Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft
File:                     TQJNfuk78G548gwtl4XADK7tbkQ.mft (raw, json)
Hash identifier:          SRRdNWk0V5ZEmc81OpX28Kb7r2vsfYcCT+FsI13v8KY=
Subject key identifier:   57:7B:0C:B7:B0:90:F2:43:C7:61:4C:C4:29:7D:03:22:E9:BF:13:CD
Authority key identifier: 4D:02:4D:7E:E9:3B:F0:6E:78:F2:0C:2D:97:85:C0:0C:AE:ED:6E:44
Certificate issuer:       /CN=A9134B88/serialNumber=4D024D7EE93BF06E78F20C2D9785C00CAEED6E44
Certificate serial:       0739
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQJNfuk78G548gwtl4XADK7tbkQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft
Manifest number:          0739
Signing time:             Wed 02 Apr 2025 21:41:44 +0000
Manifest this update:     Wed 02 Apr 2025 21:41:43 +0000
Manifest next update:     Wed 09 Apr 2025 21:41:43 +0000
Files and hashes:         1: TQJNfuk78G548gwtl4XADK7tbkQ.crl (hash: G+2rl3eCDcYfuuYM2dIlyo6ECVXL0L+h36gDV6TjXq0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.crl
                          rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQJNfuk78G548gwtl4XADK7tbkQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 21:41:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1849 (0x739)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134B88
        Validity
            Not Before: Apr  2 21:41:43 2025 GMT
            Not After : Apr  9 21:41:43 2025 GMT
        Subject: CN=67edaf17-a20a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:48:2f:d8:3c:fa:e1:12:fb:a4:6c:a3:01:b7:
                    c4:df:b4:94:40:28:7b:1f:cb:f9:4d:0e:4c:57:ee:
                    87:6f:da:19:38:c9:4c:34:5b:2a:21:c2:8a:d9:5a:
                    ba:30:76:e6:52:67:44:ca:4a:22:85:0c:cd:41:dd:
                    a4:91:aa:72:bf:af:b7:f3:74:6c:c8:d4:45:52:af:
                    38:fa:88:54:c6:62:5e:59:e2:9c:3e:18:f2:d7:14:
                    96:af:52:71:7e:64:40:a5:c4:fe:35:9d:b4:af:a5:
                    61:cb:8f:20:84:d0:69:02:4b:b8:7b:16:05:1f:2d:
                    a3:8c:12:30:b7:27:f7:6c:b4:7d:6b:b4:c5:8e:e3:
                    d7:86:0f:f9:cc:58:32:3c:30:54:da:bb:b1:e6:0e:
                    50:f5:23:b4:c1:cc:10:44:c0:d1:87:db:a5:83:c2:
                    4b:43:91:8a:ce:1d:6a:95:13:ad:95:5c:6e:bb:b4:
                    4a:a2:f7:78:62:b3:04:b8:3f:21:8d:ad:52:bb:1e:
                    43:38:8c:a6:e5:b0:ed:c0:c0:bc:e3:bf:f2:16:d5:
                    e5:f0:63:7b:b9:33:ff:60:d4:3e:79:bc:b3:06:82:
                    d3:14:d5:09:c5:2b:3e:98:fd:22:ce:0d:09:9f:1e:
                    95:57:01:50:50:66:af:9d:b4:40:e6:37:84:e5:89:
                    9d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7B:0C:B7:B0:90:F2:43:C7:61:4C:C4:29:7D:03:22:E9:BF:13:CD
            X509v3 Authority Key Identifier:
                keyid:4D:02:4D:7E:E9:3B:F0:6E:78:F2:0C:2D:97:85:C0:0C:AE:ED:6E:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQJNfuk78G548gwtl4XADK7tbkQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:c6:1f:d3:85:5c:8f:36:05:86:fc:98:2e:4e:74:73:4c:e1:
         c8:89:bf:75:0b:dd:04:a3:52:1f:56:b6:e4:db:45:84:8f:7c:
         61:1c:2c:e7:5e:7a:76:9c:ba:5a:b9:45:d0:c5:10:a0:ae:b2:
         9f:43:25:d1:36:af:ae:13:8b:89:47:df:b4:c1:74:48:f5:cf:
         4c:0d:f1:c8:d1:f4:5a:a9:c7:76:b9:d5:24:d9:1e:65:af:eb:
         31:8b:2e:25:29:ce:f4:3c:26:a9:71:f6:3b:62:8f:e3:40:db:
         45:48:44:d1:e8:f1:46:bf:cc:e6:d5:3c:78:58:d5:05:37:1b:
         8f:9b:e6:ab:03:64:b0:35:2e:c0:d7:76:42:14:18:31:4b:a6:
         bf:45:5e:ec:c2:73:1b:0c:d8:06:71:99:52:7e:3d:ee:54:01:
         b1:24:ef:09:97:d3:e5:15:f8:e4:4d:8d:b6:8a:72:ab:52:b5:
         af:75:49:f0:93:a4:27:ad:cb:04:d1:d9:f2:42:9c:5f:82:35:
         53:4a:cd:d6:68:62:55:1b:b8:8b:c0:b6:52:b6:01:3b:ce:fb:
         d0:83:ba:6d:da:73:3a:d4:ba:69:d2:e0:07:54:79:c3:8e:14:
         b8:4e:4c:48:18:02:60:59:c1:b1:66:f9:e2:e5:71:90:6f:44:
         be:9d:76:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:35:56 2025 by rpki-client