Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
File:                     Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft (raw, json)
Hash identifier:          2DbkDTDh+OtC2p0dcRUsfb5ReSlI/eERB1ttaMx0pvM=
Subject key identifier:   09:DB:3E:B5:AE:7A:4C:25:5B:68:1C:05:48:A9:40:12:94:AB:08:BA
Authority key identifier: 4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1
Certificate issuer:       /CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
Certificate serial:       026B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
Manifest number:          0261
Signing time:             Sat 19 Jul 2025 02:14:00 +0000
Manifest this update:     Sat 19 Jul 2025 02:13:59 +0000
Manifest next update:     Sat 26 Jul 2025 02:13:59 +0000
Files and hashes:         1: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl (hash: tKfZmjBJQ50MYw+VJ7RrFc/RdSaYgQvgOSIVi/bUxPg=)
                          2: 08B1833C1DE511F08883F35AC4F9AE02.roa (hash: qt/12QruPULSLrioUdGLIDziwQVI0MwcPO5Znz57Xok=)
                          3: C6C06E5CC18D11EEB2096833C4F9AE02.roa (hash: PCTX1P2d3fRflAHqzzXSaFtOX5cSgvLNCmPW7UGSTiw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl
                          rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 02:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 619 (0x26b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91632D7, serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
        Validity
            Not Before: Jul 19 02:13:59 2025 GMT
            Not After : Jul 26 02:13:59 2025 GMT
        Subject: CN=687aff67-9c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:97:99:60:48:3c:87:cb:34:0b:f4:6c:77:ee:
                    71:19:0d:3a:7e:66:8c:8f:b8:f9:dd:8e:3e:bf:9f:
                    6d:51:85:93:48:8a:a2:36:7e:ab:6f:c1:5e:a8:83:
                    e2:04:5f:14:dc:94:7a:36:3f:d1:8e:39:d3:3e:11:
                    dc:d6:0a:a4:cc:19:12:79:e8:4d:cd:89:0e:ff:c8:
                    7f:8f:25:ec:3e:26:67:b2:7f:d1:87:dd:3b:b8:c6:
                    53:1a:59:28:f9:49:73:33:4a:b6:41:48:bf:f1:02:
                    03:7b:17:60:10:72:75:0a:1b:89:33:93:b8:0c:d7:
                    1c:3a:5f:f2:0f:a7:21:af:d4:7a:0f:e8:f2:74:50:
                    55:90:51:1a:6d:83:de:dc:2e:09:93:71:38:20:19:
                    5c:cd:c6:e5:e1:a8:a3:0b:9e:ac:9f:4b:53:f6:ba:
                    03:a2:06:0e:ee:5b:ca:cd:9e:91:71:c6:41:ea:96:
                    7d:7a:7e:05:6c:97:64:5c:90:6a:8a:60:bc:84:1f:
                    1e:7e:15:a8:4a:f7:5c:da:34:99:ce:fa:35:c9:c6:
                    6f:6a:be:1b:9c:47:d4:5b:25:5d:fe:c3:99:af:b0:
                    dd:42:1d:97:da:e4:f4:94:1a:40:15:c6:fc:06:63:
                    b2:13:f1:7f:e8:82:67:de:42:41:73:6e:3e:80:dc:
