Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
File:                     TK0nK60dhwmxbpl1AG4SJVIFyPY.mft (raw, json)
Hash identifier:          fH66ojJJGjfCNngsl+eNU9NxtXATk6PYMxbdeFyRRCI=
Subject key identifier:   3C:9E:48:4B:5E:A4:AC:24:30:8E:98:BC:BA:31:CB:C9:93:11:06:95
Authority key identifier: 4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6
Certificate issuer:       /CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6
Certificate serial:       0175
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
Manifest number:          0167
Signing time:             Sun 19 Oct 2025 06:49:32 +0000
Manifest this update:     Sun 19 Oct 2025 06:49:32 +0000
Manifest next update:     Sun 26 Oct 2025 06:49:32 +0000
Files and hashes:         1: TK0nK60dhwmxbpl1AG4SJVIFyPY.crl (hash: 9LDZb16Z5BXs8JNXwRLoEkgZjryLv1r18UlGtzJ5+4Y=)
                          2: 34B484F49B0D11EEB69D6B1CC4F9AE02.roa (hash: LN+Bl9RZ1hirx8n/6IVVyjnDU7gxEMZFLl6YFsSXHSs=)
                          3: C4B561629AFA11EEB91A2174C4F9AE02.roa (hash: Ba1lgzMsQfqpR3ei0tOYxQcrh9RVC5oeP2BQeuQZDHk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl
                          rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9A6E, serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6
        Validity
            Not Before: Oct 19 06:49:32 2025 GMT
            Not After : Oct 26 06:49:32 2025 GMT
        Subject: CN=68f489fc-251f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cd:86:b7:5a:e8:2e:bf:59:09:e6:39:cf:1a:
                    eb:73:9b:12:2b:26:3c:e7:57:a5:3b:f8:64:87:40:
                    2d:8b:99:99:01:12:cd:27:68:8c:f3:5a:e9:37:01:
                    a6:c8:4a:ca:40:4a:b9:76:cf:ce:e7:dc:cf:66:36:
                    f8:9b:a4:71:c6:e7:d9:70:56:ad:8c:b9:e0:ce:71:
                    e6:75:ce:97:5d:dd:af:b3:c1:93:a8:8f:ad:a4:a5:
                    a1:bf:b1:17:4c:aa:39:af:62:97:c8:a0:89:06:3e:
                    6f:f7:d5:f5:fc:9b:bf:77:d5:62:65:2e:fa:e8:13:
                    f2:b9:c2:a7:ef:4e:dd:bb:59:ca:17:1d:cf:24:f7:
                    2e:86:de:09:ac:77:8e:9f:40:59:1d:61:6f:60:f3:
                    f5:44:a0:ad:aa:bc:1a:05:af:01:c8:cc:8d:54:be:
                    97:61:b6:af:54:7c:81:58:5b:98:b3:cd:a4:85:da:
                    77:1e:10:b7:e2:87:44:8a:9a:1a:83:a3:d6:5e:69:
                    45:c2:2a:ba:01:61:95:07:e0:e1:33:50:6d:8b:af:
                    4b:91:17:7d:73:56:f3:8f:f3:65:11:6d:5d:3e:31:
                    87:75:c3:bd:78:f6:28:5e:3c:76:02:5f:71:7f:1d:
                    d6:e4:3d:87:3c:35:8a:9d:5e:f4:b5:9f:3d:46:6a:
                    22:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9E:48:4B:5E:A4:AC:24:30:8E:98:BC:BA:31:CB:C9:93:11:06:95
