Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft
File:                     Tky0uRUee64RK-xTWcMclVgO4DE.mft (raw, json)
Hash identifier:          7nSAeyPVMeHEZK5LZZ1NsagEDEKUiew8j5R1fNMxlSs=
Subject key identifier:   79:66:36:29:26:C6:21:77:2F:33:0D:AD:65:7F:C7:27:CE:F1:9F:08
Authority key identifier: 4E:4C:B4:B9:15:1E:7B:AE:11:2B:EC:53:59:C3:1C:95:58:0E:E0:31
Certificate issuer:       /CN=A91609E6/serialNumber=4E4CB4B9151E7BAE112BEC5359C31C95580EE031
Certificate serial:       04AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft
Manifest number:          04A7
Signing time:             Sun 19 Oct 2025 01:46:45 +0000
Manifest this update:     Sun 19 Oct 2025 01:46:45 +0000
Manifest next update:     Sun 26 Oct 2025 01:46:45 +0000
Files and hashes:         1: Tky0uRUee64RK-xTWcMclVgO4DE.crl (hash: 5FUJkepM3JI+DCILeEblI5VYi+HNgZbt/m5bH3Sy/fg=)
                          2: 7B0E744E994111F09D282143C4F9AE02.roa (hash: 9zZD5kGu0fg/Mi3f4mqOjxSFHhC9UH9O9kv+Eh2v7Qs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.crl
                          rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:46:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1196 (0x4ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91609E6, serialNumber=4E4CB4B9151E7BAE112BEC5359C31C95580EE031
        Validity
            Not Before: Oct 19 01:46:45 2025 GMT
            Not After : Oct 26 01:46:45 2025 GMT
        Subject: CN=68f44305-3b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5a:f7:d2:5a:46:aa:bb:a6:b4:71:93:dd:39:
                    42:72:bd:a4:92:47:b2:a0:66:44:ef:c9:af:ae:3e:
                    94:f0:cf:e1:03:c9:37:f4:4b:88:30:b0:74:85:11:
                    71:c2:ae:df:54:35:a7:8e:a2:85:3f:b3:14:52:47:
                    40:12:f6:ec:43:4e:8d:ff:73:68:0b:fa:d1:ce:59:
                    a4:1b:14:a1:65:10:7a:3b:ed:de:0f:01:83:a3:78:
                    b4:51:91:f3:20:aa:2e:5c:63:0c:75:a1:e0:25:1b:
                    34:d4:b5:fd:10:0e:3e:a1:6a:79:f9:61:0a:eb:ae:
                    39:65:ad:22:e8:19:97:48:a7:bc:bf:5b:4e:27:42:
                    06:56:e6:88:7f:0d:59:b4:3c:b2:98:8e:ee:53:64:
                    66:b3:55:3d:29:a9:98:4f:f7:4b:04:ec:04:a6:be:
                    80:ac:3a:97:1b:83:d1:a6:65:17:45:1a:d6:22:38:
                    ef:57:b6:17:e6:dd:4c:97:c7:f0:e6:a8:87:8f:dc:
                    de:99:1f:69:ca:94:c9:23:0a:09:bc:0e:1f:e4:bc:
                    fb:65:b1:4c:ad:8a:d5:51:ba:a0:58:1d:f1:dd:1c:
                    4b:c8:39:24:50:f5:c0:3c:98:3e:c7:e7:d0:ea:bd:
                    09:3d:51:03:7f:5c:71:83:29:f4:1f:ee:9a:33:3d:
                    97:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:66:36:29:26:C6:21:77:2F:33:0D:AD:65:7F:C7:27:CE:F1:9F:08
