Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
File:                     T4ElgrV_TBLHNl5qp_D_yncQlJE.mft (raw, json)
Hash identifier:          c3d3GjtVqGBeQCJusa3Qzlj/vu7vusrz13Y5K1HslwA=
Subject key identifier:   32:C5:AA:D5:4A:8C:44:91:33:9B:3E:D5:E9:09:A1:80:F9:37:81:B4
Authority key identifier: 4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91
Certificate issuer:       /CN=A91B2D29/serialNumber=4F812582B57F4C12C7365E6AA7F0FFCA77109491
Certificate serial:       18E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
Manifest number:          4723
Signing time:             Thu 18 Sep 2025 15:52:58 +0000
Manifest this update:     Thu 18 Sep 2025 15:52:58 +0000
Manifest next update:     Thu 25 Sep 2025 15:52:58 +0000
Files and hashes:         1: T4ElgrV_TBLHNl5qp_D_yncQlJE.crl (hash: 9f6eicgbdvm3/H+o2AYb9fAWkWtz2w3Z9wOAN5Xu5Y8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.crl
                          rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 15:52:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6376 (0x18e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2D29, serialNumber=4F812582B57F4C12C7365E6AA7F0FFCA77109491
        Validity
            Not Before: Sep 18 15:52:58 2025 GMT
            Not After : Sep 25 15:52:58 2025 GMT
        Subject: CN=68cc2ada-29b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:73:fe:c3:14:1d:34:b3:7a:0f:7d:05:4b:2b:
                    75:af:b2:bc:4f:b1:0c:2a:7a:7d:94:7e:68:69:28:
                    2a:64:1f:5a:1b:61:9f:68:67:e4:f2:d6:71:4b:9f:
                    49:39:84:ea:54:08:03:f8:b9:cd:1b:8c:b8:c4:9d:
                    28:f9:5e:40:a0:ce:f4:d3:12:5a:34:f0:3c:36:1b:
                    c8:35:bf:20:80:c5:95:11:65:62:a9:6e:63:81:22:
                    61:dd:fe:0e:95:53:bf:d1:e5:80:92:6c:dd:c4:7a:
                    20:40:0e:67:17:f7:a0:db:92:b5:a5:b5:d0:11:08:
                    67:e3:fd:f4:f1:cb:70:71:ae:3b:c7:20:15:e1:78:
                    62:fc:f8:2c:d0:c2:f6:ac:71:a9:8f:db:4b:58:b9:
                    fd:a7:9c:ae:83:d2:7c:60:76:0c:75:8a:06:47:69:
                    d3:08:0d:30:14:6c:2b:20:2f:e2:db:df:41:4b:8b:
                    61:47:87:a8:4f:0a:c4:10:30:79:74:e6:ff:bd:ef:
                    aa:76:8f:ed:9c:f7:0f:99:d9:82:12:98:04:59:03:
                    55:27:a3:4d:f2:a1:4c:61:67:d4:7c:fd:31:05:fd:
                    36:27:08:a5:6e:4b:94:9a:40:4e:d2:d4:f6:1f:2e:
                    01:20:69:c6:c1:93:8b:11:a4:48:50:5c:ad:fa:bf:
                    2e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C5:AA:D5:4A:8C:44:91:33:9B:3E:D5:E9:09:A1:80:F9:37:81:B4
            X509v3 Authority Key Identifier:
                keyid:4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:51:89:ea:43:35:54:ef:91:f2:44:a2:c8:75:49:d1:ab:e8:
         81:73:aa:e9:41:97:57:9f:8c:30:da:cd:de:ba:8f:1c:bd:ce:
         cd:00:4f:cc:7c:e8:59:bf:ff:30:bc:35:93:28:0b:9d:1e:55:
         96:eb:61:4b:a8:5d:ec:b2:08:25:37:82:06:46:35:24:9e:79:
         87:ef:55:e7:48:a7:47:d7:76:32:e5:46:24:3b:2b:50:fb:4d:
         41:30:2e:c1:93:1b:22:4e:44:cf:8d:97:bb:ac:aa:70:f5:d5:
         18:77:4b:a6:b0:e1:3a:df:df:7b:0f:95:7c:0b:91:a2:0b:b8:
         5e:87:37:c1:c3:c7:99:a0:d1:a5:fc:1e:37:40:b8:f8:2c:d9:
         40:a6:24:b6:ed:43:87:b6:72:c2:68:c1:21:22:e1:eb:b2:89:
         fa:ff:ee:36:72:06:c1:21:87:c5:b0:bc:04:52:4a:0d:d1:3b:
         f2:74:ba:3f:10:82:53:00:db:14:10:a2:fa:c7:21:8c:b5:a4:
         fd:a9:95:95:d7:9b:8e:ec:6e:b3:b7:9e:54:a6:89:c3:8c:b3:
         da:96:0a:b2:46:0e:e4:c8:0d:c2:d1:4c:c2:fc:b0:b8:e7:d8:
         ef:ee:3f:82:77:22:19:fe:66:c8:cb:98:ee:28:84:11:04:64:
         00:5e:89:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 00:37:12 2025 by rpki-client