Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
File:                     TDZeNqZHnY6wtQ2Q820dexnvhNM.mft (raw, json)
Hash identifier:          95pmNMj5dBnsbzQ1gdLwKTnXn//I8ARWog5C+2rgeE0=
Subject key identifier:   14:64:58:7B:28:FA:8E:81:14:D3:DA:C2:78:ED:FC:9C:60:FF:11:DD
Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
Certificate issuer:       /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
Manifest number:          0134
Signing time:             Sun 19 Oct 2025 07:50:10 +0000
Manifest this update:     Sun 19 Oct 2025 07:50:10 +0000
Manifest next update:     Sun 26 Oct 2025 07:50:10 +0000
Files and hashes:         1: TDZeNqZHnY6wtQ2Q820dexnvhNM.crl (hash: abQTmJpj97ceWeev3nGgzJqgNnJ0I9Jp1tY0cXgSxlY=)
                          2: 59E4E2A415BA11F084EFBB7CC4F9AE02.roa (hash: HZDyu1joYX+dxKnFptiA5xky7OHNJkIOKQTmsVfZf5A=)
                          3: 26B79D64E9FE11EF8751AE17C4F9AE02.roa (hash: VTVe81N4pW9ER21bMKt6sFjbfFvf/H+A7jZRhppZ5sg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl
                          rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135B49, serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
        Validity
            Not Before: Oct 19 07:50:10 2025 GMT
            Not After : Oct 26 07:50:10 2025 GMT
        Subject: CN=68f49832-1c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:70:7c:53:56:94:b4:b3:4a:0a:36:26:2f:46:
                    61:79:65:c4:c7:bc:18:6b:42:82:df:74:81:75:10:
                    b2:30:f9:60:be:0b:b2:b7:c4:06:ef:13:d7:29:39:
                    47:b4:4a:50:c5:9e:46:a9:14:1f:69:98:69:81:0c:
                    40:75:92:a0:3e:79:01:27:a7:94:64:47:99:54:ac:
                    ed:17:54:70:7b:26:38:05:60:4e:f4:f0:24:af:e0:
                    97:4f:1a:f9:9c:17:82:a4:37:33:ee:5f:5c:52:80:
                    19:1a:63:fe:26:7d:9d:d1:56:c6:9b:95:c1:bb:62:
                    18:a0:c7:e9:23:15:b4:88:e7:68:56:22:ba:b8:fb:
                    07:46:60:f7:5b:b7:6e:15:bd:a8:4c:f1:26:c3:a4:
                    65:a1:c2:96:3c:3d:b0:cc:7e:13:0b:cf:e8:35:ae:
                    55:fa:bc:da:3e:a7:66:97:a5:f7:67:f4:14:23:c1:
                    6f:45:4c:b2:8f:ef:bb:5d:d3:e5:2b:c1:42:28:ef:
                    dd:db:c0:4e:9a:72:12:16:60:85:18:58:28:33:90:
                    f8:2a:fc:21:dc:76:52:2c:1e:ed:9c:f3:49:1c:b8:
                    ef:4e:8e:cf:38:3d:41:9b:ea:4f:17:7a:6d:c4:f1:
                    4f:c3:8d:cc:e7:64:d7:2f:de:48:7e:53:15:fa:5a:
                    b0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:64:58:7B:28:FA:8E:81:14:D3:DA:C2:78:ED:FC:9C:60:FF:11:DD
