Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
File:                     TPLdZtykL-r2DDjnaVsDtD5-ets.mft (raw, json)
Hash identifier:          QzwU8luXAdYEwond3dw2WUdgqLCyuWCOtgzJKXTfh+c=
Subject key identifier:   D5:25:8F:8B:14:82:63:44:50:67:18:53:00:3A:71:50:19:6E:D8:99
Authority key identifier: 4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB
Certificate issuer:       /CN=A915C094/serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
Certificate serial:       0C9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
Manifest number:          0C81
Signing time:             Sat 12 Apr 2025 18:07:58 +0000
Manifest this update:     Sat 12 Apr 2025 18:07:57 +0000
Manifest next update:     Sat 19 Apr 2025 18:07:57 +0000
Files and hashes:         1: TPLdZtykL-r2DDjnaVsDtD5-ets.crl (hash: Y7cUuHTpgScUH/oEEpSZHPmegNhL3GEoWsEr1MMQ4Xg=)
                          2: 5630809A81B311EB9661A516C4F9AE02.roa (hash: ZttxHWyqYC+cKd0BdILvShFdkBjr28lgBuZeDhgrwKk=)
                          3: DF56C74C83A111EE8D40867CC4F9AE02.roa (hash: h7HweR/FfeHA80OZjTVSE+4DMIspzsFe+SSvbL7FG+c=)
                          4: 4C65E804F68911E98EF88758C4F9AE02.roa (hash: nVclf58inHRItWEODJ4FKUnmAP+f1Uxv1S86KdkjVqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl
                          rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 19 Apr 2025 17:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3226 (0xc9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C094, serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
        Validity
            Not Before: Apr 12 18:07:57 2025 GMT
            Not After : Apr 19 18:07:57 2025 GMT
        Subject: CN=67faabfd-edac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:be:98:ad:1c:da:4a:fb:01:cf:f7:8a:4e:d3:
                    b8:35:cf:f5:7c:cc:b0:52:49:e3:2b:75:71:1f:f7:
                    62:52:8f:fa:03:a8:53:2e:c9:1c:d3:13:17:41:f9:
                    9d:8f:4c:ef:4b:0e:fd:01:77:b3:69:86:7a:2b:22:
                    36:7b:fb:5d:af:ba:88:d3:ff:6a:12:fa:30:66:d4:
                    e4:f3:13:b8:e6:16:53:55:ef:5c:69:1f:e1:05:9b:
                    f8:6e:bf:5d:7e:d1:7a:90:26:7e:55:17:9a:3d:c7:
                    36:ca:16:3f:1b:0c:6e:6b:62:e9:cd:b2:ee:54:9a:
                    94:92:64:34:65:b6:01:32:ad:06:18:76:e6:8b:3d:
                    18:02:ad:77:31:e9:f3:d0:d0:00:3f:fd:2b:22:2d:
                    30:ee:61:99:48:49:d3:42:16:e1:a3:e9:d8:52:6b:
                    1a:cb:ba:a8:e4:32:8d:63:c0:c6:09:0c:aa:7b:c3:
                    2b:ba:af:0c:23:a0:90:32:25:d2:05:65:37:ce:5a:
                    dd:76:21:29:24:6d:3d:a6:08:b9:53:25:99:c5:3e:
                    da:a4:0f:b3:74:85:83:a4:01:3d:b3:b4:20:a0:04:
                    a2:ef:0a:1f:97:69:ba:cf:07:fb:32:5b:c9:42:de:
                    94:ea:39:c2:5f:47:3b:a5:94:0f:ca:b6:53:b0:29:
                    37:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:25:8F:8B:14:82:63:44:50:67:18:53:00:3A:71:50:19:6E:D8:99
            X509v3 Authority Key Identifier:
                keyid:4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:32:53:77:d2:a3:b7:bd:6e:c1:12:ce:08:5a:05:b0:b0:53:
         66:fa:d6:02:a1:8f:fb:10:b5:67:14:9c:f3:57:f3:a4:84:ff:
         7e:ec:c9:dc:dd:5f:42:1b:9e:81:69:55:07:1b:a8:85:62:46:
         6e:03:86:38:8c:da:0c:5b:ed:5c:60:5c:99:21:cd:c5:4d:9e:
         18:95:4e:ce:94:ae:5b:ed:ff:dc:2f:af:eb:99:92:92:ed:a5:
         e6:96:90:08:7e:8b:93:f0:0f:27:70:33:1d:c1:1b:e4:fd:d3:
         da:ff:d9:b7:5c:5a:94:da:6c:9c:40:2b:dc:08:30:a3:f8:44:
         5e:3d:54:c9:88:e0:48:e8:56:ce:0d:95:47:33:47:e2:8f:97:
         1c:8c:4c:88:16:bd:de:c7:af:ba:e4:38:d3:56:36:8d:6f:86:
         50:1b:a1:2c:9c:6c:b3:a8:2a:6d:51:03:1e:24:2e:5e:01:9a:
         3a:af:ee:5b:e6:81:6c:a2:00:cb:04:8c:63:2f:db:4a:05:72:
         bf:a2:8e:21:d1:7c:29:6e:42:e1:30:bf:af:09:97:e6:1b:b9:
         ea:a8:89:76:bb:73:78:c4:46:9f:ac:de:6a:ba:e2:21:f2:e9:
         32:fc:0e:41:70:78:ec:70:a6:1d:c6:47:ef:0a:3a:92:64:f7:
         fb:ed:c5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:38:36 2025 by rpki-client