Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
File:                     TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft (raw, json)
Hash identifier:          QktQafiejLCKaRdHrmbF+3PjQWqlvAwzPtu5XvsTgM8=
Subject key identifier:   F1:FE:0E:D4:DB:8D:94:F1:3C:6F:C0:7F:B4:24:57:BC:6E:1D:C7:85
Authority key identifier: 4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03
Certificate issuer:       /CN=A913344F/serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603
Certificate serial:       10B0
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
Manifest number:          10A7
Signing time:             Thu 12 Jun 2025 17:14:13 +0000
Manifest this update:     Thu 12 Jun 2025 17:14:13 +0000
Manifest next update:     Thu 19 Jun 2025 17:14:13 +0000
Files and hashes:         1: TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl (hash: aHg+eS1GnF3eO4X3nRoIdzx/9wnPt/0lSIQNRjVyFss=)
                          2: 10CDE53E2C4111E98AA5057DC4F9AE02.roa (hash: XRUvAzYaseIVxGtch+U0AQhcNiwJ6tjLkzEhHdxkHCM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl
                          rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 17:14:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4272 (0x10b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913344F, serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603
        Validity
            Not Before: Jun 12 17:14:13 2025 GMT
            Not After : Jun 19 17:14:13 2025 GMT
        Subject: CN=684b0ae5-04a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2b:de:01:89:d9:af:3c:46:d7:6c:39:ab:34:
                    65:31:08:6b:bf:74:11:d1:a2:5d:5c:f0:fb:a6:ee:
                    6a:15:9b:95:39:25:ce:58:8d:c9:b4:df:7e:61:fe:
                    15:62:fb:0a:8b:ac:04:00:12:46:41:ab:5c:3a:d4:
                    94:7b:df:40:b8:2c:5b:56:21:a9:9b:8d:df:2d:7e:
                    32:40:c1:1c:c7:2c:ff:3c:ea:45:7d:d8:c6:ae:9a:
                    50:34:f6:1e:a9:5a:1e:54:95:3f:77:49:96:04:6e:
                    0b:07:cd:7a:2f:fc:e7:f3:a0:29:86:e0:d7:6e:a0:
                    cb:4f:2d:3c:c6:ba:2c:50:a4:fa:ee:33:86:15:4f:
                    90:5e:86:f7:a4:33:17:36:20:ef:93:aa:b7:2d:26:
                    46:39:88:7d:6e:23:5a:10:59:52:2b:e4:eb:12:85:
                    28:eb:8b:d7:91:a7:4a:5c:6a:0c:12:24:3b:29:af:
                    ef:0d:12:3c:e1:0d:39:d9:42:1b:d5:6b:b0:fd:c8:
                    bd:81:05:0f:c4:f5:d3:f2:c8:fb:7a:8a:36:21:31:
                    d6:f5:d2:66:c9:c6:c2:e4:67:69:8a:85:a0:0e:ab:
                    89:62:1d:2b:86:fe:b2:28:fa:66:5f:5c:d5:95:40:
                    67:f9:dc:80:97:0f:36:a2:e0:93:69:60:89:51:88:
                    47:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FE:0E:D4:DB:8D:94:F1:3C:6F:C0:7F:B4:24:57:BC:6E:1D:C7:85
