Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
File:                     TPLdZtykL-r2DDjnaVsDtD5-ets.mft (raw, json)
Hash identifier:          TgNxBXd43/4Q8UfK4FY59acT5RcZk4fpigQIW3N+JFc=
Subject key identifier:   8F:3B:94:BB:44:23:E8:8D:EF:8E:88:19:C5:BA:DC:0A:86:A2:1B:DF
Authority key identifier: 4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB
Certificate issuer:       /CN=A915C094/serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
Certificate serial:       0C99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
Manifest number:          0C80
Signing time:             Thu 10 Apr 2025 18:14:18 +0000
Manifest this update:     Thu 10 Apr 2025 18:14:18 +0000
Manifest next update:     Thu 17 Apr 2025 18:14:18 +0000
Files and hashes:         1: TPLdZtykL-r2DDjnaVsDtD5-ets.crl (hash: 9gjfrlYEOBhL+Yjne8GbwbhQzYTlDS0lmemDTbuctaw=)
                          2: 5630809A81B311EB9661A516C4F9AE02.roa (hash: ZttxHWyqYC+cKd0BdILvShFdkBjr28lgBuZeDhgrwKk=)
                          3: DF56C74C83A111EE8D40867CC4F9AE02.roa (hash: h7HweR/FfeHA80OZjTVSE+4DMIspzsFe+SSvbL7FG+c=)
                          4: 4C65E804F68911E98EF88758C4F9AE02.roa (hash: nVclf58inHRItWEODJ4FKUnmAP+f1Uxv1S86KdkjVqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl
                          rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Apr 2025 18:14:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3225 (0xc99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C094
        Validity
            Not Before: Apr 10 18:14:18 2025 GMT
            Not After : Apr 17 18:14:18 2025 GMT
        Subject: CN=67f80a7a-7338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9e:eb:e2:7d:8c:04:b3:b2:4b:3c:b5:6d:25:
                    c4:f3:f6:3a:62:a1:8b:7e:ec:2f:f2:f8:ce:de:a3:
                    87:04:c7:d1:47:34:c4:07:18:4c:3a:1c:4b:3f:28:
                    08:c9:47:99:2d:3c:5a:15:b4:b0:da:5e:4e:e7:f9:
                    28:f0:79:9a:8a:a2:ae:bf:c6:01:c2:11:c2:82:8b:
                    a0:dc:72:b4:07:8b:f0:c5:ca:4b:b6:9a:0b:46:d8:
                    50:c2:c3:d1:18:41:91:2a:50:e5:b4:8d:44:07:de:
                    63:18:a3:23:a2:ff:ef:71:18:aa:d7:bb:06:f2:30:
                    04:37:c0:7a:fb:73:40:45:a1:3b:d5:73:6a:b1:38:
                    57:a4:b7:b8:c1:2f:c8:6d:f8:8b:d2:37:a3:cf:3c:
                    05:9c:16:cb:ad:e9:ce:d8:cf:8b:0e:ad:b0:9b:90:
                    da:04:b6:0e:b1:fb:3f:20:e5:e1:c3:92:9f:23:89:
                    24:fb:bd:61:ed:62:ea:9c:dc:c9:e2:00:5d:5f:a4:
                    45:7a:1e:9b:4d:0a:7d:35:02:e6:b6:65:03:99:f7:
                    38:2e:14:fb:82:b2:7f:14:3f:c2:1f:73:cc:fe:2d:
                    6a:d8:12:5d:2b:f3:5d:25:c3:b0:57:ca:0b:c6:1d:
                    d7:c0:e3:33:22:2a:8d:60:af:1b:2b:18:bf:3c:0d:
                    12:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3B:94:BB:44:23:E8:8D:EF:8E:88:19:C5:BA:DC:0A:86:A2:1B:DF
            X509v3 Authority Key Identifier:
                keyid:4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:0f:3e:b6:ae:61:0e:61:fb:d5:53:4e:c2:fa:e2:44:86:5b:
         45:1d:a1:13:21:5b:78:70:3c:f4:91:08:2b:b0:f4:dc:e5:2a:
         ca:b0:a1:2d:47:21:61:e9:a1:88:a6:8b:0e:52:fd:c1:33:50:
         e2:3a:db:9a:b6:91:ed:5c:7b:d7:62:40:48:ff:90:3b:ff:b4:
         1d:6d:72:7b:bb:83:26:30:0b:fc:4c:8c:a3:68:a0:5d:a8:cc:
         1c:75:56:29:c9:46:33:b2:66:d5:0a:a3:76:c7:ec:6b:8e:00:
         12:ba:41:9b:c5:e4:3d:e2:5b:3e:95:1c:b9:c4:bc:62:57:d8:
         5f:3e:d0:25:a1:70:14:a7:12:f7:91:cc:60:0e:2a:2a:14:64:
         71:a4:e2:74:89:35:8a:21:80:c0:6a:20:fa:7f:42:ab:87:1d:
         aa:29:81:76:8e:e4:f5:53:21:62:c0:c1:d0:4c:04:e7:b1:0a:
         48:ae:e5:0d:b7:f0:16:b1:5c:0b:12:30:23:de:ee:2d:d8:35:
         e6:0d:1a:9b:24:f6:1d:8d:2a:72:f8:19:dc:27:0a:29:a8:25:
         1c:44:fc:ce:40:61:7d:8b:76:16:79:66:df:69:fc:c5:d2:dd:
         e0:90:d7:40:40:57:2a:e8:3d:3e:37:03:f4:2d:c4:ab:db:1e:
         c1:ab:81:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:41:22 2025 by rpki-client