Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
File:                     TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft (raw, json)
Hash identifier:          XYJO8AQu1b8Y+SZdlxTox1gNOG/VRpNzo7N0mJ2G2fk=
Subject key identifier:   85:F3:DE:50:DE:D7:64:22:DB:A7:F1:12:E9:86:30:EE:4B:2B:77:47
Authority key identifier: 4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03
Certificate issuer:       /CN=A913344F/serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603
Certificate serial:       10FF
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
Manifest number:          10F5
Signing time:             Tue 04 Nov 2025 17:21:44 +0000
Manifest this update:     Tue 04 Nov 2025 17:21:44 +0000
Manifest next update:     Tue 11 Nov 2025 17:21:44 +0000
Files and hashes:         1: TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl (hash: PwGVmoUHtzWAljRZTtngvtwR8e97pbwctFwHBh6N0rY=)
                          2: 10CDE53E2C4111E98AA5057DC4F9AE02.roa (hash: 5meBlAmMOmT720cyEIa4c/tv1J4emStSE4Ky/WBp3tQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl
                          rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 17:21:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4351 (0x10ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913344F, serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603
        Validity
            Not Before: Nov  4 17:21:44 2025 GMT
            Not After : Nov 11 17:21:44 2025 GMT
        Subject: CN=690a3628-8924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:48:da:36:41:f1:3a:18:d8:80:18:03:cd:c4:
                    d9:3b:8e:e1:d5:f6:ef:02:82:dc:08:07:c2:62:38:
                    60:31:14:3c:5f:19:65:22:ec:ab:10:89:bd:a1:6d:
                    8b:87:5a:17:11:d3:88:7c:89:b1:3d:c3:d7:d3:7b:
                    76:36:c3:42:97:6c:fb:f3:04:c3:30:d5:8a:73:39:
                    ef:f0:f9:15:de:30:1b:ec:9a:c7:e0:d5:13:fe:dd:
                    92:0a:04:51:79:7d:4e:f3:a1:78:47:db:a9:a0:22:
                    86:4e:9e:37:ed:d4:d2:8b:37:6e:72:04:10:89:c5:
                    ea:1b:1e:cb:01:95:57:15:9a:7d:1a:a1:00:0a:5e:
                    03:07:4a:48:2b:81:91:a0:5d:e6:68:ab:56:aa:95:
                    bd:39:be:2e:9e:a2:4a:dc:72:11:8f:c4:ab:70:83:
                    c3:0e:f9:c9:21:c8:76:a6:a5:5e:80:57:d5:f2:cc:
                    00:27:82:f8:c6:76:38:55:e5:05:88:7b:54:c4:bd:
                    ad:fd:4a:9e:ab:75:27:2c:90:f0:f9:1e:32:78:51:
                    25:83:42:f3:37:f0:be:7e:7b:62:7e:7d:af:1b:11:
                    3f:42:fe:ea:13:d1:56:58:49:6d:37:1d:c3:65:cd:
                    c2:5c:06:a6:92:ba:89:08:1c:b1:3b:96:e7:f0:1e:
                    6d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F3:DE:50:DE:D7:64:22:DB:A7:F1:12:E9:86:30:EE:4B:2B:77:47
            X509v3 Authority Key Identifier:
                keyid:4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:55:28:23:b2:d5:47:95:da:ee:ee:dc:d2:d7:c7:b1:aa:15:
         4c:d2:c1:76:4c:2e:83:8e:3c:ce:91:4d:a5:98:6e:dd:f9:32:
         43:d5:10:70:86:b1:59:c1:18:64:68:a9:0a:02:71:ef:4c:a7:
         36:fa:97:32:ea:61:f4:59:f8:74:1c:77:cc:b4:23:7b:cd:f4:
         4a:46:9a:b9:f9:a9:33:65:7b:58:8b:a1:e1:27:30:77:db:96:
         bb:a9:d3:ea:44:95:73:99:83:37:c6:53:4e:ff:2c:79:8b:e2:
         55:1c:40:37:f6:fa:96:4a:4e:aa:4e:15:5e:3c:51:0c:36:8c:
         22:de:9e:92:3b:24:8a:8e:72:3d:ca:93:3b:cd:a4:d8:e0:dc:
         f0:b3:c4:e7:9a:52:7b:28:b0:3a:4f:61:8d:82:ab:f2:2f:8f:
         4d:d6:1b:42:82:b7:79:91:b7:94:dc:99:19:b4:b1:4c:c9:e4:
         b9:48:46:ca:0e:49:81:cc:a7:f3:b7:58:71:a7:0d:8f:49:18:
         f2:97:19:ed:28:88:7c:ea:97:29:13:e8:9a:9e:c4:8e:de:5d:
         c9:78:4c:e9:d6:8c:17:c8:64:71:fc:d5:cf:43:48:57:2c:dd:
         e9:b9:d3:76:19:1c:75:be:83:f6:f0:d7:80:ab:41:a9:cb:f7:
         fb:89:05:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:21:02 2025 by rpki-client