            X509v3 Authority Key Identifier:
                keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:7e:93:df:50:61:cc:a4:69:22:c0:f4:83:9e:9b:aa:19:0c:
         ae:58:7c:51:23:18:05:b6:78:1b:73:fd:35:e1:4a:46:60:35:
         47:f9:03:a0:4e:2b:31:93:06:72:d5:0c:83:4a:c1:f1:00:f1:
         01:2c:90:34:8a:e8:88:5e:fc:51:ff:b5:4e:73:90:68:86:a6:
         35:c4:a8:d3:ee:9f:f5:f7:84:bc:c2:25:83:27:62:14:ed:29:
         37:58:42:8b:e6:d4:2b:50:f4:3b:0c:8e:e7:c6:5b:5e:fd:c1:
         dd:5a:6e:10:c4:ff:a8:2e:25:fa:2c:6e:1e:63:ce:b9:79:a8:
         e2:0b:e1:2f:d6:85:0f:0b:b9:fa:ee:c3:22:bd:2b:5a:63:36:
         18:12:d1:cb:dc:7d:9b:fb:27:76:7a:fe:54:b4:6a:6e:ec:61:
         68:88:4d:42:e4:42:57:b4:fd:5e:dd:4c:5f:b5:d4:62:55:bd:
         94:41:ea:4a:61:d9:4f:61:07:0c:b1:cc:de:3a:d8:d7:29:bd:
         9c:be:06:13:ec:04:e7:a8:5f:4b:e7:38:74:a4:08:6e:3a:55:
         a8:b8:7c:97:6e:04:e0:01:71:64:35:05:5e:04:c3:24:04:0a:
         6e:18:5d:d6:2d:00:e9:03:38:0c:cc:39:b6:7f:cb:a5:b7:0b:
         d9:e9:ed:ee
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzVCNDkxMTAvBgNVBAUTKDRDMzY1RTM2QTY0NzlEOEVCMEI1MEQ5MEYzNkQxRDdC
MTlFRjg0RDMwHhcNMjUxMDE5MDc1MDEwWhcNMjUxMDI2MDc1MDEwWjAYMRYwFAYD
VQQDEw02OGY0OTgzMi0xYzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2nB8U1aUtLNKCjYmL0ZheWXEx7wYa0KC33SBdRCyMPlgvguyt8QG7xPXKTlH
tEpQxZ5GqRQfaZhpgQxAdZKgPnkBJ6eUZEeZVKztF1RweyY4BWBO9PAkr+CXTxr5
nBeCpDcz7l9cUoAZGmP+Jn2d0VbGm5XBu2IYoMfpIxW0iOdoViK6uPsHRmD3W7du
Fb2oTPEmw6RlocKWPD2wzH4TC8/oNa5V+rzaPqdml6X3Z/QUI8FvRUyyj++7XdPl
K8FCKO/d28BOmnISFmCFGFgoM5D4Kvwh3HZSLB7tnPNJHLjvTo7POD1Bm+pPF3pt
xPFPw43M52TXL95IflMV+lqwvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRkWHso
+o6BFNPawnjt/Jxg/xHdMB8GA1UdIwQYMBaAFEw2XjamR52OsLUNkPNtHXsZ74TT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0OS81MzE4QTEwODEy
MDExMUVGQURDODUzNDVDNEY5QUUwMi9URFplTnFaSG5ZNnd0UTJRODIwZGV4bnZo
Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1REWmVOcVpIblk2d3RRMlE4MjBkZXhudmhOTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NUI0OS81MzE4QTEwODEyMDExMUVGQURDODUzNDVDNEY5QUUwMi9URFplTnFaSG5Z
Nnd0UTJRODIwZGV4bnZoTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBEfpPfUGHMpGkiwPSDnpuqGQyuWHxRIxgFtngbc/014UpGYDVH+QOg
TisxkwZy1QyDSsHxAPEBLJA0iuiIXvxR/7VOc5BohqY1xKjT7p/194S8wiWDJ2IU
7Sk3WEKL5tQrUPQ7DI7nxlte/cHdWm4QxP+oLiX6LG4eY865eajiC+Ev1oUPC7n6
7sMivStaYzYYEtHL3H2b+yd2ev5UtGpu7GFoiE1C5EJXtP1e3UxftdRiVb2UQepK
YdlPYQcMsczeOtjXKb2cvgYT7ATnqF9L5zh0pAhuOlWouHyXbgTgAXFkNQVeBMMk
BApuGF3WLQDpAzgMzDm2f8ultwvZ6e3u
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:31:57 2025 by rpki-client