Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
File:                     tv1vS0-3wyR8WZKZsui6-1qLunI.mft (raw, json)
Hash identifier:          9/80D4oEoQ6H5HEgqK9fOg9mLILWldydGjCZ6LEyNSw=
Subject key identifier:   9C:25:79:51:E4:EC:CF:AC:28:10:27:E9:43:A1:BE:9B:0E:4C:3C:F8
Authority key identifier: B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
Certificate issuer:       /CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Certificate serial:       06AB
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
Manifest number:          0699
Signing time:             Wed 20 Aug 2025 22:20:40 +0000
Manifest this update:     Wed 20 Aug 2025 22:20:40 +0000
Manifest next update:     Wed 27 Aug 2025 22:20:40 +0000
Files and hashes:         1: tv1vS0-3wyR8WZKZsui6-1qLunI.crl (hash: uB4qYB4scgJsFZ5HsI4UC5h8WqGQBDCVx/hv5a7SxXQ=)
                          2: EC427D64B16311ECA18ED12FC4F9AE02.roa (hash: Ga4Z3DpE9aUbX7W5p2tUSOPgf7WkxMTRgFBKaq09Cxs=)
                          3: 35341F3E4EAE11EF811DC17BC4F9AE02.roa (hash: 1g7V3yJi0/XsTFsCpcEg/UcPiKQqpqW1UWTVYTWMIZE=)
                          4: A40873CE7FB811EB82018D29C4F9AE02.roa (hash: x1uMmRK43yay8ZPmLxVu8RIg3TAXDE9HwOF5tkl8BVc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
                          rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 22:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1707 (0x6ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE3C4, serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
        Validity
            Not Before: Aug 20 22:20:40 2025 GMT
            Not After : Aug 27 22:20:40 2025 GMT
        Subject: CN=68a64a38-bc10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8e:f0:72:4f:21:a1:6c:ca:0b:19:3e:78:4b:
                    92:54:c8:eb:09:e8:e8:64:3d:42:f4:a1:8a:e8:ac:
                    7e:62:29:5b:49:92:4b:84:52:e3:06:02:05:3b:b4:
                    7f:83:fb:3d:c6:4b:4a:7c:79:46:17:83:37:c3:7d:
                    d8:3d:42:6a:cc:e0:28:31:c8:1c:37:2d:bf:bb:02:
                    44:e1:11:19:4c:ff:3b:31:4f:fd:39:48:a3:ca:56:
                    95:ae:e5:5a:e3:a1:36:e1:c4:a9:4e:d5:59:69:02:
                    ea:a4:0e:fe:d8:57:46:01:86:48:ed:af:4c:db:3e:
                    d3:bd:1b:c5:b1:23:0d:4f:a3:d9:86:51:64:00:bd:
                    73:29:b4:bf:4f:2f:b9:69:d2:90:8e:a9:86:2e:24:
                    05:43:63:de:87:f1:35:d3:91:de:4a:65:1d:1b:ae:
                    ba:06:df:cd:9a:ba:00:45:20:33:3b:31:50:f6:87:
                    d1:84:17:94:21:09:cb:28:94:77:59:e9:3f:be:e1:
                    77:51:dd:0c:f2:4f:69:d0:e2:9c:8c:12:c4:06:4a:
                    b3:a2:ac:14:09:0a:cc:81:28:bb:52:76:15:5f:0a:
                    2e:60:2b:17:1a:50:3e:b4:74:78:6b:e6:a6:f7:5e:
                    7a:0c:03:79:7b:b1:45:4e:8b:9d:5b:10:5e:cb:4c:
                    60:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:25:79:51:E4:EC:CF:AC:28:10:27:E9:43:A1:BE:9B:0E:4C:3C:F8
            X509v3 Authority Key Identifier:
                keyid:B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:93:e3:fe:a7:fd:01:b9:a4:a1:26:1a:db:a7:b2:22:fe:84:
         ca:4a:22:1a:1a:e8:a0:c2:d0:6e:f8:a6:4f:64:47:84:2d:cd:
         3c:12:2c:b9:2f:88:b7:91:66:6e:b1:ea:2e:2c:bb:a8:cd:4c:
         2f:cc:57:e8:47:0a:ac:ca:c0:6f:74:a9:64:f2:6a:85:d9:ed:
         fa:4c:49:da:6a:bb:be:a9:ae:d8:4d:44:5e:21:89:ff:a3:03:
         5e:02:d8:9a:89:89:05:84:56:50:7e:04:98:87:7c:03:8c:2c:
         75:15:33:99:0c:9f:f2:2e:d5:ab:c1:82:ab:c2:20:c2:ff:c3:
         08:2e:18:b6:4a:3c:64:24:46:29:8e:28:a1:95:b6:11:bf:1f:
         55:2a:42:bc:89:8a:b7:1e:b3:9b:6f:7a:95:67:b4:3f:69:9e:
         12:d9:16:f6:3a:f5:83:52:ce:0b:af:b1:a8:b4:2d:bd:23:b6:
         d5:4e:58:8f:3c:98:04:a3:d4:05:1b:aa:62:e8:4e:d9:14:c1:
         9e:8f:57:be:6e:56:7b:2b:71:e6:b2:68:d0:9b:b2:80:cb:c7:
         16:c7:7a:71:35:cc:c3:bb:c4:4a:9e:38:a4:18:61:2a:a4:6b:
         8b:bc:81:16:be:b2:78:15:62:22:fe:62:1d:9d:58:37:bc:0e:
         bf:75:8e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 15:55:37 2025 by rpki-client