Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
File:                     TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft (raw, json)
Hash identifier:          DiJFigbse6DDNNoskgadxG9DKEEYuyMFO+b6xMYjgz0=
Subject key identifier:   C5:6B:7B:9A:44:0A:F7:78:1D:9F:0E:B8:D2:D5:7F:FE:A9:25:D7:11
Authority key identifier: 4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03
Certificate issuer:       /CN=A913344F/serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603
Certificate serial:       10F4
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
Manifest number:          10EA
Signing time:             Sat 18 Oct 2025 17:49:32 +0000
Manifest this update:     Sat 18 Oct 2025 17:49:31 +0000
Manifest next update:     Sat 25 Oct 2025 17:49:31 +0000
Files and hashes:         1: TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl (hash: 23632ecHWK1Wg7eyZWTUabgWR83a16KOgP7ylKd67wo=)
                          2: 10CDE53E2C4111E98AA5057DC4F9AE02.roa (hash: 5meBlAmMOmT720cyEIa4c/tv1J4emStSE4Ky/WBp3tQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl
                          rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 17:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4340 (0x10f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913344F, serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603
        Validity
            Not Before: Oct 18 17:49:31 2025 GMT
            Not After : Oct 25 17:49:31 2025 GMT
        Subject: CN=68f3d32c-ce14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:18:73:9f:5f:4d:16:9e:8e:28:47:04:fe:ee:
                    25:90:e2:af:7f:91:47:44:ec:b3:ba:df:3d:e5:7d:
                    c2:22:a4:b3:29:a9:9a:a4:7f:31:72:d5:e1:f9:3a:
                    9c:ee:4d:6c:96:e7:82:95:0b:90:f2:f0:db:8a:db:
                    9a:6f:ba:1f:49:7c:2e:66:9d:8a:40:89:97:1e:46:
                    cb:8c:c4:54:a0:72:70:09:92:c3:db:e2:1c:35:29:
                    de:d1:c1:55:ce:01:5a:68:03:5e:98:ad:2c:b1:bc:
                    7f:74:32:2e:50:00:74:b6:45:e3:f2:0f:f9:be:c0:
                    70:4e:87:8b:4c:aa:4a:c7:bb:c7:26:92:cf:e7:2f:
                    17:c8:a6:77:01:00:68:00:14:e0:40:52:d7:25:36:
                    d8:a5:6c:e7:95:6d:9a:67:4f:8d:b2:36:13:f0:e7:
                    ae:e2:1a:3c:ab:59:6b:3e:40:66:94:bc:63:a2:0f:
                    3b:5b:a7:1c:c3:29:4c:b6:8e:15:67:42:1b:92:3d:
                    5a:ea:41:cc:18:b6:c4:d8:92:5a:7e:6f:17:b6:76:
                    9d:58:e8:20:e2:c5:cf:2e:7a:00:d7:42:ca:d0:e8:
                    b2:65:fa:b3:f1:45:4f:a1:af:93:8c:3f:00:c3:a9:
                    60:36:8e:9d:fa:e7:5f:f5:21:38:28:27:18:44:88:
                    38:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6B:7B:9A:44:0A:F7:78:1D:9F:0E:B8:D2:D5:7F:FE:A9:25:D7:11
            X509v3 Authority Key Identifier:
                keyid:4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:9d:1b:7d:a1:60:c7:f0:ad:4b:fe:4a:46:8c:4d:72:e9:d3:
         1d:4b:40:b1:ec:21:b0:64:b0:7a:96:e9:5b:0b:51:7c:5c:ba:
         56:f3:76:3f:4a:6d:80:e0:1f:96:79:13:90:ef:bb:18:8c:91:
         ed:19:9f:a0:e6:af:59:e7:14:06:2e:44:07:fe:6c:88:d1:fc:
         80:0c:cd:36:30:89:0a:25:a0:bf:a0:72:07:2b:96:fc:74:0c:
         99:cb:c3:8f:22:fd:5c:2e:62:19:92:b7:0a:48:47:41:86:bd:
         2b:e3:72:d2:bf:74:1e:ab:2d:63:da:13:0a:00:2e:22:29:5f:
         8d:70:20:e7:9b:ee:11:73:ce:ec:bf:e9:fa:e5:28:06:55:70:
         cc:c0:ff:92:ef:50:19:0d:7c:77:61:49:73:01:64:db:b2:60:
         b0:30:ee:2b:e9:fb:c4:7b:1d:27:47:d6:cd:9f:46:74:52:30:
         76:97:1c:b4:6e:a0:48:e8:d7:b1:52:30:a7:19:e9:d3:96:70:
         bc:d7:aa:34:8e:61:3c:21:65:39:28:8b:34:9b:4e:4e:11:77:
         17:66:5e:73:31:38:a4:3d:54:bf:5c:f0:93:73:15:83:ac:2b:
         00:5d:83:24:19:97:11:6f:76:59:ed:8b:4b:c9:a9:a4:f8:85:
         0a:64:76:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:25:28 2025 by rpki-client