Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft
File:                     tPJi-ZhX4SDMnLxL_BftVKur4rs.mft (raw, json)
Hash identifier:          sHWmlA5Uzto6fINBU6MsoE07RcKLC7fbuCkP0KS0cgo=
Subject key identifier:   6E:AF:0F:07:EF:F0:29:A5:9A:72:59:E5:EE:AD:20:E8:3C:2A:CD:09
Authority key identifier: B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB
Certificate issuer:       /CN=A91D2ADD/serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB
Certificate serial:       0354
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft
Manifest number:          034A
Signing time:             Tue 09 Sep 2025 01:07:30 +0000
Manifest this update:     Tue 09 Sep 2025 01:07:30 +0000
Manifest next update:     Tue 16 Sep 2025 01:07:30 +0000
Files and hashes:         1: tPJi-ZhX4SDMnLxL_BftVKur4rs.crl (hash: hcaQn8CqRe6Uq0tgXycCzzaSdL0wQ0F8UYFoHYp0BHE=)
                          2: 950791DAD0D811EC8DF4377FC4F9AE02.roa (hash: zdS6UJyOMrd7sf5VOERZBIPIuQqnE9ZtKbgVQwDnTWY=)
                          3: 3DBB9F0C97EC11EE95979D63C4F9AE02.roa (hash: IR9NDV3s6nVBqEN4pn9ElTet8vYTjGUIWmOXsyvq9Aw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl
                          rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 01:07:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852 (0x354)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2ADD, serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB
        Validity
            Not Before: Sep  9 01:07:30 2025 GMT
            Not After : Sep 16 01:07:30 2025 GMT
        Subject: CN=68bf7dd2-aca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ce:34:a3:f9:59:75:dc:ed:d6:2e:e8:ba:77:
                    64:9c:3f:be:96:77:10:84:52:02:e2:45:68:69:65:
                    2c:d1:5e:34:65:33:94:ba:56:5f:dd:2f:af:9b:7e:
                    69:00:b4:e0:61:c9:70:08:af:93:20:b1:a3:be:b3:
                    38:d3:92:72:b9:07:a9:24:53:20:d2:f2:53:f8:23:
                    8b:01:65:c1:f2:4f:69:5d:cc:bb:56:a5:8f:19:4f:
                    8b:8d:a9:c2:a6:d0:e3:a0:42:44:2b:fa:93:63:c3:
                    30:19:c6:8b:15:89:70:a1:4b:e5:d6:eb:40:30:09:
                    9a:de:fc:cb:10:46:3b:f2:96:df:66:42:21:17:ca:
                    37:95:c8:0d:ac:19:a0:47:06:3e:91:17:cc:88:53:
                    3b:f3:66:1c:c5:1b:a3:01:1a:a5:26:21:0f:45:7c:
                    f9:52:54:a2:46:17:f1:69:a9:47:2a:76:e4:ac:b5:
                    b5:1a:1b:4f:e4:92:f4:bc:f7:b0:0f:26:76:88:d8:
                    a8:a1:57:da:b8:89:d4:e7:e6:7e:9f:bb:7f:f7:cf:
                    0d:41:50:fe:76:07:c9:27:e9:76:82:09:5a:8b:ae:
                    66:c0:d5:16:32:ca:e2:4f:4e:9b:e8:7f:d1:2d:9b:
                    9b:3e:1a:7d:12:06:f2:91:be:c6:7f:da:5e:1d:c3:
                    86:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AF:0F:07:EF:F0:29:A5:9A:72:59:E5:EE:AD:20:E8:3C:2A:CD:09
            X509v3 Authority Key Identifier:
                keyid:B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:43:ac:06:a7:86:5c:e2:a0:6c:bf:78:a3:14:94:87:fa:3f:
         cf:65:7b:26:6e:be:e6:03:2d:6d:d3:02:18:a6:ac:b2:94:a2:
         7c:11:3b:d5:44:49:e7:4f:9f:4d:67:87:30:11:af:8e:7c:b0:
         a2:52:47:1a:fd:ff:d0:6a:74:42:0f:17:ec:e7:99:2a:f1:e9:
         a8:b0:27:df:01:8a:80:fd:86:6f:1b:51:49:fb:6b:b1:37:02:
         ce:7c:92:2c:59:d7:67:34:ed:00:9e:03:be:7f:fd:11:87:08:
         ce:c9:4c:61:79:06:9a:bd:73:d9:07:4b:a0:7d:73:9b:90:1c:
         db:f7:5e:98:27:96:a0:64:2b:7e:91:9f:f0:a4:62:04:db:bb:
         93:91:fa:3f:33:e3:ca:5b:5d:2c:3e:e8:5c:9f:e9:14:d3:8a:
         76:ae:de:d8:fa:c3:ef:8a:ec:b6:e4:a5:20:b0:6f:8e:8c:9c:
         d5:74:3f:a0:6b:19:cb:37:1f:36:49:67:72:ae:4f:f2:67:39:
         7d:ab:d7:73:80:fc:db:de:36:67:71:1f:6e:7f:a5:95:5c:9d:
         86:36:d2:32:ef:5a:47:d8:62:d2:83:b9:8c:41:3c:44:da:b0:
         c0:c6:2a:40:b0:76:8f:b1:86:3f:de:8a:b3:ad:01:e3:20:e4:
         04:24:3b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 15:22:32 2025 by rpki-client