Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
File:                     TZCQh73foVBeK7oD8gYRLq7_sRs.mft (raw, json)
Hash identifier:          wBYBQMAJmwXkSFUBo+cSbdjTYwStEH+iP59MQlYRFk8=
Subject key identifier:   59:C5:4B:FD:39:46:ED:CE:CA:D7:61:63:CC:34:1C:C6:98:BD:19:02
Authority key identifier: 4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B
Certificate issuer:       /CN=A91D200F/serialNumber=4D909087BDDFA1505E2BBA03F206112EAEFFB11B
Certificate serial:       01CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
Manifest number:          01BD
Signing time:             Sun 19 Oct 2025 05:38:52 +0000
Manifest this update:     Sun 19 Oct 2025 05:38:52 +0000
Manifest next update:     Sun 26 Oct 2025 05:38:52 +0000
Files and hashes:         1: TZCQh73foVBeK7oD8gYRLq7_sRs.crl (hash: AAaRL53wrA9dMmeBiAEq+6KY06jAuj++uLh8ucf7CgA=)
                          2: D71B60EC2B5911EE81C7542FC4F9AE02.roa (hash: wndMS9TntxEIvOO1y5ThBewHzkdYkTNV8U/orVegQT4=)
                          3: 039807B286B511EFAF868C6EC4F9AE02.roa (hash: mvlfednBP8hH+VJF+N7b5lj86+gAiaBFLJ6OGfwQefA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.crl
                          rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458 (0x1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D200F, serialNumber=4D909087BDDFA1505E2BBA03F206112EAEFFB11B
        Validity
            Not Before: Oct 19 05:38:52 2025 GMT
            Not After : Oct 26 05:38:52 2025 GMT
        Subject: CN=68f4796c-3f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d0:61:5b:1a:6d:7d:b1:68:12:a3:09:b2:9e:
                    98:ac:17:2c:78:f1:ce:65:1c:52:b0:d2:52:0d:64:
                    24:6e:6a:15:03:36:7c:58:57:29:b9:40:bf:d1:62:
                    cc:be:45:f2:ec:a6:a3:7b:02:d6:f2:4b:ab:b7:a8:
                    61:4e:f9:dc:6a:87:64:dc:0c:8e:73:d9:1a:9a:70:
                    f1:bb:0a:41:f9:74:c6:3a:f9:8e:65:db:fc:db:8f:
                    48:61:2e:e8:6a:f8:4f:1e:3d:97:73:0f:e1:e5:44:
                    e4:67:e3:08:62:cb:ad:89:f0:91:01:1d:1b:8f:0c:
                    b6:32:25:d0:79:b5:e2:24:d7:16:f0:a8:43:49:8b:
                    ae:9a:a4:56:83:4d:dc:fc:23:c5:ed:f6:4e:e5:d3:
                    6b:ff:89:18:fb:45:b1:6e:1a:eb:28:5f:0a:5a:57:
                    e1:f8:77:38:28:eb:b7:22:3e:87:87:0b:cd:28:81:
                    fc:29:80:d4:b5:ba:77:e8:fd:bb:ed:49:02:f8:41:
                    66:17:e9:ac:70:6a:b7:a3:90:28:d0:52:fb:9a:ac:
                    40:a8:d8:15:2b:f4:a5:0c:83:4e:eb:a6:ee:52:43:
                    3f:6e:cb:72:c1:e1:36:5c:e9:55:67:ef:0a:1a:f1:
                    3c:62:f9:78:5f:45:1c:7d:b2:92:b3:b7:c6:9c:c6:
