Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
File:                     TRThryL1OyL1be8C63LqXda-d-I.mft (raw, json)
Hash identifier:          xSqnx3J6yXpjtVUs0z8RvPxrEKHUeD0Yqk/iN1h5D+w=
Subject key identifier:   20:F1:DA:22:3C:9B:E7:11:16:56:DB:C3:F4:D5:C3:58:CC:97:FF:3A
Authority key identifier: 4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2
Certificate issuer:       /CN=A91FE75F/serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2
Certificate serial:       02C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
Manifest number:          08D4
Signing time:             Sun 20 Jul 2025 22:58:51 +0000
Manifest this update:     Sun 20 Jul 2025 22:58:51 +0000
Manifest next update:     Sun 27 Jul 2025 22:58:51 +0000
Files and hashes:         1: TRThryL1OyL1be8C63LqXda-d-I.crl (hash: VZ82tZLUQ9I6VOUNLjWyp2Q/B2Fxn+h6sjFHetgIHfA=)
                          2: C93E74B8D19511EEA71C3920C4F9AE02.roa (hash: 5yEwO4ZnTC2CHQn3tYL6GNEeTVAOOIXAZLN/7OfHXIo=)
                          3: D734CCEA1E0A11EF87335F33C4F9AE02.roa (hash: Zn/90qwbG+0Df96/zQSMkzHyx6xwf0/RZMauir90ZH8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl
                          rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 22:58:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 705 (0x2c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE75F, serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2
        Validity
            Not Before: Jul 20 22:58:51 2025 GMT
            Not After : Jul 27 22:58:51 2025 GMT
        Subject: CN=687d74ab-ad10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:48:6c:23:fb:8f:fd:24:ad:16:42:ea:4f:f2:
                    3e:2a:ba:41:c8:04:13:dc:35:9c:b7:95:98:0c:f0:
                    d4:b5:27:f7:5f:d6:27:3b:f5:8d:1a:bb:bb:69:31:
                    18:be:b5:3b:36:4e:b3:f1:2d:e4:8b:b5:b0:88:4f:
                    7e:a8:7a:33:50:77:de:b1:de:27:3e:16:c2:b8:47:
                    47:c2:14:46:81:6c:fc:47:0d:bc:a9:be:b2:fd:8e:
                    0c:b0:42:39:1e:a7:28:5f:31:fb:b4:fb:99:80:3b:
                    c9:12:a8:77:9b:eb:42:3c:1a:7e:21:6d:a7:27:a7:
                    92:df:ec:bb:d2:a6:59:fa:93:35:01:c0:d7:bf:6b:
                    e3:43:17:39:52:23:e0:b4:f5:98:ad:dc:09:79:61:
                    95:02:46:41:a6:fe:c4:78:6f:f6:20:60:44:5d:bf:
                    9d:cc:dd:18:ff:d6:c5:23:0f:8c:1e:9e:9f:ea:37:
                    ee:32:24:4a:33:f1:70:10:5f:ff:7c:b7:e8:86:7a:
                    f8:02:5a:fc:0a:dd:27:ab:4e:f4:85:0b:cc:15:e8:
                    72:80:13:5b:25:41:12:ed:9c:07:16:22:7e:4f:f3:
                    6e:18:13:cd:e6:d9:30:12:f7:29:f7:e6:4b:28:c9:
                    ae:93:f0:56:ba:ee:8b:55:d2:39:84:f4:b2:57:f3:
