Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
File:                     tgEhTJYoyfQh02c0s4HN7JKJR0g.mft (raw, json)
Hash identifier:          vvOIWqQPO7u03gDxwzJYPti/UAM95LqzXGpJdtdBQAc=
Subject key identifier:   65:36:FF:F3:6F:93:93:56:1B:38:4B:6C:90:1F:BF:A7:4A:21:92:4A
Authority key identifier: B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48
Certificate issuer:       /CN=A917544F/serialNumber=B601214C9628C9F421D36734B381CDEC92894748
Certificate serial:       0268
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
Manifest number:          0260
Signing time:             Mon 21 Jul 2025 02:04:56 +0000
Manifest this update:     Mon 21 Jul 2025 02:04:56 +0000
Manifest next update:     Mon 28 Jul 2025 02:04:56 +0000
Files and hashes:         1: tgEhTJYoyfQh02c0s4HN7JKJR0g.crl (hash: bH6IGtz+dRKq9h4cvreOvbRRSKGxBPjMGZPuk1jmVDc=)
                          2: AF17D342228A11EDBBB7C135C4F9AE02.roa (hash: nhFejZbPmF/mHGnNhHKJIEbR5bZWtdWdp3ZM+fASALI=)
                          3: 2E0FE566659A11ED8981D533C4F9AE02.roa (hash: vBxsFzT5gC7QzQ1XTLVC3PqbT6UzqTD7wUR9KYNT0TI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl
                          rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 02:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 616 (0x268)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917544F, serialNumber=B601214C9628C9F421D36734B381CDEC92894748
        Validity
            Not Before: Jul 21 02:04:56 2025 GMT
            Not After : Jul 28 02:04:56 2025 GMT
        Subject: CN=687da048-3c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:07:83:7c:4a:34:17:49:d4:c3:bd:0b:83:37:
                    db:40:d9:4d:5e:5a:93:1b:1e:c4:40:91:11:72:0f:
                    a4:88:3d:7c:4d:ed:67:b3:81:1d:a4:91:b4:bc:73:
                    f1:f8:47:fa:da:36:0b:c4:95:cb:6a:5c:08:40:35:
                    20:53:2d:d7:5c:c8:1a:9b:b2:8e:ea:10:9a:26:f3:
                    9c:fe:b1:76:90:d8:53:33:69:4b:94:c4:78:3e:73:
                    17:ea:72:b5:ec:a7:08:86:a3:15:1c:37:28:d1:da:
                    c5:52:4b:3b:20:67:c0:25:3e:64:f1:f8:50:49:5f:
                    84:b7:c2:92:12:b1:c5:05:a3:9e:14:63:5a:8d:60:
                    f2:4e:12:fc:09:5d:33:59:52:5f:7f:4d:e4:1b:79:
                    17:70:60:0e:b2:e2:b7:d6:0c:12:1e:f4:4c:3a:a9:
                    47:c2:2f:76:d1:82:c0:cc:9d:d5:01:cc:74:ae:11:
                    69:58:d7:dd:43:10:be:c1:0f:ae:77:9d:dd:9a:7f:
                    01:82:dc:47:fe:bb:5e:9c:b1:fc:de:39:8e:49:59:
                    b3:11:c9:ff:38:be:81:39:e3:63:5f:5d:03:e0:e8:
                    3a:56:a0:37:e5:84:c4:e2:00:df:b3:be:49:21:85:
                    03:fd:3a:b5:b4:6a:84:47:93:ba:66:75:c1:4e:e0:
                    ae:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:36:FF:F3:6F:93:93:56:1B:38:4B:6C:90:1F:BF:A7:4A:21:92:4A
            X509v3 Authority Key Identifier:
                keyid:B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:c9:41:39:1d:c2:7b:2d:56:d1:8a:49:c0:e9:74:ea:d2:73:
         1d:5f:6f:f7:41:6d:e7:6d:86:26:82:25:ab:d3:67:fc:4e:31:
         58:05:32:56:70:f4:ad:1c:e2:c8:24:bd:54:ff:aa:87:15:55:
         66:21:90:49:c1:d3:66:d0:72:2e:af:16:69:bc:b0:07:63:49:
         25:19:74:66:11:84:03:d0:6d:da:94:fc:f4:09:e9:2e:67:87:
         ea:7a:ef:8e:0a:ac:30:b6:3b:ac:89:97:16:f1:a9:48:4b:79:
         20:5c:e7:07:80:12:43:c3:08:52:e9:83:87:49:83:cd:65:29:
         c6:64:cd:a0:40:c0:12:a4:e5:9d:40:49:da:a0:8d:09:51:7c:
         ca:bc:fe:ed:54:12:a6:58:0e:17:11:37:56:d1:f3:74:4d:e5:
         ba:a8:bb:34:08:ee:51:c8:49:e1:a2:a1:02:3f:26:bf:62:c6:
         3b:77:9a:c0:b3:1f:e7:65:60:b1:73:28:f1:3a:61:35:4d:59:
         03:7b:19:21:6d:55:01:a2:3a:87:8e:9c:3c:2c:43:f1:49:73:
         05:78:36:01:f2:bf:51:d6:3f:19:ee:11:2a:a6:4b:ac:41:ae:
         ed:1b:ec:51:16:8e:83:42:ad:5d:bd:90:f2:d3:6a:cf:91:16:
         8b:d4:38:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:25:30 2025 by rpki-client