                    c9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C5:4B:FD:39:46:ED:CE:CA:D7:61:63:CC:34:1C:C6:98:BD:19:02
            X509v3 Authority Key Identifier:
                keyid:4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:25:ef:a5:3e:1d:60:2a:e3:8e:e1:f8:c6:2d:80:fa:a3:71:
         e8:d7:03:97:eb:26:e4:ef:b6:96:99:bc:33:4c:33:c5:6d:5c:
         4a:0c:66:e4:8a:01:e1:83:cb:c5:53:b9:52:64:57:ef:85:42:
         63:a7:87:aa:96:74:6c:fe:33:69:55:cc:67:4c:3d:22:d3:38:
         5b:c3:16:71:73:57:ae:62:a0:06:17:0f:e9:50:22:a3:34:9a:
         9f:94:d9:3d:7f:79:07:93:23:da:8c:2c:5c:d4:2f:11:d6:0a:
         8f:b1:49:b7:aa:c9:78:c8:d7:94:f0:d8:0c:4a:6c:8a:ba:22:
         51:2a:78:ff:c8:5c:b4:19:9b:17:1a:a8:7c:74:6d:08:d6:54:
         36:31:5f:86:63:24:92:e4:10:3c:91:07:e6:84:7d:ff:01:13:
         d9:af:1e:1f:39:05:ef:67:a4:93:55:42:62:dc:f8:4e:fe:cf:
         45:c2:7e:93:ba:d2:e8:95:1f:b8:b3:bd:af:d1:7c:04:61:db:
         fa:be:f2:ae:64:6b:22:5b:0b:98:ce:ef:80:cd:28:3c:38:4d:
         f2:27:32:a2:7b:47:ad:87:f1:b5:42:bc:8e:f3:21:4c:60:3b:
         0a:9c:d7:c6:40:bb:19:52:fd:30:f5:46:62:2a:3e:62:b2:07:
         49:66:74:09
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDIwMEYxMTAvBgNVBAUTKDREOTA5MDg3QkRERkExNTA1RTJCQkEwM0YyMDYxMTJF
QUVGRkIxMUIwHhcNMjUxMDE5MDUzODUyWhcNMjUxMDI2MDUzODUyWjAYMRYwFAYD
VQQDEw02OGY0Nzk2Yy0zZjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxtBhWxptfbFoEqMJsp6YrBcsePHOZRxSsNJSDWQkbmoVAzZ8WFcpuUC/0WLM
vkXy7KajewLW8kurt6hhTvncaodk3AyOc9kamnDxuwpB+XTGOvmOZdv8249IYS7o
avhPHj2Xcw/h5UTkZ+MIYsutifCRAR0bjwy2MiXQebXiJNcW8KhDSYuumqRWg03c
/CPF7fZO5dNr/4kY+0WxbhrrKF8KWlfh+Hc4KOu3Ij6HhwvNKIH8KYDUtbp36P27
7UkC+EFmF+mscGq3o5Ao0FL7mqxAqNgVK/SlDINO66buUkM/bstyweE2XOlVZ+8K
GvE8Yvl4X0UcfbKSs7fGnMbJbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnFS/05
Ru3OytdhY8w0HMaYvRkCMB8GA1UdIwQYMBaAFE2QkIe936FQXiu6A/IGES6u/7Eb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjAwRi8yNTc4NzQwMjE2
NEYxMUVFOUU3MzQwNEVDNEY5QUUwMi9UWkNRaDczZm9WQmVLN29EOGdZUkxxN19z
UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RaQ1FoNzNmb1ZCZUs3b0Q4Z1lSTHE3X3NScy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MjAwRi8yNTc4NzQwMjE2NEYxMUVFOUU3MzQwNEVDNEY5QUUwMi9UWkNRaDczZm9W
QmVLN29EOGdZUkxxN19zUnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCXJe+lPh1gKuOO4fjGLYD6o3Ho1wOX6ybk77aWmbwzTDPFbVxKDGbk
igHhg8vFU7lSZFfvhUJjp4eqlnRs/jNpVcxnTD0i0zhbwxZxc1euYqAGFw/pUCKj
NJqflNk9f3kHkyPajCxc1C8R1gqPsUm3qsl4yNeU8NgMSmyKuiJRKnj/yFy0GZsX
Gqh8dG0I1lQ2MV+GYySS5BA8kQfmhH3/ARPZrx4fOQXvZ6STVUJi3PhO/s9Fwn6T
utLolR+4s72v0XwEYdv6vvKuZGsiWwuYzu+AzSg8OE3yJzKie0eth/G1QryO8yFM
YDsKnNfGQLsZUv0w9UZiKj5isgdJZnQJ
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:18:40 2025 by rpki-client