                    bf:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F1:DA:22:3C:9B:E7:11:16:56:DB:C3:F4:D5:C3:58:CC:97:FF:3A
            X509v3 Authority Key Identifier:
                keyid:4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c1:85:1f:a6:a4:9f:18:4a:f5:e0:3b:76:1e:b7:4c:c4:5d:
         a2:d7:e2:63:b9:92:4e:15:a0:c1:b4:5c:8c:8f:87:ce:5f:4a:
         21:7e:eb:f9:ce:78:49:05:6d:83:b1:bf:e2:ed:2b:51:57:64:
         af:58:b2:33:56:78:e3:17:1b:44:c0:4a:97:3e:48:a8:c7:f0:
         0e:75:bb:2a:16:1b:e1:c9:15:7f:1e:64:51:88:7f:42:33:f6:
         3f:b6:f0:73:b6:9c:ab:8d:c8:b9:a5:60:a3:af:84:17:7a:52:
         8f:95:2d:80:57:60:22:ea:e8:c9:66:d6:7d:12:b4:bb:f6:e4:
         87:3c:1b:c6:06:8c:f4:5d:93:6e:bc:9e:f5:03:7a:b8:1c:8c:
         7d:d0:de:ef:60:0a:f1:b7:7a:78:1b:f0:c0:84:20:f3:aa:0a:
         20:66:a6:b1:97:3c:30:3d:e3:7d:01:fd:d8:92:6e:29:f9:ae:
         41:6c:cc:98:51:dd:b3:19:72:ac:62:3f:07:f9:c9:ab:48:64:
         72:27:18:73:5b:05:d5:71:43:a5:11:fc:7d:6f:3b:4e:4c:56:
         19:99:70:fd:f1:9f:a8:82:8a:af:e4:df:0e:33:35:f8:8a:37:
         d9:3f:7d:3c:35:37:b1:ed:bc:e9:be:06:35:c6:c1:f5:bf:65:
         57:48:ab:82
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkU3NUYxMTAvBgNVBAUTKDREMTRFMUFGMjJGNTNCMjJGNTZERUYwMkVCNzJFQTVE
RDZCRTc3RTIwHhcNMjUwNzIwMjI1ODUxWhcNMjUwNzI3MjI1ODUxWjAYMRYwFAYD
VQQDEw02ODdkNzRhYi1hZDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs0hsI/uP/SStFkLqT/I+KrpByAQT3DWct5WYDPDUtSf3X9YnO/WNGru7aTEY
vrU7Nk6z8S3ki7WwiE9+qHozUHfesd4nPhbCuEdHwhRGgWz8Rw28qb6y/Y4MsEI5
HqcoXzH7tPuZgDvJEqh3m+tCPBp+IW2nJ6eS3+y70qZZ+pM1AcDXv2vjQxc5UiPg
tPWYrdwJeWGVAkZBpv7EeG/2IGBEXb+dzN0Y/9bFIw+MHp6f6jfuMiRKM/FwEF//
fLfohnr4Alr8Ct0nq070hQvMFehygBNbJUES7ZwHFiJ+T/NuGBPN5tkwEvcp9+ZL
KMmuk/BWuu6LVdI5hPSyV/O/jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDx2iI8
m+cRFlbbw/TVw1jMl/86MB8GA1UdIwQYMBaAFE0U4a8i9Tsi9W3vAuty6l3Wvnfi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc1Ri9BQjlFQjhDQUE5
RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9UUlRocnlMMU95TDFiZThDNjNMcVhkYS1k
LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RSVGhyeUwxT3lMMWJlOEM2M0xxWGRhLWQtSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RTc1Ri9BQjlFQjhDQUE5RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9UUlRocnlMMU95
TDFiZThDNjNMcVhkYS1kLUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBBwYUfpqSfGEr14Dt2HrdMxF2i1+JjuZJOFaDBtFyMj4fOX0ohfuv5
znhJBW2Dsb/i7StRV2SvWLIzVnjjFxtEwEqXPkiox/AOdbsqFhvhyRV/HmRRiH9C
M/Y/tvBztpyrjci5pWCjr4QXelKPlS2AV2Ai6ujJZtZ9ErS79uSHPBvGBoz0XZNu
vJ71A3q4HIx90N7vYArxt3p4G/DAhCDzqgogZqaxlzwwPeN9Af3Ykm4p+a5BbMyY
Ud2zGXKsYj8H+cmrSGRyJxhzWwXVcUOlEfx9bztOTFYZmXD98Z+ogoqv5N8OMzX4
ijfZP308NTex7bzpvgY1xsH1v2VXSKuC
-----END CERTIFICATE-----
Generated at Mon Jul 21 05:41:36 2025 by rpki-client