Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft
File:                     TSeYiynlKyZQPcq8BBqz9h8kEFE.mft (raw, json)
Hash identifier:          8TqwqzucWxSYY+gmK/WY1C85Q2nWc0Bwh1vLBl219oY=
Subject key identifier:   26:FA:9B:02:26:AD:54:D7:85:11:9E:97:D4:3E:6E:74:82:FB:7B:90
Authority key identifier: 4D:27:98:8B:29:E5:2B:26:50:3D:CA:BC:04:1A:B3:F6:1F:24:10:51
Certificate issuer:       /CN=A91383D8/serialNumber=4D27988B29E52B26503DCABC041AB3F61F241051
Certificate serial:       05F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft
Manifest number:          05EA
Signing time:             Thu 18 Sep 2025 23:17:46 +0000
Manifest this update:     Thu 18 Sep 2025 23:17:45 +0000
Manifest next update:     Thu 25 Sep 2025 23:17:45 +0000
Files and hashes:         1: TSeYiynlKyZQPcq8BBqz9h8kEFE.crl (hash: pQUDFK9ZDhFumQW3I0v3JcJRpFcOaRcW3zVaMy0yx+g=)
                          2: F14DD31CCA2D11EB8B7FE060C4F9AE02.roa (hash: FUPhJ7viy8W3pQYFN/dbDBBE9qpZwOpzgVenyvyXp+0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.crl
                          rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1522 (0x5f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91383D8, serialNumber=4D27988B29E52B26503DCABC041AB3F61F241051
        Validity
            Not Before: Sep 18 23:17:45 2025 GMT
            Not After : Sep 25 23:17:45 2025 GMT
        Subject: CN=68cc931a-ccef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:01:09:68:86:e6:76:6d:2b:0f:31:76:25:60:
                    91:b3:28:02:23:9a:9e:ff:d5:66:2b:0c:fb:2d:c3:
                    79:6a:55:0e:5a:19:a0:ac:0d:53:1a:ee:fa:99:d4:
                    2e:6f:d9:f2:04:7f:83:f2:5c:79:68:cf:9c:50:82:
                    85:65:60:61:77:98:6c:2f:93:86:2d:ac:b5:90:45:
                    43:2a:22:73:b9:c5:18:9c:21:95:2b:f8:40:80:79:
                    5b:48:73:38:81:bf:47:9a:d9:03:ac:0d:ba:34:17:
                    e9:39:e2:88:12:89:e1:52:30:d2:4e:0e:43:b4:34:
                    04:8a:b6:64:2a:65:b2:80:de:f7:28:b9:64:ed:58:
                    3b:01:1f:cc:14:ec:12:9c:2f:57:9d:5f:3a:7d:09:
                    d6:b3:65:f4:68:c8:47:b0:92:b1:d9:70:e4:0d:4b:
                    47:f8:52:8a:43:3a:77:ac:06:b7:30:3a:ce:10:6f:
                    c5:37:db:20:d6:15:ba:70:4b:fd:fd:ad:ea:d6:9c:
                    c5:35:85:3e:13:5e:4f:24:f4:20:52:09:fa:8d:ad:
                    72:27:fd:43:5d:ff:0b:ef:34:1e:6f:ac:72:90:75:
                    bb:50:eb:ba:6f:fb:80:0f:98:bf:5a:53:1d:85:31:
                    df:b3:32:73:0f:1a:c8:4c:9a:d3:5c:3f:93:4c:55:
                    9c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FA:9B:02:26:AD:54:D7:85:11:9E:97:D4:3E:6E:74:82:FB:7B:90
