Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft
File:                     tljvayeSnHt_X7Jsue5qQSzoXdQ.mft (raw, json)
Hash identifier:          s4580SqijlS6LJQc5f+MqVkf7uNXnYI+4PLobPIAin0=
Subject key identifier:   C5:71:17:D0:F8:DB:0B:15:E5:58:60:51:3D:78:EC:6E:7D:F2:18:D3
Authority key identifier: B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4
Certificate issuer:       /CN=A9123072/serialNumber=B658EF6B27929C7B7F5FB26CB9EE6A412CE85DD4
Certificate serial:       07B1
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft
Manifest number:          079D
Signing time:             Wed 04 Jun 2025 21:13:51 +0000
Manifest this update:     Wed 04 Jun 2025 21:13:51 +0000
Manifest next update:     Wed 11 Jun 2025 21:13:51 +0000
Files and hashes:         1: tljvayeSnHt_X7Jsue5qQSzoXdQ.crl (hash: uheTSPRzzMWAxwAnQlL+kkYpDqM8+9vBp9KKWf4emK8=)
                          2: 0886DE60D4D311ECBE99375AC4F9AE02.roa (hash: uazG73UaMnx6WsXKrRFqrUld6ba1Rwlrt5W45/vO4zY=)
                          3: EFC0CAB2F81111EEB4681B75C4F9AE02.roa (hash: HLeHhf7z+DQd8E9vrX8KAr3EM5GCzgmJjqLeg2zSKbM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.crl
                          rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 21:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1969 (0x7b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123072, serialNumber=B658EF6B27929C7B7F5FB26CB9EE6A412CE85DD4
        Validity
            Not Before: Jun  4 21:13:51 2025 GMT
            Not After : Jun 11 21:13:51 2025 GMT
        Subject: CN=6840b70f-3a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:63:b1:0f:47:55:61:ee:80:7e:94:d3:33:53:
                    57:8b:68:39:26:71:ee:be:84:d3:14:8a:48:66:b0:
                    44:9f:c3:c7:cc:68:59:d9:39:d2:de:95:7d:7c:9c:
                    87:2a:eb:ab:99:fb:ff:b4:ab:09:73:e3:aa:58:92:
                    68:96:99:65:5b:5c:b4:80:58:53:ba:7b:7a:4b:fb:
                    8f:20:c6:86:7a:75:a6:8b:1c:74:4e:6b:cf:7e:8f:
                    88:17:09:e1:1f:25:e5:a1:45:27:f6:8e:c6:1e:e8:
                    18:09:86:da:f1:8d:8e:e4:e3:e3:90:a3:94:12:3f:
                    b7:a0:5a:df:d9:2d:4a:57:74:a7:89:ef:bd:4a:5f:
                    9e:63:3f:b6:e8:c8:c7:3b:d5:f3:5b:a8:d0:4f:85:
                    0e:76:69:0c:5d:ec:ec:48:fc:2e:7b:73:74:a1:e2:
                    75:28:aa:df:cc:ae:05:dc:a1:c0:02:53:f2:22:51:
                    f8:f6:c4:d3:51:0f:b3:ca:93:34:6d:45:a9:49:23:
                    55:28:33:85:7b:44:bc:eb:8b:fb:b7:cb:08:d9:24:
                    53:0d:e3:70:b8:ee:b1:43:3d:88:8a:1e:12:be:1b:
                    31:24:e5:83:08:b9:87:3a:39:e2:e3:51:fb:29:4e:
                    48:dd:9b:03:b4:92:4d:c1:16:13:79:ca:99:b2:1b:
