Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft
File:                     TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft (raw, json)
Hash identifier:          jtSptqQ1GvCgBtulXNavFbGgmiRkz9RF0tRQ8nCof6o=
Subject key identifier:   0A:B7:B1:48:FF:80:B0:DB:EA:C4:D4:07:6B:93:EA:03:4E:3F:55:A6
Authority key identifier: 4E:02:7D:29:DF:58:7C:10:1E:55:F4:CE:48:E6:90:30:63:19:CD:AB
Certificate issuer:       /CN=A91F1962/serialNumber=4E027D29DF587C101E55F4CE48E690306319CDAB
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft
Manifest number:          55
Signing time:             Mon 03 Nov 2025 07:12:44 +0000
Manifest this update:     Mon 03 Nov 2025 07:12:44 +0000
Manifest next update:     Mon 10 Nov 2025 07:12:44 +0000
Files and hashes:         1: TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl (hash: ri9O/IPQmS3UiudqwQDNcLt/J/2K4TiQYMgOcoo3+7I=)
                          2: 6AD3BE8A38DF11F09B694578C4F9AE02.roa (hash: 9rhYh2K9C4geTpdroXBWzRdnuI2oKhp0zRB66YiZ9aA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl
                          rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 07:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1962, serialNumber=4E027D29DF587C101E55F4CE48E690306319CDAB
        Validity
            Not Before: Nov  3 07:12:44 2025 GMT
            Not After : Nov 10 07:12:44 2025 GMT
        Subject: CN=690855ec-e9b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6f:19:46:76:9b:52:f7:e2:37:19:1f:3d:5d:
                    a7:fd:d6:28:da:e2:93:07:a5:87:aa:d1:ed:b7:45:
                    7f:fd:eb:06:8c:52:80:b5:72:97:55:a7:b4:58:4d:
                    a7:26:4b:70:77:10:41:31:5c:22:b4:1b:61:86:05:
                    4f:56:f4:24:7c:44:a3:dc:6f:49:7b:0f:08:c7:67:
                    42:2d:ce:9b:17:e0:90:49:c8:35:65:f9:73:e7:b6:
                    c9:2a:65:39:04:b8:ae:09:d0:30:e7:73:7d:b6:c1:
                    72:07:3b:61:5b:78:45:32:9b:04:96:72:6d:eb:fc:
                    30:80:21:84:4e:e8:6d:60:8e:9c:7a:0c:da:c9:8d:
                    4f:a2:26:0c:7d:5a:3b:55:e8:f3:ca:68:3f:2e:81:
                    40:5a:06:33:5d:ca:3c:0d:94:07:28:90:9a:a8:18:
                    dc:cd:db:9d:d5:b0:9d:26:0a:3b:0c:85:d0:a4:20:
                    bc:95:e8:d6:9f:5d:db:3a:bc:07:53:76:59:b3:84:
                    78:f0:f9:53:73:98:6d:38:a7:9a:22:b9:f5:df:5a:
                    eb:0d:b9:6c:c2:3a:cc:8f:7d:56:5c:58:26:15:e7:
                    f4:a9:ed:0e:6e:f0:44:aa:b8:2a:0d:4b:74:64:12:
                    7d:4d:68:fa:8c:a9:1b:b7:0a:58:87:d8:83:a1:e1:
                    f1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B7:B1:48:FF:80:B0:DB:EA:C4:D4:07:6B:93:EA:03:4E:3F:55:A6
