b2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:01:22 2025 by rpki-client