                    e0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:71:17:D0:F8:DB:0B:15:E5:58:60:51:3D:78:EC:6E:7D:F2:18:D3
            X509v3 Authority Key Identifier:
                keyid:B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:33:ba:1f:01:bb:4b:e0:a5:4a:9e:4c:df:ad:d2:e1:99:32:
         ca:a2:b6:08:15:b1:3b:69:79:64:ca:6f:1a:4f:63:cd:c8:02:
         8e:13:5f:3a:84:d8:cd:38:c4:31:f4:15:4b:bf:57:ab:c3:09:
         7e:94:73:5e:00:22:3d:d9:ff:0d:45:99:db:d4:13:5f:5f:44:
         08:5f:ec:4d:7e:58:d1:b3:9c:c3:22:f4:44:15:d1:10:2b:ff:
         f8:1a:8f:59:d6:70:b0:9d:9e:c1:cd:28:fd:50:91:da:73:2c:
         b9:86:39:ba:b1:c3:c2:1c:e2:0e:ef:cb:bc:44:7d:ee:39:11:
         eb:a7:4e:ba:a7:7a:8a:98:ae:6a:d7:96:53:ca:46:66:d5:2d:
         e8:87:a2:5e:9e:db:f4:b4:fd:34:74:6f:55:46:69:c8:0c:c8:
         40:4f:96:47:ab:70:80:2a:ae:db:3b:6d:8d:2e:f4:1c:4f:21:
         37:f2:f2:e5:cd:72:ed:68:74:61:24:fb:e3:89:9f:69:02:fa:
         16:e7:e4:74:5c:e4:64:81:2b:fb:13:7a:8b:5d:6d:e8:4d:11:
         78:89:b4:17:81:f5:94:aa:a0:7a:45:fc:91:4e:ea:1a:7c:86:
         4a:56:eb:ba:b1:0a:db:0e:59:7b:e7:c4:98:52:59:33:76:39:
         e8:b1:ee:a3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjMwNzIxMTAvBgNVBAUTKEI2NThFRjZCMjc5MjlDN0I3RjVGQjI2Q0I5RUU2QTQx
MkNFODVERDQwHhcNMjUwNjA0MjExMzUxWhcNMjUwNjExMjExMzUxWjAYMRYwFAYD
VQQDEw02ODQwYjcwZi0zYTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyWOxD0dVYe6AfpTTM1NXi2g5JnHuvoTTFIpIZrBEn8PHzGhZ2TnS3pV9fJyH
Kuurmfv/tKsJc+OqWJJolpllW1y0gFhTunt6S/uPIMaGenWmixx0TmvPfo+IFwnh
HyXloUUn9o7GHugYCYba8Y2O5OPjkKOUEj+3oFrf2S1KV3Snie+9Sl+eYz+26MjH
O9XzW6jQT4UOdmkMXezsSPwue3N0oeJ1KKrfzK4F3KHAAlPyIlH49sTTUQ+zypM0
bUWpSSNVKDOFe0S864v7t8sI2SRTDeNwuO6xQz2Iih4SvhsxJOWDCLmHOjni41H7
KU5I3ZsDtJJNwRYTecqZshvgVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVxF9D4
2wsV5VhgUT147G598hjTMB8GA1UdIwQYMBaAFLZY72snkpx7f1+ybLnuakEs6F3U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzA3Mi8wNjlBMDZFNjBC
NUMxMUVCOTlBMTc1NjJDNEY5QUUwMi90bGp2YXllU25IdF9YN0pzdWU1cVFTem9Y
ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3RsanZheWVTbkh0X1g3SnN1ZTVxUVN6b1hkUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MzA3Mi8wNjlBMDZFNjBCNUMxMUVCOTlBMTc1NjJDNEY5QUUwMi90bGp2YXllU25I
dF9YN0pzdWU1cVFTem9YZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQApM7ofAbtL4KVKnkzfrdLhmTLKorYIFbE7aXlkym8aT2PNyAKOE186
hNjNOMQx9BVLv1erwwl+lHNeACI92f8NRZnb1BNfX0QIX+xNfljRs5zDIvREFdEQ
K//4Go9Z1nCwnZ7BzSj9UJHacyy5hjm6scPCHOIO78u8RH3uORHrp066p3qKmK5q
15ZTykZm1S3oh6Jentv0tP00dG9VRmnIDMhAT5ZHq3CAKq7bO22NLvQcTyE38vLl
zXLtaHRhJPvjiZ9pAvoW5+R0XORkgSv7E3qLXW3oTRF4ibQXgfWUqqB6RfyRTuoa
fIZKVuu6sQrbDll758SYUlkzdjnose6j
-----END CERTIFICATE-----
Generated at Fri Jun 6 16:57:46 2025 by rpki-client