Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft
File:                     tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft (raw, json)
Hash identifier:          bb/x3WDlV/bC3ba9/XIs/lXknZ0l+Wjjtqn4XZYq0m0=
Subject key identifier:   76:9C:3B:5F:FC:AE:9B:F7:A5:D2:94:97:33:59:81:9D:94:3C:D2:AD
Authority key identifier: B5:54:9F:61:81:FF:A7:AF:25:D8:D2:3A:66:73:05:4D:C4:56:6C:0C
Certificate issuer:       /CN=A9139661/serialNumber=B5549F6181FFA7AF25D8D23A6673054DC4566C0C
Certificate serial:       02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft
Manifest number:          02
Signing time:             Fri 04 Jul 2025 16:16:15 +0000
Manifest this update:     Fri 04 Jul 2025 16:16:15 +0000
Manifest next update:     Fri 11 Jul 2025 16:16:15 +0000
Files and hashes:         1: tVSfYYH_p68l2NI6ZnMFTcRWbAw.crl (hash: 03qpxKlbR4jxDlUEnm/6NWOVDol/yHLLTsglLsIoCeg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.crl
                          rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Jul 2025 16:16:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139661, serialNumber=B5549F6181FFA7AF25D8D23A6673054DC4566C0C
        Validity
            Not Before: Jul  4 16:16:15 2025 GMT
            Not After : Jul 11 16:16:15 2025 GMT
        Subject: CN=6867fe4f-67da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:28:f9:7c:72:dc:60:48:64:3d:4f:cf:c2:0b:
                    27:94:0d:16:8f:65:f0:f7:ec:10:e7:6d:a3:dc:c0:
                    41:f6:ad:33:c7:17:74:24:3a:da:6b:71:75:f1:28:
                    1b:71:e9:9c:ec:7f:74:1c:f6:ee:eb:3e:e7:d5:99:
                    75:9c:0d:9c:e9:26:94:2f:60:0c:92:14:5a:01:91:
                    82:66:d9:d5:24:94:67:f9:22:ed:20:5f:38:4e:cd:
                    8f:62:0e:bc:d1:8a:c9:de:d7:f5:9f:32:f8:80:ad:
                    96:f7:2c:c5:0b:71:40:c0:9a:a5:52:a1:26:56:82:
                    a3:a5:b8:06:01:f3:10:3d:00:c3:36:9b:3c:f7:66:
                    38:e6:91:d7:61:c2:27:9d:db:e6:a5:f8:bd:2f:c9:
                    65:e1:cf:0a:46:b3:7c:91:dd:97:50:ef:0b:3c:b0:
                    20:82:bd:f5:5d:c9:33:c4:58:b9:a5:15:b2:5f:4d:
                    c2:53:86:9d:5a:45:b9:57:f7:8c:6f:a1:87:a7:90:
                    d1:0d:cc:a7:31:c0:f1:4e:c5:2c:05:60:6c:81:ee:
                    a2:07:56:e7:c6:41:f3:ed:fa:44:10:45:2e:fe:d3:
                    2f:c2:12:31:ec:01:ae:45:a7:98:56:75:7b:7f:1a:
                    30:11:fc:12:58:69:a5:66:94:39:67:35:bd:cb:e8:
                    54:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9C:3B:5F:FC:AE:9B:F7:A5:D2:94:97:33:59:81:9D:94:3C:D2:AD
            X509v3 Authority Key Identifier:
                keyid:B5:54:9F:61:81:FF:A7:AF:25:D8:D2:3A:66:73:05:4D:C4:56:6C:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:25:dd:42:6f:e3:8b:a6:07:65:86:46:67:a7:8e:86:c6:0d:
         3a:21:d8:aa:76:cd:ff:7c:3c:1a:90:15:5b:c2:18:77:74:ce:
         ad:96:65:06:8b:ec:32:9e:0e:a5:e7:7e:bf:d9:42:d0:d4:6f:
         59:cf:34:1a:95:c4:d9:30:a6:a5:7f:da:08:0a:f8:93:7c:14:
         94:d1:d0:b9:48:d0:be:10:ba:b0:37:3e:58:81:63:41:03:1d:
         f8:1f:3e:48:54:d3:24:35:47:67:a0:3d:31:73:5c:e1:7b:93:
         7a:73:7b:7f:e4:a5:e1:97:d1:b8:4c:dc:5d:2e:a0:44:13:99:
         03:cc:cf:f0:4c:06:bd:99:39:4b:85:f4:44:ea:f5:80:b1:60:
         8d:a5:05:15:05:bc:32:30:8f:37:a2:6a:24:ff:9a:cd:b2:fc:
         4a:1b:65:d7:12:f2:05:32:ce:9d:b7:4d:42:85:35:12:96:5f:
         35:d3:c7:46:3e:bf:80:62:39:62:51:cb:08:26:26:03:0f:7a:
         d1:36:d6:1b:38:9a:05:62:e4:d1:ff:42:9b:e9:3d:fd:c9:8f:
         46:1a:52:55:72:1d:52:29:1f:d4:7c:e7:be:fc:b3:11:37:15:
         4b:ca:3d:59:16:5c:ef:68:2f:86:68:5c:1b:0a:f1:cd:14:83:
         26:d4:80:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 08:40:20 2025 by rpki-client