Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft
File:                     Tky0uRUee64RK-xTWcMclVgO4DE.mft (raw, json)
Hash identifier:          7KxQnPOSVIp6wyDhAGy1s/p0jdtuEMNXUUWYLUkY4Y8=
Subject key identifier:   65:7D:6D:AF:D8:99:91:A6:AC:26:7A:77:40:EF:14:64:0F:E6:0B:2C
Authority key identifier: 4E:4C:B4:B9:15:1E:7B:AE:11:2B:EC:53:59:C3:1C:95:58:0E:E0:31
Certificate issuer:       /CN=A91609E6/serialNumber=4E4CB4B9151E7BAE112BEC5359C31C95580EE031
Certificate serial:       047A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft
Manifest number:          0476
Signing time:             Sat 19 Jul 2025 00:28:28 +0000
Manifest this update:     Sat 19 Jul 2025 00:28:28 +0000
Manifest next update:     Sat 26 Jul 2025 00:28:28 +0000
Files and hashes:         1: Tky0uRUee64RK-xTWcMclVgO4DE.crl (hash: 5xCsPEF+5ZdAkD55uyq7jA7QXkAlu9mGi6Wq79MwgC4=)
                          2: C36AEA764F7911ECAA7C6A6FC4F9AE02.roa (hash: 6pwSl/tH7jpCf2nCpLbxQOYWHD+R7qNFnABfqWkqa5o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.crl
                          rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 00:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1146 (0x47a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91609E6, serialNumber=4E4CB4B9151E7BAE112BEC5359C31C95580EE031
        Validity
            Not Before: Jul 19 00:28:28 2025 GMT
            Not After : Jul 26 00:28:28 2025 GMT
        Subject: CN=687ae6ac-9292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:96:f8:9d:5c:ec:1d:94:5e:78:10:e5:8e:ad:
                    36:15:f8:81:73:d0:0a:61:9b:98:2d:3d:ee:8f:e5:
                    d9:3f:08:6b:2d:fd:10:e6:0f:04:27:9e:8b:9a:8e:
                    c6:ac:7d:da:47:e3:e1:d0:7a:7d:bb:bf:32:33:93:
                    fa:49:94:42:6e:7f:cd:4a:11:9b:4e:de:8e:59:5c:
                    d8:64:03:23:a0:d6:7d:14:39:50:89:49:c2:62:b7:
                    3f:ed:ec:f8:6f:a6:0c:7b:8a:1a:52:a6:a9:1c:7c:
                    9e:27:dd:c4:65:f8:a5:f9:2b:d7:b0:ab:8b:a8:38:
                    42:04:9a:4a:f6:fa:c6:82:cb:03:24:6f:dd:95:a1:
                    0a:16:39:ad:ae:95:02:8a:2b:e5:b8:4b:72:96:05:
                    6c:c9:54:f9:4c:4f:00:7f:cb:0a:cf:5c:e2:1c:c7:
                    38:68:42:4e:00:90:1a:2b:f2:8d:ac:64:88:f7:95:
                    30:90:72:f2:07:a7:0e:9c:29:36:f1:33:0b:85:cc:
                    1a:9b:5a:f4:0e:7b:b2:bc:64:15:d1:a1:72:13:89:
                    99:f7:67:e3:77:31:65:df:1b:e8:b9:8c:e6:d5:e3:
                    a1:f9:17:ca:d6:c2:b3:2f:ea:2a:80:05:1a:78:d2:
                    d8:c5:28:9d:0d:71:85:66:78:88:f3:5e:0d:f4:fb:
                    bd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7D:6D:AF:D8:99:91:A6:AC:26:7A:77:40:EF:14:64:0F:E6:0B:2C
            X509v3 Authority Key Identifier:
                keyid:4E:4C:B4:B9:15:1E:7B:AE:11:2B:EC:53:59:C3:1C:95:58:0E:E0:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:f1:3c:7a:5d:7d:12:44:4d:ca:be:f0:d2:0d:93:cd:ac:93:
         4a:93:20:70:07:7b:fb:26:d4:44:a6:94:20:cb:da:67:41:b0:
         e2:9a:9a:fe:47:57:b5:09:61:75:19:7b:67:19:64:23:f6:71:
         7d:f1:da:74:06:04:ec:b1:f5:00:f6:dd:8a:2b:3d:c1:0b:88:
         05:ce:72:33:cd:99:65:5b:fd:4f:7e:be:a2:b4:fe:f2:df:4d:
         2a:ce:b5:64:bb:6c:95:5d:95:12:7e:34:bc:31:47:84:12:4f:
         d9:dc:6e:0e:c5:8c:12:7b:c4:18:96:6f:f3:3e:fb:61:97:ec:
         ab:d2:8a:7c:5b:42:23:29:0e:93:be:7b:93:16:dc:b8:66:94:
         61:55:53:92:8e:75:5f:01:07:8b:ef:58:0a:f9:f6:6f:8e:2a:
         ef:0e:f5:75:e1:6b:17:eb:25:ea:d3:59:c7:7d:f3:9e:96:f9:
         f6:85:ad:c8:df:14:4b:46:b8:5a:2e:b0:4f:c0:23:ac:2d:a9:
         22:8c:83:5e:33:37:88:87:e3:6f:38:df:d3:53:29:f8:d1:ea:
         c7:0a:61:0b:52:01:11:9a:e1:37:ec:d4:31:b8:e0:b2:7a:20:
         a4:0f:7a:03:f8:cf:01:13:cb:ff:8c:c5:19:d2:3e:55:7c:06:
         5f:7a:d1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 03:21:33 2025 by rpki-client