Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
File:                     TPLdZtykL-r2DDjnaVsDtD5-ets.mft (raw, json)
Hash identifier:          RHkxIbKkd1yP0PN13U5ETni7YzompC02P39z70ZN8+c=
Subject key identifier:   7E:64:BB:07:13:DD:5A:BA:0E:15:07:93:6B:7E:3B:9A:BB:7C:6D:2D
Authority key identifier: 4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB
Certificate issuer:       /CN=A915C094/serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
Certificate serial:       0CB2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
Manifest number:          0C99
Signing time:             Fri 30 May 2025 18:26:08 +0000
Manifest this update:     Fri 30 May 2025 18:26:07 +0000
Manifest next update:     Fri 06 Jun 2025 18:26:07 +0000
Files and hashes:         1: TPLdZtykL-r2DDjnaVsDtD5-ets.crl (hash: bvt8HGFZFyUx3wkcm6EIg+VwxLJqSUQaayrjBCVQVz8=)
                          2: 5630809A81B311EB9661A516C4F9AE02.roa (hash: ZttxHWyqYC+cKd0BdILvShFdkBjr28lgBuZeDhgrwKk=)
                          3: DF56C74C83A111EE8D40867CC4F9AE02.roa (hash: h7HweR/FfeHA80OZjTVSE+4DMIspzsFe+SSvbL7FG+c=)
                          4: 4C65E804F68911E98EF88758C4F9AE02.roa (hash: nVclf58inHRItWEODJ4FKUnmAP+f1Uxv1S86KdkjVqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl
                          rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 18:26:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3250 (0xcb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C094, serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
        Validity
            Not Before: May 30 18:26:07 2025 GMT
            Not After : Jun  6 18:26:07 2025 GMT
        Subject: CN=6839f83f-0513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f6:14:e6:94:d1:d2:af:6f:33:7f:17:eb:ae:
                    c5:1d:03:af:bb:fb:53:0d:cb:69:6c:75:df:79:0a:
                    05:a9:05:60:c7:0f:38:4e:ff:2c:1f:a5:10:62:32:
                    c1:63:2a:08:2d:f1:37:ce:8c:ee:f9:2d:92:1f:9e:
                    5c:b2:f9:d3:39:0e:02:2a:af:20:46:f9:4f:e2:07:
                    55:e9:8c:cb:cc:f0:8a:ba:e9:97:7c:1a:98:21:7d:
                    54:d1:9a:ce:17:0b:ba:27:fc:cc:55:6b:26:ac:72:
                    29:1d:36:dd:79:19:e4:f9:22:f6:01:35:6f:00:35:
                    70:93:76:5f:1f:d5:63:d9:87:b8:4e:a8:23:47:4c:
                    8f:f0:5d:c7:86:98:f9:5d:ff:03:3a:3f:c7:c4:b5:
                    3e:51:3d:2d:65:37:9b:92:f6:b9:3e:d9:e5:18:f8:
                    bc:10:b8:00:43:d6:d7:36:84:8b:81:6b:a9:db:58:
                    95:2c:d4:57:86:48:fe:35:ad:f5:83:f1:62:82:f3:
                    01:ce:2c:21:e3:61:fa:b4:1e:7a:04:a9:03:a1:d7:
                    31:47:95:54:23:9d:bf:2b:9d:5a:0e:16:3a:04:7c:
                    5a:80:7c:fc:63:55:e5:6b:2e:2d:0e:f2:d9:f9:5c:
                    8b:b2:c9:c0:bc:ce:7b:31:1b:3e:a6:be:d0:23:b3:
                    f1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:64:BB:07:13:DD:5A:BA:0E:15:07:93:6B:7E:3B:9A:BB:7C:6D:2D
            X509v3 Authority Key Identifier:
                keyid:4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:15:0a:51:65:09:aa:7e:d1:4d:11:05:0e:8e:d7:b7:95:b0:
         57:a7:4e:45:47:a8:d8:39:9d:38:2c:aa:30:e9:57:fc:79:ce:
         0d:f4:d3:cf:15:ec:d4:e1:96:79:95:b4:78:a4:19:5e:01:2b:
         bb:be:44:bb:2f:d7:36:5c:88:d8:db:14:6a:ab:c0:14:59:19:
         88:4f:87:31:72:28:43:22:68:55:43:ea:77:61:b7:ca:22:b0:
         9a:f0:87:99:51:a5:54:38:d9:b0:26:a9:48:40:9e:65:21:44:
         e4:32:b2:b1:23:3b:f2:91:8b:ac:4f:29:f9:56:8c:93:e1:ac:
         d6:05:ba:f0:b1:14:fc:c9:f7:ca:ff:06:31:c6:95:b9:72:52:
         93:4a:88:1a:d4:7a:4a:70:9e:aa:3b:05:c4:61:c1:2c:82:56:
         c9:2b:79:45:62:63:bb:5b:b1:07:c2:7a:5d:d7:84:ad:e9:76:
         c2:9c:a2:dd:a5:9f:f5:39:3b:2f:0a:69:88:dc:26:9d:8e:6a:
         65:b2:2d:ec:f4:b4:dd:cf:2e:23:2e:8a:fe:fa:a2:35:78:0f:
         a8:ae:19:69:8b:9f:e3:3e:0d:ec:b9:fd:37:d1:e4:3d:21:0d:
         29:4c:52:92:a1:14:16:98:e9:78:27:5c:20:63:6d:72:f2:bc:
         32:d1:ab:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:28:45 2025 by rpki-client