Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
File:                     TzMtwIyXR6ybyBxUfRujRWQ_drc.mft (raw, json)
Hash identifier:          Cexl2EgMO11Xe2ALnoVh/di565mbhRy0uUHWztPenls=
Subject key identifier:   8A:A8:4E:13:3C:C3:95:0B:95:45:42:C3:A0:D4:34:38:FE:2A:93:75
Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7
Certificate issuer:       /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7
Certificate serial:       0591
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
Manifest number:          058B
Signing time:             Sun 10 Aug 2025 23:21:20 +0000
Manifest this update:     Sun 10 Aug 2025 23:21:19 +0000
Manifest next update:     Sun 17 Aug 2025 23:21:19 +0000
Files and hashes:         1: TzMtwIyXR6ybyBxUfRujRWQ_drc.crl (hash: wjkRxIbf+Xk/K626+Jy/6hZuoCfl3t4uAclVaHTBZA8=)
                          2: 26F1B59437A511ECB73C9852C4F9AE02.roa (hash: RnCdsnsA5t3rSQhlqndquIzW2+Ap7Mst87/6oAJexVI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl
                          rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1425 (0x591)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4042, serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7
        Validity
            Not Before: Aug 10 23:21:19 2025 GMT
            Not After : Aug 17 23:21:19 2025 GMT
        Subject: CN=68992970-14df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:14:30:73:8f:13:1c:35:9e:30:1e:56:36:00:
                    95:27:e6:78:38:08:fe:a4:cb:ee:24:68:f3:2a:80:
                    cc:90:09:8c:4e:42:7d:df:62:90:2c:74:0a:75:f4:
                    84:9b:58:a7:b3:29:11:54:e9:47:ab:24:f7:4f:4a:
                    4d:2c:f4:88:4c:e8:da:29:f5:bc:de:56:c9:b8:1d:
                    2e:ca:98:e9:2f:9f:2f:48:5d:be:06:3e:62:3a:25:
                    ca:99:5d:ed:dd:4c:e4:7c:b8:26:2d:3f:11:ea:fa:
                    99:47:ee:5e:0b:7e:c8:cb:4f:11:0d:04:22:79:42:
                    aa:d8:8c:4d:4c:ca:fb:d5:49:3d:b2:95:91:bb:da:
                    3c:ff:1e:07:5f:a9:e0:0e:41:46:ef:0e:34:69:8f:
                    00:36:a8:46:1f:db:6a:76:00:5e:21:f2:e4:cd:a7:
                    d1:26:bc:de:3f:6a:68:a2:f9:d1:ce:db:f4:52:f2:
                    65:9d:f6:e1:01:b2:c9:ca:e4:35:ce:5c:b6:5f:b0:
                    6b:56:62:ee:aa:5e:ec:e3:46:58:ab:c6:5e:36:7e:
                    f0:0b:38:82:52:7e:ca:1d:76:f9:46:21:52:c4:3c:
                    77:23:2a:73:c2:02:d2:20:74:2b:4d:5d:f6:4d:e7:
                    36:12:22:69:47:d0:de:d7:aa:e8:cb:9d:47:88:d9:
                    10:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A8:4E:13:3C:C3:95:0B:95:45:42:C3:A0:D4:34:38:FE:2A:93:75
            X509v3 Authority Key Identifier:
                keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:ad:48:0f:a3:12:08:d8:3f:c0:b8:cf:9c:ea:1c:e2:60:b9:
         7b:07:34:c3:70:41:04:95:a7:51:27:40:ee:f0:56:4a:be:f4:
         61:cc:6e:d4:53:65:9e:c9:25:fc:38:ba:6b:cc:e5:eb:bf:df:
         64:87:24:f1:85:86:28:b7:bb:34:22:fe:80:05:80:ed:bf:00:
         83:34:01:39:55:24:d1:3f:73:a0:90:46:9d:0e:44:f4:bd:e0:
         35:ce:ed:c8:bf:03:26:9e:79:d2:28:6e:4d:48:43:1c:75:66:
         20:10:02:25:04:be:d0:a4:7d:cc:d7:46:36:e4:b9:6e:61:a2:
         1a:d7:b7:43:d0:d8:d2:07:9f:fd:69:0b:0b:c8:d5:ee:8c:fc:
         73:38:8c:c9:70:c9:cf:3c:cc:97:ce:f5:06:7f:8a:69:e7:7c:
         bf:b2:54:a5:2e:79:35:3b:8f:11:82:e3:78:33:38:fe:45:34:
         30:ec:e8:3b:4d:56:a7:72:20:a6:24:f1:f7:77:f0:9b:50:1a:
         21:09:5c:2b:93:b6:2d:b5:8f:c6:4b:af:a5:70:29:4f:89:e6:
         d7:7d:c7:37:67:99:14:6e:f1:2c:d3:cc:3f:53:01:f8:99:a7:
         c0:91:11:03:6a:34:d0:bc:d0:4e:4b:1b:6b:86:48:1f:6d:c4:
         fe:9d:45:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:51:17 2025 by rpki-client