            X509v3 Authority Key Identifier:
                keyid:4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:90:b7:b3:1e:ae:ef:0b:f5:48:81:ef:51:a1:6a:17:72:3f:
         98:e4:ab:09:50:4e:7f:a6:99:a4:02:2f:f1:ac:fa:ea:95:78:
         be:22:c0:73:85:21:dd:33:cb:b6:b9:c3:cf:4b:60:54:9d:29:
         e4:ea:b7:8c:48:c6:4e:66:2b:f8:4e:22:eb:b5:4e:ba:b3:76:
         65:65:8a:cf:23:47:18:f1:84:c7:80:f4:27:86:dd:5f:2a:10:
         0c:aa:12:ce:0f:12:4e:74:e0:9f:3c:1d:bc:1f:82:f5:ed:2b:
         3e:d7:ac:5f:e8:74:58:04:4e:19:6f:8d:bc:b8:6d:6e:19:f9:
         98:7d:dd:f8:1a:61:4c:a0:0f:54:f9:c7:94:c7:60:45:e4:a5:
         cf:b1:8c:46:8b:1c:09:4b:fd:e2:03:3e:69:91:e5:d2:f2:33:
         6a:26:89:8a:49:73:55:ba:43:2b:87:73:6e:fb:f8:d1:69:f4:
         53:9d:3b:ff:f9:64:57:5e:82:6c:5c:dd:db:f6:fd:fc:f2:7f:
         e3:0d:7c:11:43:3f:f4:75:88:60:21:ef:ba:4d:0d:12:1f:56:
         51:ee:14:d9:b7:8f:9b:24:40:5e:76:3d:f0:c9:a8:e8:cb:03:
         3d:d6:78:ed:dc:59:02:58:23:d9:e6:9a:13:06:87:38:b1:cd:
         f5:84:fe:d3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICELAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzM0NEYxMTAvBgNVBAUTKDRDQjRDMzBCMjRBRjgxMzg4OTVGQTRFNUQxODcyOTcz
NzkwNjA2MDMwHhcNMjUwNjEyMTcxNDEzWhcNMjUwNjE5MTcxNDEzWjAYMRYwFAYD
VQQDEw02ODRiMGFlNS0wNGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxSveAYnZrzxG12w5qzRlMQhrv3QR0aJdXPD7pu5qFZuVOSXOWI3JtN9+Yf4V
YvsKi6wEABJGQatcOtSUe99AuCxbViGpm43fLX4yQMEcxyz/POpFfdjGrppQNPYe
qVoeVJU/d0mWBG4LB816L/zn86AphuDXbqDLTy08xrosUKT67jOGFU+QXob3pDMX
NiDvk6q3LSZGOYh9biNaEFlSK+TrEoUo64vXkadKXGoMEiQ7Ka/vDRI84Q052UIb
1Wuw/ci9gQUPxPXT8sj7eoo2ITHW9dJmycbC5GdpioWgDquJYh0rhv6yKPpmX1zV
lUBn+dyAlw82ouCTaWCJUYhHKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPH+DtTb
jZTxPG/Af7QkV7xuHceFMB8GA1UdIwQYMBaAFEy0wwskr4E4iV+k5dGHKXN5BgYD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ0Ri8wMDAzNzVBNDI5
MEIxMUU5OTlDNUVCMTRDNEY5QUUwMi9UTFREQ3lTdmdUaUpYNlRsMFljcGMza0dC
Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1RMVERDeVN2Z1RpSlg2VGwwWWNwYzNrR0JnTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MzQ0Ri8wMDAzNzVBNDI5MEIxMUU5OTlDNUVCMTRDNEY5QUUwMi9UTFREQ3lTdmdU
aUpYNlRsMFljcGMza0dCZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCrkLezHq7vC/VIge9RoWoXcj+Y5KsJUE5/ppmkAi/xrPrqlXi+IsBz
hSHdM8u2ucPPS2BUnSnk6reMSMZOZiv4TiLrtU66s3ZlZYrPI0cY8YTHgPQnht1f
KhAMqhLODxJOdOCfPB28H4L17Ss+16xf6HRYBE4Zb428uG1uGfmYfd34GmFMoA9U
+ceUx2BF5KXPsYxGixwJS/3iAz5pkeXS8jNqJomKSXNVukMrh3Nu+/jRafRTnTv/
+WRXXoJsXN3b9v388n/jDXwRQz/0dYhgIe+6TQ0SH1ZR7hTZt4+bJEBedj3wyajo
ywM91njt3FkCWCPZ5poTBoc4sc31hP7T
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:22:45 2025 by rpki-client