Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft
File:                     tendxr8J-JRYVWCHRC2UjEQDRTA.mft (raw, json)
Hash identifier:          zKdcbmLLGsKc8v8OthFuLqgSECDa6sGUwRErWKNYu8c=
Subject key identifier:   04:F1:C8:68:DF:49:DE:FF:93:64:02:C5:64:56:86:90:F8:C1:BB:8B
Authority key identifier: B5:E9:DD:C6:BF:09:F8:94:58:55:60:87:44:2D:94:8C:44:03:45:30
Certificate issuer:       /CN=A915568B/serialNumber=B5E9DDC6BF09F89458556087442D948C44034530
Certificate serial:       01E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft
Manifest number:          01DC
Signing time:             Fri 19 Sep 2025 03:12:29 +0000
Manifest this update:     Fri 19 Sep 2025 03:12:29 +0000
Manifest next update:     Fri 26 Sep 2025 03:12:29 +0000
Files and hashes:         1: tendxr8J-JRYVWCHRC2UjEQDRTA.crl (hash: mTGtWKWKsH44sda8FRMldH8pke7Q37AHQ2JA+6zhCaQ=)
                          2: 4FD4AF70C39511ED99703D2AC4F9AE02.roa (hash: 9/AcvjliR95434ywgMrtXlXwFBmsQrBKTnsFFaaHZi8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.crl
                          rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 03:12:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 482 (0x1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915568B, serialNumber=B5E9DDC6BF09F89458556087442D948C44034530
        Validity
            Not Before: Sep 19 03:12:29 2025 GMT
            Not After : Sep 26 03:12:29 2025 GMT
        Subject: CN=68ccca1d-9f78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6b:88:a6:41:75:25:b3:ae:08:c3:f7:35:a9:
                    5b:cc:7b:e1:e7:17:9c:a5:6b:4f:6f:7b:78:c9:27:
                    b0:cc:0e:56:07:ae:eb:e2:60:88:d7:b6:5b:c7:fc:
                    62:b6:07:1b:16:61:35:75:c6:34:86:a5:b4:c8:a2:
                    a8:92:c7:44:bc:bd:1b:d0:5a:41:95:c5:32:67:79:
                    e5:73:7d:46:13:87:a8:07:f4:4e:4c:e7:60:f5:8d:
                    28:87:3e:f0:3e:4c:b7:94:14:06:7e:b0:85:7f:3b:
                    7c:80:3d:d8:76:c0:34:bd:bd:10:85:9a:9e:63:9c:
                    43:54:1c:a6:80:82:be:75:63:72:7a:3c:a9:c7:44:
                    a0:20:3a:41:72:d6:a5:3e:da:e6:db:df:b5:f0:f4:
                    19:87:e8:43:5f:c4:35:6c:10:ea:50:00:bb:2a:6d:
                    52:00:d0:66:f3:0b:db:91:5a:63:32:4b:eb:eb:3c:
                    bb:78:77:df:03:7f:03:69:aa:e7:5c:d4:6b:57:4b:
                    5c:06:25:92:85:4a:1a:27:8c:2a:23:f0:77:67:90:
                    ee:28:17:5b:57:6c:ea:32:20:13:5f:a3:25:a1:ab:
                    95:d1:3c:29:de:89:83:75:37:39:8a:50:95:93:4d:
                    82:95:be:92:7a:be:c2:b2:39:05:b8:75:b7:42:ac:
                    c9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F1:C8:68:DF:49:DE:FF:93:64:02:C5:64:56:86:90:F8:C1:BB:8B
            X509v3 Authority Key Identifier:
                keyid:B5:E9:DD:C6:BF:09:F8:94:58:55:60:87:44:2D:94:8C:44:03:45:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:a2:76:b0:b9:ba:43:99:9f:37:32:c0:a8:d5:ec:17:bc:cf:
         4b:05:3e:92:db:a7:72:7d:69:60:d3:c6:38:79:04:18:59:bb:
         07:49:1a:4e:5e:d4:b1:9f:c4:91:d2:26:c8:84:5f:b3:a6:71:
         b2:22:af:59:7c:c5:67:4b:e3:ee:e6:d8:05:6b:22:af:5d:a8:
         98:63:33:55:1e:5f:f7:ff:83:65:0e:62:92:e0:d2:6b:55:fd:
         b5:c8:97:4c:0f:e4:d5:d9:0a:d9:b7:70:9b:74:c8:e0:b2:02:
         19:23:19:c1:d6:da:f3:c0:84:d5:a2:28:2e:e1:ff:b2:28:8e:
         61:05:61:b5:07:21:98:9a:d7:97:39:6c:a6:f3:c0:00:99:5d:
         f5:b7:c1:60:82:29:a4:c2:65:29:10:f4:dc:ee:08:91:97:11:
         b6:d6:07:d4:47:e1:26:03:54:06:8a:36:7a:34:bf:ec:e9:84:
         44:f1:8e:20:80:81:26:bc:9d:f2:ff:2d:1c:6d:c1:2d:f4:d7:
         a2:af:dc:be:ab:de:1a:42:b6:6b:bf:f3:05:c0:14:c5:0f:14:
         bc:c0:40:ec:ff:89:11:1d:02:b5:fc:eb:0e:8a:0e:22:7d:6e:
         32:5c:5c:40:8b:0f:f9:0f:d4:2d:84:58:94:12:32:33:ef:33:
         50:1e:f2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:51:05 2025 by rpki-client