Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
File:                     TPLdZtykL-r2DDjnaVsDtD5-ets.mft (raw, json)
Hash identifier:          NjQ0vMJ/y+rmZT0NCp4VqKU5AbyeZmZBUPoe+HSV+Zc=
Subject key identifier:   A3:6D:D2:E9:7E:6D:AF:B0:A6:94:C8:FC:49:B1:C2:FC:61:17:80:E5
Authority key identifier: 4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB
Certificate issuer:       /CN=A915C094/serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
Certificate serial:       0D08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
Manifest number:          0CEA
Signing time:             Sun 26 Oct 2025 18:31:29 +0000
Manifest this update:     Sun 26 Oct 2025 18:31:28 +0000
Manifest next update:     Sun 02 Nov 2025 18:31:28 +0000
Files and hashes:         1: TPLdZtykL-r2DDjnaVsDtD5-ets.crl (hash: R5dQnsphH+RWpNWbOuP/VuqpU/RIpWD/xGaPsD9YDJ4=)
                          2: D0A73A449B8511F09D2ADB37C4F9AE02.roa (hash: dD6j+sczHYx/xPgDziOIUSB6+t7p5ThcbsCjerYQNgo=)
                          3: 67C349FA9B8011F0A7C4F875C4F9AE02.roa (hash: uhrbx22Mj7VPipJqiTCyDkTOObnHgzhVyzrHGF2K3fo=)
                          4: 6953C1BE9B8011F0A7C4F875C4F9AE02.roa (hash: Czi9t9FosAi4B7FBGuvwgOvx85ntHpJmoFPT2ay3ZXo=)
                          5: 4C65E804F68911E98EF88758C4F9AE02.roa (hash: nVclf58inHRItWEODJ4FKUnmAP+f1Uxv1S86KdkjVqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl
                          rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Nov 2025 18:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3336 (0xd08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C094, serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
        Validity
            Not Before: Oct 26 18:31:28 2025 GMT
            Not After : Nov  2 18:31:28 2025 GMT
        Subject: CN=68fe6900-b9fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d3:8f:56:05:69:bc:f2:7b:ba:5d:c5:50:da:
                    7b:2f:cf:70:1a:72:87:dc:ff:23:a1:14:b5:29:4a:
                    02:a4:d6:34:b7:8e:b4:89:cd:9d:7c:8a:5a:71:c9:
                    62:9a:99:19:5e:65:69:fd:c1:31:6e:85:6d:80:f8:
                    06:10:13:89:50:00:ba:2d:7c:65:f9:2d:c5:55:b8:
                    8e:11:46:55:b5:41:36:ea:7e:ab:bf:23:5a:93:bc:
                    46:05:c3:53:15:c7:c7:6e:79:cc:40:25:f3:e6:29:
                    3b:38:d6:2a:c9:6d:7c:b9:08:d2:55:65:9d:29:6e:
                    f4:cf:91:90:97:b9:f7:35:ed:d2:f6:89:60:23:e3:
                    19:2e:b8:65:17:7d:fa:1f:52:3a:88:e6:38:6b:dd:
                    df:24:f4:16:aa:7c:1e:93:50:1a:99:32:41:60:69:
                    38:79:15:19:12:b2:3c:1a:9b:12:76:00:d5:f4:be:
                    0c:bd:bf:f0:84:7a:c6:1a:62:72:66:f1:95:7d:6e:
                    1a:02:e0:fc:02:eb:b0:a3:c0:8c:69:57:f7:b7:b8:
                    c6:fd:f3:19:b6:bf:b7:56:6f:d8:5e:82:d3:c9:11:
                    40:72:d6:c4:43:f8:94:1d:51:82:62:d4:89:fb:2d:
                    0b:f9:87:22:68:d9:3a:50:0e:f5:d6:0b:a0:c6:f6:
                    55:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6D:D2:E9:7E:6D:AF:B0:A6:94:C8:FC:49:B1:C2:FC:61:17:80:E5
            X509v3 Authority Key Identifier:
                keyid:4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:03:da:e6:3c:6e:81:f0:37:a6:3b:45:97:bf:d3:28:36:82:
         2c:83:62:34:63:ba:1a:29:81:1f:4a:6c:ab:5b:2e:10:dd:4c:
         c2:63:8c:0e:25:26:1c:c5:d0:d9:5d:1f:d3:73:b3:b8:fe:31:
         f4:1a:f1:4e:50:40:49:72:90:aa:55:f8:5e:f4:63:bb:71:8a:
         a3:91:2a:b2:75:51:9a:19:43:cf:a0:60:84:f1:a8:f6:13:9e:
         fa:96:b6:c6:91:aa:3e:bf:44:5e:81:88:ae:bd:84:6b:2a:f6:
         03:19:4a:75:e3:b4:08:48:d8:4b:cd:4d:78:98:bb:fa:9c:63:
         48:6b:73:bc:6b:63:eb:c6:60:82:db:9f:77:9e:ad:85:33:90:
         c7:8e:75:8b:56:b0:23:58:90:82:d6:c4:78:61:bd:22:ef:fd:
         1d:07:a9:f4:4a:52:cb:24:e8:15:fb:a5:fd:20:a0:e9:4a:0c:
         1a:f5:92:de:fd:d5:9c:b0:9f:ac:b1:a8:9e:74:7e:db:ba:07:
         6a:95:1e:eb:12:da:ba:91:76:2e:ec:a8:0a:7c:a1:6f:72:ff:
         bc:10:fc:30:57:f1:48:db:8d:ff:1b:cd:c0:c0:3e:0e:81:53:
         50:c1:f9:bf:cb:25:d4:20:2b:4d:98:0e:43:c1:76:be:39:1a:
         96:8f:93:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 18:27:19 2025 by rpki-client