            X509v3 Authority Key Identifier:
                keyid:4E:4C:B4:B9:15:1E:7B:AE:11:2B:EC:53:59:C3:1C:95:58:0E:E0:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:8a:6d:8b:19:e2:e3:17:bd:4e:7e:10:c0:27:02:8c:7c:d1:
         92:e7:e3:9e:7a:13:9d:28:f5:b5:bd:54:1a:07:57:5c:ef:9d:
         2b:36:4f:20:44:c6:22:b1:b6:d8:e7:98:19:91:90:c7:23:b8:
         24:67:6d:52:b7:e5:41:c8:e6:0f:5b:95:fa:3f:f3:c9:75:48:
         86:6f:7c:69:f2:26:a7:ab:06:3a:e4:29:8c:d1:93:54:22:e1:
         d6:1d:11:9a:72:b5:11:e2:20:d0:d7:c1:6c:42:58:3b:92:7a:
         db:23:8f:24:f0:20:8f:28:66:f9:05:91:7b:72:dc:d6:8d:d0:
         7d:47:ed:e7:d9:ad:db:86:1b:7f:e4:e6:60:32:b5:64:3e:40:
         47:0c:74:dc:fe:40:cc:67:28:b3:1c:2a:fb:3b:91:2e:1c:59:
         17:37:aa:45:74:3a:91:da:f2:70:76:d4:cb:7f:f8:c5:0b:15:
         8a:b5:aa:07:05:96:c3:60:65:9c:6e:e1:ee:96:17:79:d2:6c:
         85:f5:3b:df:56:97:fb:f1:e8:90:2a:eb:f9:73:94:b0:8a:34:
         14:2e:18:57:bf:67:60:dd:36:2f:b7:ec:24:42:16:9c:d2:a8:
         9b:19:96:da:7b:57:9f:e9:6c:25:01:73:4f:1d:cc:21:4c:ca:
         f7:0b:a2:63
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA5RTYxMTAvBgNVBAUTKDRFNENCNEI5MTUxRTdCQUUxMTJCRUM1MzU5QzMxQzk1
NTgwRUUwMzEwHhcNMjUxMDE5MDE0NjQ1WhcNMjUxMDI2MDE0NjQ1WjAYMRYwFAYD
VQQDEw02OGY0NDMwNS0zYjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz1r30lpGqrumtHGT3TlCcr2kkkeyoGZE78mvrj6U8M/hA8k39EuIMLB0hRFx
wq7fVDWnjqKFP7MUUkdAEvbsQ06N/3NoC/rRzlmkGxShZRB6O+3eDwGDo3i0UZHz
IKouXGMMdaHgJRs01LX9EA4+oWp5+WEK6645Za0i6BmXSKe8v1tOJ0IGVuaIfw1Z
tDyymI7uU2Rms1U9KamYT/dLBOwEpr6ArDqXG4PRpmUXRRrWIjjvV7YX5t1Ml8fw
5qiHj9zemR9pypTJIwoJvA4f5Lz7ZbFMrYrVUbqgWB3x3RxLyDkkUPXAPJg+x+fQ
6r0JPVEDf1xxgyn0H+6aMz2XgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlmNikm
xiF3LzMNrWV/xyfO8Z8IMB8GA1UdIwQYMBaAFE5MtLkVHnuuESvsU1nDHJVYDuAx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDlFNi9CNjE2Qzg2QTRG
NzcxMUVDOUYwOTQ1NkVDNEY5QUUwMi9Ua3kwdVJVZWU2NFJLLXhUV2NNY2xWZ080
REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RreTB1UlVlZTY0UksteFRXY01jbFZnTzRERS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDlFNi9CNjE2Qzg2QTRGNzcxMUVDOUYwOTQ1NkVDNEY5QUUwMi9Ua3kwdVJVZWU2
NFJLLXhUV2NNY2xWZ080REUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAMim2LGeLjF71OfhDAJwKMfNGS5+OeehOdKPW1vVQaB1dc750rNk8g
RMYisbbY55gZkZDHI7gkZ21St+VByOYPW5X6P/PJdUiGb3xp8ianqwY65CmM0ZNU
IuHWHRGacrUR4iDQ18FsQlg7knrbI48k8CCPKGb5BZF7ctzWjdB9R+3n2a3bhht/
5OZgMrVkPkBHDHTc/kDMZyizHCr7O5EuHFkXN6pFdDqR2vJwdtTLf/jFCxWKtaoH
BZbDYGWcbuHulhd50myF9TvfVpf78eiQKuv5c5SwijQULhhXv2dg3TYvt+wkQhac
0qibGZbae1ef6WwlAXNPHcwhTMr3C6Jj
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:46:32 2025 by rpki-client