Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft
File:                     TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft (raw, json)
Hash identifier:          i1JRKVH5xUXXpKRIc4agQ4wFUGsitJlhrtjQ2joMCg0=
Subject key identifier:   59:A5:EE:01:D4:84:AB:95:4D:ED:C4:29:65:A5:54:C2:AF:46:D9:EB
Authority key identifier: 4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D
Certificate issuer:       /CN=A91C31B7/serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D
Certificate serial:       D0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft
Manifest number:          CE
Signing time:             Thu 03 Jul 2025 05:51:24 +0000
Manifest this update:     Thu 03 Jul 2025 05:51:24 +0000
Manifest next update:     Thu 10 Jul 2025 05:51:24 +0000
Files and hashes:         1: TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl (hash: lGcgLThA6awW/VQ7ncmJP5PzR7wRxOolw9YvG45kELM=)
                          2: 1FC3B0DE1E6F11EFB392D937C4F9AE02.roa (hash: ymGuQNubHZmih1/MlsNM4UjPPYjnvk5QIBxrno55/zE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl
                          rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C31B7, serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D
        Validity
            Not Before: Jul  3 05:51:24 2025 GMT
            Not After : Jul 10 05:51:24 2025 GMT
        Subject: CN=68661a5c-364d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:af:de:48:af:89:3d:de:86:07:47:94:9f:66:
                    84:26:48:7b:5e:ac:ac:ab:f7:cb:de:ae:e2:65:26:
                    4b:78:c8:ad:9a:51:d3:fd:68:39:3e:2f:98:bd:6d:
                    15:76:2a:f9:1e:c2:b4:11:7d:43:8b:69:1e:d8:d9:
                    30:01:1c:d6:83:5c:83:e4:b9:96:d0:88:ec:43:af:
                    73:e2:0b:85:bb:8f:c4:58:85:d0:b3:5c:b6:0c:28:
                    0f:65:38:3e:e9:dd:ad:67:59:c3:d8:64:35:a7:7a:
                    38:e1:7c:30:85:41:a7:96:82:de:5e:06:a1:54:d8:
                    d9:92:1c:21:1e:50:1e:02:ef:e2:9e:32:7f:d3:eb:
                    ec:ee:b7:a4:b2:4c:34:c9:60:9e:83:df:fd:6f:4d:
                    b3:a4:e7:0a:cc:d5:d9:ad:dd:b6:fd:6c:5a:84:56:
                    b7:ed:ba:40:04:27:c7:0f:95:89:c0:c3:5d:d4:33:
                    6e:4d:cd:ae:6c:8f:5c:aa:b6:9a:1b:68:df:94:46:
                    a7:a8:68:38:e1:92:93:5b:65:ac:c1:d2:ed:59:4e:
                    da:44:2e:d9:d1:a0:34:6e:52:52:68:f4:96:79:0e:
                    0a:60:5b:46:ca:5a:ec:50:2d:bb:8c:51:28:79:b2:
                    d8:c9:7a:48:90:ea:db:8a:43:74:d0:5e:dd:96:66:
                    42:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A5:EE:01:D4:84:AB:95:4D:ED:C4:29:65:A5:54:C2:AF:46:D9:EB
            X509v3 Authority Key Identifier:
                keyid:4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:ba:df:ef:e6:62:16:ec:9e:85:de:a0:ef:36:2f:c7:60:cd:
         57:8f:66:78:8c:34:97:f8:6b:8d:7d:c7:df:16:db:3a:71:b1:
         ca:1a:7a:a4:27:2f:75:21:25:f1:3b:52:60:45:b5:73:6b:65:
         12:a9:8e:82:9f:5b:e2:43:51:e8:a7:ab:05:2c:57:30:66:d3:
         be:51:32:89:d9:69:0a:90:e1:e9:9b:9d:19:92:30:d8:44:0a:
         05:a0:69:7b:de:c4:a9:26:a7:1c:6d:00:8e:3d:40:c9:d2:93:
         1f:0c:d2:58:2d:29:03:a5:14:ab:8e:a6:4d:e7:17:8a:5f:57:
         4f:0a:d3:f6:56:d6:ef:8a:36:08:ee:6b:0e:9a:e2:6b:3e:41:
         7e:72:01:5f:e7:f1:45:ac:27:7b:30:ad:3c:d1:0e:3d:38:bb:
         e9:95:59:ec:f8:35:2e:6a:ea:03:77:46:b4:6d:fc:72:1a:25:
         8c:40:0f:f8:c7:a9:fe:e0:1f:98:10:e6:ae:4f:d9:76:8a:79:
         c7:0a:84:98:8a:ad:5f:c5:b2:42:d7:7d:a8:98:33:5c:38:07:
         98:10:1a:5c:1c:72:af:44:36:01:4c:f1:77:77:62:94:8e:80:
         4c:35:d1:4e:cc:22:6b:3f:2c:8c:dc:51:ba:11:e4:d4:b0:bd:
         8c:f4:f9:0c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzMxQjcxMTAvBgNVBAUTKDRDMzM5Q0FCRkM4MEE1RjQxOURGMzNERkIwNjg4NUMx
QzM0ODhCMkQwHhcNMjUwNzAzMDU1MTI0WhcNMjUwNzEwMDU1MTI0WjAYMRYwFAYD
VQQDEw02ODY2MWE1Yy0zNjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0K/eSK+JPd6GB0eUn2aEJkh7Xqysq/fL3q7iZSZLeMitmlHT/Wg5Pi+YvW0V
dir5HsK0EX1Di2ke2NkwARzWg1yD5LmW0IjsQ69z4guFu4/EWIXQs1y2DCgPZTg+
6d2tZ1nD2GQ1p3o44XwwhUGnloLeXgahVNjZkhwhHlAeAu/injJ/0+vs7rekskw0
yWCeg9/9b02zpOcKzNXZrd22/WxahFa37bpABCfHD5WJwMNd1DNuTc2ubI9cqraa
G2jflEanqGg44ZKTW2WswdLtWU7aRC7Z0aA0blJSaPSWeQ4KYFtGylrsUC27jFEo
ebLYyXpIkOrbikN00F7dlmZCnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFml7gHU
hKuVTe3EKWWlVMKvRtnrMB8GA1UdIwQYMBaAFEwznKv8gKX0Gd8z37BohcHDSIst
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFCNy9GMkE1NzMyRTFF
NkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9URE9jcV95QXBmUVozelBmc0dpRndjTklp
eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RET2NxX3lBcGZRWjN6UGZzR2lGd2NOSWl5MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MzFCNy9GMkE1NzMyRTFFNkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9URE9jcV95QXBm
UVozelBmc0dpRndjTklpeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDMut/v5mIW7J6F3qDvNi/HYM1Xj2Z4jDSX+GuNfcffFts6cbHKGnqk
Jy91ISXxO1JgRbVza2USqY6Cn1viQ1Hop6sFLFcwZtO+UTKJ2WkKkOHpm50ZkjDY
RAoFoGl73sSpJqccbQCOPUDJ0pMfDNJYLSkDpRSrjqZN5xeKX1dPCtP2VtbvijYI
7msOmuJrPkF+cgFf5/FFrCd7MK080Q49OLvplVns+DUuauoDd0a0bfxyGiWMQA/4
x6n+4B+YEOauT9l2innHCoSYiq1fxbJC132omDNcOAeYEBpcHHKvRDYBTPF3d2KU
joBMNdFOzCJrPyyM3FG6EeTUsL2M9PkM
-----END CERTIFICATE-----
Generated at Thu Jul 3 22:58:36 2025 by rpki-client