            X509v3 Authority Key Identifier:
                keyid:4D:27:98:8B:29:E5:2B:26:50:3D:CA:BC:04:1A:B3:F6:1F:24:10:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:15:90:dc:f4:13:8d:15:6e:34:53:a6:ff:49:e6:32:67:5a:
         37:df:0c:38:c1:5b:4d:ea:f5:e8:5e:77:09:d5:e8:bc:20:c6:
         20:dd:48:bd:c4:29:41:81:bf:2b:10:01:56:f3:b1:9b:2d:7a:
         5a:4c:43:40:97:1e:c7:62:c3:33:e5:06:81:b2:44:04:f7:8e:
         39:b5:b9:55:4d:f3:c0:4e:06:49:87:d6:2b:5f:1d:be:93:61:
         be:48:e1:ad:75:6c:a9:a8:2b:12:4b:1c:95:32:ed:d4:53:39:
         81:8e:24:2b:bb:f2:a3:de:3e:d8:22:b8:5e:64:bd:c2:d3:f0:
         66:88:62:2a:f8:bf:dd:13:53:55:ca:9a:a9:36:96:36:71:aa:
         c0:26:e0:bd:07:d7:d3:44:7b:79:ef:de:81:97:5e:c8:a3:12:
         da:d6:80:1d:c9:4d:ab:ce:be:25:98:a9:5d:41:f5:fc:7c:34:
         6d:24:d2:6c:f5:2a:d9:20:69:06:ae:db:3f:e6:c8:01:c6:28:
         f9:f3:bb:bc:59:89:a8:04:f6:0f:25:37:27:f0:04:81:2e:1d:
         3f:d2:67:22:b3:f9:a1:37:14:60:82:eb:e7:48:90:b2:f9:26:
         a0:3d:34:76:d6:fa:46:98:e7:7e:a0:01:14:57:50:c3:31:cc:
         a4:21:9d:89
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzgzRDgxMTAvBgNVBAUTKDREMjc5ODhCMjlFNTJCMjY1MDNEQ0FCQzA0MUFCM0Y2
MUYyNDEwNTEwHhcNMjUwOTE4MjMxNzQ1WhcNMjUwOTI1MjMxNzQ1WjAYMRYwFAYD
VQQDEw02OGNjOTMxYS1jY2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnQEJaIbmdm0rDzF2JWCRsygCI5qe/9VmKwz7LcN5alUOWhmgrA1TGu76mdQu
b9nyBH+D8lx5aM+cUIKFZWBhd5hsL5OGLay1kEVDKiJzucUYnCGVK/hAgHlbSHM4
gb9HmtkDrA26NBfpOeKIEonhUjDSTg5DtDQEirZkKmWygN73KLlk7Vg7AR/MFOwS
nC9XnV86fQnWs2X0aMhHsJKx2XDkDUtH+FKKQzp3rAa3MDrOEG/FN9sg1hW6cEv9
/a3q1pzFNYU+E15PJPQgUgn6ja1yJ/1DXf8L7zQeb6xykHW7UOu6b/uAD5i/WlMd
hTHfszJzDxrITJrTXD+TTFWcGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCb6mwIm
rVTXhRGel9Q+bnSC+3uQMB8GA1UdIwQYMBaAFE0nmIsp5SsmUD3KvAQas/YfJBBR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNEOC8wOUNDMzYwQ0NB
MkIxMUVCQURGNTQ1NUVDNEY5QUUwMi9UU2VZaXlubEt5WlFQY3E4QkJxejloOGtF
RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RTZVlpeW5sS3laUVBjcThCQnF6OWg4a0VGRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODNEOC8wOUNDMzYwQ0NBMkIxMUVCQURGNTQ1NUVDNEY5QUUwMi9UU2VZaXlubEt5
WlFQY3E4QkJxejloOGtFRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAqFZDc9BONFW40U6b/SeYyZ1o33ww4wVtN6vXoXncJ1ei8IMYg3Ui9
xClBgb8rEAFW87GbLXpaTENAlx7HYsMz5QaBskQE9445tblVTfPATgZJh9YrXx2+
k2G+SOGtdWypqCsSSxyVMu3UUzmBjiQru/Kj3j7YIrheZL3C0/BmiGIq+L/dE1NV
ypqpNpY2carAJuC9B9fTRHt5796Bl17IoxLa1oAdyU2rzr4lmKldQfX8fDRtJNJs
9SrZIGkGrts/5sgBxij587u8WYmoBPYPJTcn8ASBLh0/0mcis/mhNxRgguvnSJCy
+SagPTR21vpGmOd+oAEUV1DDMcykIZ2J
-----END CERTIFICATE-----
Generated at Fri Sep 19 09:15:39 2025 by rpki-client