            X509v3 Authority Key Identifier:
                keyid:4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:fa:54:79:02:8f:08:a3:dc:7c:bb:26:a9:b9:b3:06:49:8c:
         ab:20:ca:2a:4f:b0:df:1c:c4:f8:01:5e:98:bd:63:d4:80:73:
         95:55:f3:87:63:d6:fd:d8:fe:3e:7a:f7:57:e6:09:22:51:08:
         dc:7f:fa:7a:d0:7e:13:ec:68:20:15:9d:7a:95:c5:fa:62:f0:
         1c:c6:f5:a4:bb:02:67:7d:ee:10:eb:35:1c:48:20:30:6b:63:
         10:00:54:3e:e5:59:4c:24:5f:6c:45:b1:68:38:48:e6:16:84:
         59:31:c0:27:77:b4:be:b8:37:d7:f6:9e:82:86:66:07:50:6d:
         4e:e8:62:4b:f7:90:30:e6:84:9b:e1:4b:f3:7d:a5:4b:81:05:
         31:c5:6d:51:20:3d:01:df:b2:66:17:75:1b:d2:d5:8e:e2:0d:
         2e:64:66:90:c5:97:c5:67:b5:5c:33:cb:22:83:25:c1:fe:e7:
         eb:46:e4:71:89:a9:ba:ce:b1:4c:8b:b8:d0:80:43:84:52:ca:
         d1:25:b4:71:1b:64:ca:53:c7:08:f5:97:61:05:ee:da:20:8c:
         a8:91:02:c1:48:ed:7e:c3:26:ee:54:91:bc:8b:66:fd:81:62:
         8c:66:01:4b:da:c8:b9:ab:c4:80:2e:95:c7:1d:b5:56:00:1d:
         cb:c0:3d:bc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDlBNkUxMTAvBgNVBAUTKDRDQUQyNzJCQUQxRDg3MDlCMTZFOTk3NTAwNkUxMjI1
NTIwNUM4RjYwHhcNMjUxMDE5MDY0OTMyWhcNMjUxMDI2MDY0OTMyWjAYMRYwFAYD
VQQDEw02OGY0ODlmYy0yNTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAus2Gt1roLr9ZCeY5zxrrc5sSKyY851elO/hkh0Ati5mZARLNJ2iM81rpNwGm
yErKQEq5ds/O59zPZjb4m6RxxufZcFatjLngznHmdc6XXd2vs8GTqI+tpKWhv7EX
TKo5r2KXyKCJBj5v99X1/Ju/d9ViZS766BPyucKn707du1nKFx3PJPcuht4JrHeO
n0BZHWFvYPP1RKCtqrwaBa8ByMyNVL6XYbavVHyBWFuYs82khdp3HhC34odEipoa
g6PWXmlFwiq6AWGVB+DhM1Bti69LkRd9c1bzj/NlEW1dPjGHdcO9ePYoXjx2Al9x
fx3W5D2HPDWKnV70tZ89Rmoi0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyeSEte
pKwkMI6YvLoxy8mTEQaVMB8GA1UdIwQYMBaAFEytJyutHYcJsW6ZdQBuEiVSBcj2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RS9GNTFGRjg4NjlB
RjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3bXhicGwxQUc0U0pWSUZ5
UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RLMG5LNjBkaHdteGJwbDFBRzRTSlZJRnlQWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OUE2RS9GNTFGRjg4NjlBRjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3
bXhicGwxQUc0U0pWSUZ5UFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBq+lR5Ao8Io9x8uyapubMGSYyrIMoqT7DfHMT4AV6YvWPUgHOVVfOH
Y9b92P4+evdX5gkiUQjcf/p60H4T7GggFZ16lcX6YvAcxvWkuwJnfe4Q6zUcSCAw
a2MQAFQ+5VlMJF9sRbFoOEjmFoRZMcAnd7S+uDfX9p6ChmYHUG1O6GJL95Aw5oSb
4UvzfaVLgQUxxW1RID0B37JmF3Ub0tWO4g0uZGaQxZfFZ7VcM8sigyXB/ufrRuRx
iam6zrFMi7jQgEOEUsrRJbRxG2TKU8cI9ZdhBe7aIIyokQLBSO1+wybuVJG8i2b9
gWKMZgFL2si5q8SALpXHHbVWAB3LwD28
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:27 2025 by rpki-client