                    35:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DB:3E:B5:AE:7A:4C:25:5B:68:1C:05:48:A9:40:12:94:AB:08:BA
            X509v3 Authority Key Identifier:
                keyid:4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f2:7a:c8:48:2a:ca:d8:f2:4f:43:1a:92:d0:79:92:62:a7:
         22:64:e1:b4:6c:64:71:1b:21:b3:5f:57:4d:e9:88:26:50:60:
         07:99:fe:79:49:b6:2d:ca:29:b4:16:f9:a4:13:1f:2a:df:97:
         d7:a4:7f:11:f5:41:73:2a:84:4a:e2:59:66:d8:25:e9:67:88:
         94:35:42:89:b2:42:bd:1d:87:48:7a:a1:cf:14:23:b4:bd:92:
         bb:47:19:53:e2:a6:41:ad:1d:ed:b6:65:eb:d3:c7:dc:14:07:
         59:51:83:2d:0f:f3:73:7b:c1:fe:e9:ff:f6:06:64:09:b8:88:
         77:61:7c:7d:6d:3e:e6:6f:96:a4:d3:ea:79:cd:2f:48:0c:76:
         d0:2c:cd:1d:87:03:31:49:24:93:77:6d:2d:14:59:4d:14:21:
         6d:f9:de:72:ca:51:1f:89:42:2b:cb:d6:d0:4c:2c:27:a8:17:
         56:4f:83:2f:7d:8d:67:a4:7a:f8:b2:d1:03:59:c5:c3:6a:3f:
         6f:5c:ca:7e:75:65:13:9c:46:11:94:b0:c0:23:a7:26:4e:2b:
         df:88:49:aa:d5:11:32:3c:24:85:f5:e2:d8:e1:86:60:ff:c3:
         6e:e5:6d:23:15:d8:a1:c1:f0:89:1a:4d:c9:5c:8e:1c:d2:01:
         28:a4:a4:df
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjMyRDcxMTAvBgNVBAUTKDRFMDczNzg2NjdFQzc5RDUzRDY1MEU1MjREMUU4Rjk4
QjA4QzI4RTEwHhcNMjUwNzE5MDIxMzU5WhcNMjUwNzI2MDIxMzU5WjAYMRYwFAYD
VQQDEw02ODdhZmY2Ny05YzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzpeZYEg8h8s0C/Rsd+5xGQ06fmaMj7j53Y4+v59tUYWTSIqiNn6rb8FeqIPi
BF8U3JR6Nj/RjjnTPhHc1gqkzBkSeehNzYkO/8h/jyXsPiZnsn/Rh907uMZTGlko
+UlzM0q2QUi/8QIDexdgEHJ1ChuJM5O4DNccOl/yD6chr9R6D+jydFBVkFEabYPe
3C4Jk3E4IBlczcbl4aijC56sn0tT9roDogYO7lvKzZ6RccZB6pZ9en4FbJdkXJBq
imC8hB8efhWoSvdc2jSZzvo1ycZvar4bnEfUWyVd/sOZr7DdQh2X2uT0lBpAFcb8
BmOyE/F/6IJn3kJBc24+gNw17QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnbPrWu
ekwlW2gcBUipQBKUqwi6MB8GA1UdIwQYMBaAFE4HN4Zn7HnVPWUOUk0ej5iwjCjh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzJENy9GOTc5NTlDMjI0
MTcxMUVEOUMwQzcwMERDNEY5QUUwMi9UZ2MzaG1mc2VkVTlaUTVTVFI2UG1MQ01L
T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RnYzNobWZzZWRVOVpRNVNUUjZQbUxDTUtPRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MzJENy9GOTc5NTlDMjI0MTcxMUVEOUMwQzcwMERDNEY5QUUwMi9UZ2MzaG1mc2Vk
VTlaUTVTVFI2UG1MQ01LT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCT8nrISCrK2PJPQxqS0HmSYqciZOG0bGRxGyGzX1dN6YgmUGAHmf55
SbYtyim0FvmkEx8q35fXpH8R9UFzKoRK4llm2CXpZ4iUNUKJskK9HYdIeqHPFCO0
vZK7RxlT4qZBrR3ttmXr08fcFAdZUYMtD/Nze8H+6f/2BmQJuIh3YXx9bT7mb5ak
0+p5zS9IDHbQLM0dhwMxSSSTd20tFFlNFCFt+d5yylEfiUIry9bQTCwnqBdWT4Mv
fY1npHr4stEDWcXDaj9vXMp+dWUTnEYRlLDAI6cmTivfiEmq1REyPCSF9eLY4YZg
/8Nu5W0jFdihwfCJGk3JXI4c0gEopKTf
-----END CERTIFICATE-----
Generated at Sun Jul 20 10:36:23 2025 by rpki-client