Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
File:                     TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft (raw, json)
Hash identifier:          XrRBZEQde4POK6LUnQB0WfSezIaGR8lYVRe6Wlm+gSA=
Subject key identifier:   D1:34:14:62:8F:F5:BA:66:AD:85:4A:18:23:0D:81:55:44:10:DC:69
Authority key identifier: 4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C
Certificate issuer:       /CN=A91EF590/serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C
Certificate serial:       0768
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
Manifest number:          075A
Signing time:             Thu 18 Sep 2025 21:56:06 +0000
Manifest this update:     Thu 18 Sep 2025 21:56:05 +0000
Manifest next update:     Thu 25 Sep 2025 21:56:05 +0000
Files and hashes:         1: TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl (hash: EZYfmyzCa6drvG/1oOW7KIO/LNuQxpYOmKbuiiac1R8=)
                          2: 3B85CDCC5AC611F0A650577AC4F9AE02.roa (hash: xmCa0S6gH7UT6IXBmoA13nKDzBCa881kyZEoIomnGCw=)
                          3: 3C4D39C05AC611F0A650577AC4F9AE02.roa (hash: UDmf7YDCi7nUXuyz+EQ/ianBiDIEB+Xhn6jTOtoUZ/Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl
                          rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 21:56:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1896 (0x768)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF590, serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C
        Validity
            Not Before: Sep 18 21:56:05 2025 GMT
            Not After : Sep 25 21:56:05 2025 GMT
        Subject: CN=68cc7ff6-3d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a2:c0:4a:61:d6:02:bc:0e:4c:bd:75:c7:79:
                    2d:0c:2b:24:41:63:c1:99:b8:17:4c:d6:97:7c:b0:
                    5a:a0:9f:42:30:e2:60:2a:87:f4:b3:79:f8:81:32:
                    77:f7:f7:1f:0a:36:94:8a:d7:8e:da:a4:0b:d6:c5:
                    1e:e9:08:5f:81:20:da:c1:41:2d:2e:78:9e:22:43:
                    7e:75:6f:e7:65:3d:32:1b:4c:e6:11:ba:24:e1:54:
                    f5:c1:94:a2:ce:b4:64:b9:48:98:e5:a9:01:48:4c:
                    30:2d:ea:26:11:af:b4:fc:6b:d5:35:01:b3:45:18:
                    96:7e:90:1f:75:07:e3:f5:b4:af:63:e2:9c:8f:f9:
                    94:a4:4f:0f:f5:0b:87:e7:87:9b:19:53:13:79:fe:
                    fc:d9:5e:ce:3e:34:e9:c5:2b:b3:f5:ec:c5:09:2a:
                    21:86:56:74:8e:60:c7:c7:0b:b0:a4:71:06:08:87:
                    ef:ac:91:ae:2d:6d:3d:46:11:02:2b:a9:62:85:a7:
                    ee:25:98:03:09:4c:f6:50:3a:0b:7e:f1:ea:8f:06:
                    d3:e5:b5:b9:97:01:f0:fc:44:25:e1:fa:04:c5:2d:
                    6c:8a:87:d0:59:0a:b0:fc:b9:f1:60:c1:a2:b2:5e:
                    d1:57:29:8a:14:c9:7c:65:e2:2f:c7:24:5d:97:85:
                    80:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:34:14:62:8F:F5:BA:66:AD:85:4A:18:23:0D:81:55:44:10:DC:69
            X509v3 Authority Key Identifier:
                keyid:4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:b6:ed:57:f8:e0:f8:31:18:9a:b2:92:e0:77:68:50:8f:48:
         30:1f:e2:47:c0:5b:95:ef:0a:1d:7c:28:ad:ff:83:26:59:fc:
         d1:b5:49:d3:7c:88:40:5b:a9:ef:d3:03:a6:e8:9c:72:c8:64:
         d1:a9:27:50:b7:cf:51:32:39:8c:bb:01:eb:9f:22:79:99:db:
         32:6c:23:90:16:c0:38:ee:bc:cf:f7:df:cb:4b:3b:83:b0:55:
         40:58:ec:ac:25:9d:40:a2:c9:75:13:dc:a5:ca:86:a7:d3:9b:
         7c:b3:0f:7d:50:27:cf:28:cb:fd:cd:c1:0e:e5:8c:73:76:08:
         91:aa:79:6f:86:52:6c:f1:42:6c:5f:4a:63:ac:f5:c6:01:f1:
         ab:58:60:5c:68:d8:ff:7f:a7:27:55:4b:06:5e:42:c5:21:34:
         1d:ac:7d:73:62:f2:d1:c5:90:e1:84:2d:40:12:db:22:85:55:
         44:17:35:07:8c:b6:ad:88:a5:37:ab:a9:5b:aa:af:a4:82:fa:
         0d:d1:f5:05:a8:81:fe:f9:c1:cb:1e:a7:b0:0b:f4:05:48:8d:
         a7:05:97:87:9f:d8:41:27:2e:ed:bf:de:2d:45:4a:a7:41:96:
         27:b0:2d:d9:6a:24:d7:82:b3:04:87:2c:04:d8:be:9d:4e:61:
         72:8b:0c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 07:32:41 2025 by rpki-client