            X509v3 Authority Key Identifier:
                keyid:4E:02:7D:29:DF:58:7C:10:1E:55:F4:CE:48:E6:90:30:63:19:CD:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:15:9c:6b:2d:ac:2d:fe:7e:72:87:e7:c8:6b:cc:c4:43:40:
         34:dc:15:9b:90:03:9c:1e:55:e5:c6:e5:a0:1b:1e:e2:5d:0b:
         2b:51:3d:da:77:56:19:f8:e8:3f:74:71:23:e1:a6:49:92:04:
         7e:1d:b5:53:d5:9a:9f:40:2a:f3:23:04:72:0b:55:5a:db:6f:
         dd:2c:8f:a1:ad:a1:f5:1d:c2:b8:cd:32:71:1b:5e:51:75:d9:
         1a:cf:92:2c:a9:90:8a:13:d8:de:06:f0:38:c9:8a:99:9a:0e:
         2d:b7:75:00:95:04:c6:55:54:84:fd:07:8d:c7:4d:51:3b:d2:
         8c:a4:02:0e:95:39:f3:07:ef:7f:35:6c:7c:93:06:1b:9a:8f:
         aa:02:80:3f:a3:a9:9d:f6:10:b4:75:51:79:f1:c4:3a:23:86:
         72:65:d6:ca:f8:f2:d3:c1:4d:30:21:6d:7c:b0:3a:8e:9a:8c:
         e4:bb:7d:e3:2a:1a:c2:f4:b6:f7:db:f3:c6:0a:72:ac:2a:a0:
         7c:fe:f8:8f:53:55:12:df:87:63:23:25:7e:f1:fb:23:38:6a:
         ee:02:31:be:d0:3a:ce:0a:8d:fb:29:4a:99:f0:03:41:80:e7:
         6b:09:68:f1:e0:ce:69:26:dd:5c:19:4a:7b:ed:b8:4a:c6:51:
         de:3b:55:30
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
MTk2MjExMC8GA1UEBRMoNEUwMjdEMjlERjU4N0MxMDFFNTVGNENFNDhFNjkwMzA2
MzE5Q0RBQjAeFw0yNTExMDMwNzEyNDRaFw0yNTExMTAwNzEyNDRaMBgxFjAUBgNV
BAMTDTY5MDg1NWVjLWU5YjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCrbxlGdptS9+I3GR89Xaf91ija4pMHpYeq0e23RX/96waMUoC1cpdVp7RYTacm
S3B3EEExXCK0G2GGBU9W9CR8RKPcb0l7DwjHZ0ItzpsX4JBJyDVl+XPntskqZTkE
uK4J0DDnc322wXIHO2FbeEUymwSWcm3r/DCAIYRO6G1gjpx6DNrJjU+iJgx9WjtV
6PPKaD8ugUBaBjNdyjwNlAcokJqoGNzN253VsJ0mCjsMhdCkILyV6NafXds6vAdT
dlmzhHjw+VNzmG04p5oiufXfWusNuWzCOsyPfVZcWCYV5/Sp7Q5u8ESquCoNS3Rk
En1NaPqMqRu3CliH2IOh4fG/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCrexSP+A
sNvqxNQHa5PqA04/VaYwHwYDVR0jBBgwFoAUTgJ9Kd9YfBAeVfTOSOaQMGMZzasw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxOTYyL0I3NTM4MEM0Mzcx
MzExRjBBQjBEOUU0RUM0RjlBRTAyL1RnSjlLZDlZZkJBZVZmVE9TT2FRTUdNWnph
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVGdKOUtkOVlmQkFlVmZUT1NPYVFNR01aemFzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx
OTYyL0I3NTM4MEM0MzcxMzExRjBBQjBEOUU0RUM0RjlBRTAyL1RnSjlLZDlZZkJB
ZVZmVE9TT2FRTUdNWnphcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJ8VnGstrC3+fnKH58hrzMRDQDTcFZuQA5weVeXG5aAbHuJdCytRPdp3
Vhn46D90cSPhpkmSBH4dtVPVmp9AKvMjBHILVVrbb90sj6GtofUdwrjNMnEbXlF1
2RrPkiypkIoT2N4G8DjJipmaDi23dQCVBMZVVIT9B43HTVE70oykAg6VOfMH7381
bHyTBhuaj6oCgD+jqZ32ELR1UXnxxDojhnJl1sr48tPBTTAhbXywOo6ajOS7feMq
GsL0tvfb88YKcqwqoHz++I9TVRLfh2MjJX7x+yM4au4CMb7QOs4KjfspSpnwA0GA
52sJaPHgzmkm3VwZSnvtuErGUd47VTA=
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:03:11 2025 by rpki-client