Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
File:                     TTnePlBgaMODagBUgVVBPmgllbM.mft (raw, json)
Hash identifier:          9me75s3LDQMKl1iacrasHYmeKTqvQkwmrxcpthr/ZqU=
Subject key identifier:   7C:2B:F3:81:01:D6:87:8E:B7:AC:A0:B4:E6:22:6F:3B:68:81:D5:F4
Authority key identifier: 4D:39:DE:3E:50:60:68:C3:83:6A:00:54:81:55:41:3E:68:25:95:B3
Certificate issuer:       /CN=A916C4FA/serialNumber=4D39DE3E506068C3836A00548155413E682595B3
Certificate serial:       0352
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
Manifest number:          04FC
Signing time:             Sat 31 May 2025 01:12:45 +0000
Manifest this update:     Sat 31 May 2025 01:12:45 +0000
Manifest next update:     Sat 07 Jun 2025 01:12:45 +0000
Files and hashes:         1: TTnePlBgaMODagBUgVVBPmgllbM.crl (hash: +IlefudXibjZmk0aR5eoXUG4tE4ahcsDu/GPl55pt9g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.crl
                          rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 01:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 850 (0x352)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C4FA, serialNumber=4D39DE3E506068C3836A00548155413E682595B3
        Validity
            Not Before: May 31 01:12:45 2025 GMT
            Not After : Jun  7 01:12:45 2025 GMT
        Subject: CN=683a578d-cfce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8b:30:e5:f7:56:19:63:5e:0f:06:16:6d:9d:
                    8e:cd:fc:c8:5a:cf:aa:38:0b:d8:62:77:aa:9a:a4:
                    44:ce:a4:2a:88:4b:e8:67:89:16:38:51:8e:81:f9:
                    ac:24:1c:6d:cd:3c:d6:0f:04:17:08:34:48:4a:e3:
                    3e:29:b6:af:1f:c2:f1:8d:fa:ca:14:da:ae:a9:da:
                    73:82:56:80:cd:09:66:5b:05:fb:af:34:5d:68:02:
                    f6:d0:ac:4c:b0:ad:5a:34:fb:9b:fc:28:cc:1f:04:
                    1e:94:f3:e6:3f:be:0f:c4:49:4a:fd:4d:9b:45:e4:
                    53:3a:58:56:60:37:cc:21:77:d1:54:7a:20:5d:a3:
                    d1:a6:6f:ed:e9:96:4f:4a:84:39:0e:28:a3:71:a9:
                    d2:55:01:a2:76:05:8f:06:58:8f:17:b4:cc:31:e2:
                    47:78:6b:39:5b:4d:98:2d:4b:29:7e:dc:87:6f:85:
                    3d:fb:db:98:27:bb:1c:e4:1a:6f:e7:db:66:91:24:
                    d6:0a:a2:3e:47:3e:44:05:f1:eb:23:24:2f:0e:a7:
                    5d:2a:60:01:c2:6b:70:df:ba:d0:59:ee:b4:62:c1:
                    dd:8b:8a:af:e4:2c:a4:a7:6b:28:f0:fe:cf:46:35:
                    85:6d:88:7c:15:16:d6:b2:88:39:80:24:d4:4d:6f:
                    15:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2B:F3:81:01:D6:87:8E:B7:AC:A0:B4:E6:22:6F:3B:68:81:D5:F4
            X509v3 Authority Key Identifier:
                keyid:4D:39:DE:3E:50:60:68:C3:83:6A:00:54:81:55:41:3E:68:25:95:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:dd:f0:0d:cd:5a:4a:4f:57:c4:48:bf:ca:3b:ee:34:ed:29:
         6a:8b:42:57:a1:a6:ba:7c:3f:11:cb:ec:7c:5a:06:92:45:c3:
         98:2d:a5:f3:18:d5:3e:04:e7:61:f3:26:53:7a:6a:44:1e:fc:
         c4:7a:86:6b:90:f9:8c:bf:70:db:5a:64:5b:2b:8a:58:6f:fb:
         7d:2a:ca:d3:a4:66:64:7b:a3:41:86:cd:53:3c:a7:37:fd:5d:
         9c:6f:86:08:ef:80:40:42:d8:43:dd:3b:39:6b:49:25:0a:b3:
         4b:f3:e0:ec:c4:38:7f:65:98:bd:50:8f:ef:68:20:d3:bc:d6:
         37:b0:39:a4:bf:fb:9e:16:d3:73:0a:a4:f7:4a:8a:f7:0e:33:
         14:4f:b9:f4:a4:9b:ab:a0:19:d6:f1:84:cc:21:a4:37:3c:11:
         f8:d1:9d:cf:80:5b:1c:fe:ab:3e:2d:20:c5:ad:42:19:6a:af:
         7f:b4:96:2f:ac:fe:ad:0e:8a:63:a2:7f:07:97:fc:d8:f4:14:
         ef:e2:09:9a:96:49:0f:7a:f5:98:0c:ab:0d:15:7b:c2:ce:ee:
         ab:4f:92:7a:95:28:4d:17:aa:fa:4e:23:0d:5c:31:3f:eb:9e:
         17:1d:29:0f:a0:22:82:9c:01:5d:a8:a7:da:7f:2f:00:ad:c6:
         44:e4:02:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:47:43 2025 by rpki-client