Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft
File:                     twc6HQnyOiR_zleFKqS4poDG2nA.mft (raw, json)
Hash identifier:          OHR3cUBIRhBhQnEUfWcnAPOeICPbrXXOg4Lt3q2sL5k=
Subject key identifier:   65:CE:A3:24:FD:8B:63:40:4F:3B:E5:E7:86:DD:05:96:C6:C8:34:A1
Authority key identifier: B7:07:3A:1D:09:F2:3A:24:7F:CE:57:85:2A:A4:B8:A6:80:C6:DA:70
Certificate issuer:       /CN=A917E75D/serialNumber=B7073A1D09F23A247FCE57852AA4B8A680C6DA70
Certificate serial:       334D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twc6HQnyOiR_zleFKqS4poDG2nA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft
Manifest number:          334D
Signing time:             Sat 31 May 2025 15:20:45 +0000
Manifest this update:     Sat 31 May 2025 15:20:44 +0000
Manifest next update:     Sat 07 Jun 2025 15:20:44 +0000
Files and hashes:         1: twc6HQnyOiR_zleFKqS4poDG2nA.crl (hash: xcH66LoN4Xn7cK2k94lrutxfbbKzrQJ/uloiPyJFxLQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.crl
                          rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twc6HQnyOiR_zleFKqS4poDG2nA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 15:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13133 (0x334d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E75D, serialNumber=B7073A1D09F23A247FCE57852AA4B8A680C6DA70
        Validity
            Not Before: May 31 15:20:44 2025 GMT
            Not After : Jun  7 15:20:44 2025 GMT
        Subject: CN=683b1e4d-46c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f6:ae:5b:39:93:90:de:6b:ac:86:75:96:16:
                    b9:82:80:f3:1f:65:6f:17:68:4c:f2:91:72:76:2a:
                    8f:0b:02:d4:c5:c3:f5:bb:1d:bd:0c:5b:87:39:16:
                    e3:3a:d0:70:35:70:81:9e:2b:62:29:b8:99:d8:ac:
                    18:ef:48:3d:3e:ad:5d:81:5e:e7:a6:49:04:a2:99:
                    74:ce:61:6a:17:0d:14:ee:df:a3:8a:03:5c:59:98:
                    c9:f9:57:c8:68:a2:34:e3:26:d6:cc:6a:7b:02:77:
                    65:ba:cb:e0:0f:ea:4f:74:57:c9:4c:0c:ee:52:53:
                    3f:af:e9:cf:1f:c4:04:36:e5:05:20:9c:3e:26:37:
                    7c:4e:35:90:64:3d:22:99:42:16:18:c2:6c:14:cd:
                    8f:0f:9f:13:f5:2a:4e:d4:e7:28:c6:6c:15:51:5e:
                    dd:b6:99:05:3a:60:de:1f:94:35:ac:ff:0b:23:63:
                    78:b2:96:b6:b0:3d:46:79:43:d5:4f:6b:3c:9d:de:
                    16:d2:35:03:2f:94:db:24:ce:e3:cf:11:da:ce:5b:
                    b1:88:32:06:4c:8a:f4:95:b2:40:a2:ac:61:8d:6a:
                    88:48:51:3d:01:93:da:ad:85:86:27:8d:db:7c:fb:
                    b7:0d:58:9a:88:e4:7f:32:ec:6e:83:71:78:69:16:
                    70:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:CE:A3:24:FD:8B:63:40:4F:3B:E5:E7:86:DD:05:96:C6:C8:34:A1
            X509v3 Authority Key Identifier:
                keyid:B7:07:3A:1D:09:F2:3A:24:7F:CE:57:85:2A:A4:B8:A6:80:C6:DA:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twc6HQnyOiR_zleFKqS4poDG2nA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:9a:56:1c:17:35:45:45:0d:07:3e:14:62:0b:69:47:d5:fe:
         ec:54:6a:d4:94:a3:6b:32:9d:e5:1c:74:ee:21:e6:4c:85:17:
         c5:de:70:30:cf:ce:87:2c:1a:9a:b4:ec:4c:77:53:81:85:a8:
         1d:31:8b:a9:05:b0:fa:26:fe:b4:fd:22:3d:84:b5:96:83:40:
         4d:ac:1a:1e:e1:56:90:3b:32:91:ba:c8:e1:41:1c:80:58:85:
         5e:dd:47:15:3a:ea:65:23:2e:eb:a3:83:28:4b:64:47:62:65:
         b4:77:bf:8f:a9:d0:54:99:ef:ea:32:1d:2f:a2:79:8b:00:eb:
         00:7d:67:cd:ae:0c:36:d9:ca:a4:7f:f6:c5:87:d4:65:d2:5a:
         a9:4c:00:1a:5d:d6:6f:01:79:de:cb:5c:3e:bc:bc:ed:d1:8f:
         20:9c:99:64:5d:d5:5a:38:0a:bf:92:52:7b:31:5a:ef:b3:dc:
         c9:28:04:73:d6:07:f2:3f:c3:46:0f:ae:fb:5f:5c:ed:7b:12:
         e0:64:09:c0:9d:aa:cb:09:2d:e2:bd:98:3d:5d:de:04:e1:84:
         fe:dc:69:a6:95:7e:89:68:ce:dc:8d:b2:35:55:81:17:e2:16:
         41:93:f3:06:60:88:d4:b3:52:37:16:99:eb:69:ed:b5:23:a3:
         5c:8c:57:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:53:09 2025 by rpki-client