Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
File:                     TeFRsMiiGEElxljjJzHNoaojRwA.mft (raw, json)
Hash identifier:          eVY/J0RHrD8y0byVGkgDfbDt2z9pBZYpti6lBvtwAD8=
Subject key identifier:   47:11:0E:C2:6F:4D:DB:6E:B2:55:BB:55:F6:11:71:3B:D2:53:63:52
Authority key identifier: 4D:E1:51:B0:C8:A2:18:41:25:C6:58:E3:27:31:CD:A1:AA:23:47:00
Certificate issuer:       /CN=A91AE9FF/serialNumber=4DE151B0C8A2184125C658E32731CDA1AA234700
Certificate serial:       03EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
Manifest number:          03DC
Signing time:             Tue 19 Aug 2025 00:58:36 +0000
Manifest this update:     Tue 19 Aug 2025 00:58:35 +0000
Manifest next update:     Tue 26 Aug 2025 00:58:35 +0000
Files and hashes:         1: TeFRsMiiGEElxljjJzHNoaojRwA.crl (hash: KtgsrsUNfbt2MuqdjAyTuSRjZV9JSc+yeHvRQ5X3pvY=)
                          2: 50A8AF54A1C311EC960A4D2BC4F9AE02.roa (hash: 2KtkkHGjYM6B4NJArJW7J81dwWOAgC3BbrS1q16b7zA=)
                          3: 4FED5C22A1C311EC960A4D2BC4F9AE02.roa (hash: o/h9t6dto3RR9iUYCBWuwk5m/sVDjVA7sDNry2jRXMM=)
                          4: E7AA9622DAFF11ECA67DA10BC4F9AE02.roa (hash: 23pzBzVb/LUnDvjs9zEX9C14poyur9Xh61CsW7xpwuw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.crl
                          rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 00:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1004 (0x3ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE9FF, serialNumber=4DE151B0C8A2184125C658E32731CDA1AA234700
        Validity
            Not Before: Aug 19 00:58:35 2025 GMT
            Not After : Aug 26 00:58:35 2025 GMT
        Subject: CN=68a3cc3c-4e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b9:95:57:d1:5f:f9:45:f7:b7:1e:2d:6d:12:
                    53:70:b6:28:c9:0a:db:f3:13:69:44:db:0e:fb:97:
                    b2:0b:83:7b:c0:72:24:3f:cd:28:d3:12:07:3a:cf:
                    1c:63:a5:a4:c7:35:62:b4:bb:92:c3:b2:f8:05:42:
                    50:14:d2:e4:f5:64:fe:78:bb:63:34:05:05:c3:c7:
                    8e:d8:5d:44:f9:ae:59:2b:0a:3a:58:27:57:95:47:
                    5a:03:7c:f3:ee:04:54:45:ae:60:b3:77:4d:94:73:
                    b5:7a:36:e0:07:e3:43:02:3a:cd:8f:6e:83:3b:23:
                    ab:10:9f:65:4f:32:70:1b:cc:2c:a5:d7:c7:88:98:
                    a3:81:f7:89:84:4a:c0:51:88:2d:93:d0:77:86:35:
                    37:fd:22:fc:5a:0f:35:05:ff:80:0c:55:a7:31:9f:
                    f3:d9:90:7f:ae:a2:0f:f4:04:65:5f:0b:59:43:6b:
                    d0:eb:21:2d:b7:21:b9:72:90:45:76:30:b2:32:58:
                    9c:82:98:40:5e:e0:42:28:29:45:3a:38:6b:f9:37:
                    e1:09:7f:38:37:47:f7:7b:ae:ea:92:db:b0:d0:be:
                    70:aa:b8:de:f8:c9:8a:14:06:39:68:7a:c9:f2:8d:
                    69:2b:11:21:bc:fb:43:4e:eb:34:7a:5c:3c:32:3b:
                    f8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:11:0E:C2:6F:4D:DB:6E:B2:55:BB:55:F6:11:71:3B:D2:53:63:52
            X509v3 Authority Key Identifier:
                keyid:4D:E1:51:B0:C8:A2:18:41:25:C6:58:E3:27:31:CD:A1:AA:23:47:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TeFRsMiiGEElxljjJzHNoaojRwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9FF/D3A544D2945B11EC8295DB45C4F9AE02/TeFRsMiiGEElxljjJzHNoaojRwA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:8c:58:33:75:69:84:64:bc:40:74:39:11:5f:25:a1:98:9a:
         79:de:6c:c0:3f:ad:9c:8c:2f:49:45:2a:a7:5e:65:25:14:22:
         bb:90:d0:84:d8:7c:fc:13:e3:90:9c:2e:9d:81:64:25:11:f9:
         ab:9a:9a:09:d6:f7:e3:a4:fb:de:73:54:bf:3a:39:22:59:a6:
         80:8a:50:2a:d7:f2:c8:da:73:c8:77:8c:07:3a:15:b3:17:71:
         37:72:dc:09:13:40:ae:f7:4f:dc:9c:ec:b9:13:92:4f:8b:f9:
         f0:98:71:97:1a:53:20:4c:71:30:16:b7:1d:38:e0:70:95:b5:
         37:05:1c:81:42:c3:9c:d9:e4:bb:83:c6:a8:4a:3f:30:20:cb:
         bf:59:8a:1e:cf:69:a0:52:2a:c4:e8:a5:8b:5d:ec:b6:58:6c:
         5c:2a:c4:37:83:26:6e:3f:a2:74:1c:86:b2:2a:83:7b:02:ef:
         ba:50:6e:97:6d:49:d2:dd:a5:45:e9:b7:0a:13:72:66:7e:16:
         25:26:e6:8b:e2:63:4b:4f:1b:ab:5d:0d:29:6d:16:aa:c7:5a:
         52:0f:6a:5e:41:6a:da:4e:3b:2b:71:76:4c:df:a6:43:28:e6:
         e4:80:0e:37:fe:25:7c:cb:73:6e:00:92:5d:a0:cb:a3:d5:e4:
         3e:c4:13:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:35:25 2025 by rpki-client