Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft
File:                     tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft (raw, json)
Hash identifier:          EdR4idPYuGUCbQOO10JIem8Dom+HuTsm62H9vm/G0lE=
Subject key identifier:   B0:AE:89:A5:71:65:D0:49:A2:13:C8:48:C9:2D:04:FC:43:D8:A9:BD
Authority key identifier: B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06
Certificate issuer:       /CN=A91126F4/serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606
Certificate serial:       01F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft
Manifest number:          01F5
Signing time:             Sat 09 Aug 2025 02:51:16 +0000
Manifest this update:     Sat 09 Aug 2025 02:51:16 +0000
Manifest next update:     Sat 16 Aug 2025 02:51:16 +0000
Files and hashes:         1: tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl (hash: 9JQYI7emprQo7nVjpUzuPfjhgU5LxVWNlCi+yvnNPOo=)
                          2: 0D086D9476BA11EDB6CB335CC4F9AE02.roa (hash: Anttd8KClIIq+ymDx+NA0obcuq7QmsU2Z4tCY+1upuQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl
                          rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91126F4, serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606
        Validity
            Not Before: Aug  9 02:51:16 2025 GMT
            Not After : Aug 16 02:51:16 2025 GMT
        Subject: CN=6896b7a4-177a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:87:13:03:8d:17:35:7e:4b:dc:a3:a4:9c:8d:
                    ff:ad:49:07:e7:e6:b7:12:c7:cf:15:9f:0d:4e:bf:
                    bf:73:c8:d2:39:a3:e0:2a:10:45:71:28:3a:e9:56:
                    55:c2:d6:2a:3d:53:aa:5b:18:9d:4d:82:2e:8b:9f:
                    6d:64:88:c7:41:05:83:ac:56:ac:88:e5:b8:dc:ab:
                    bd:7a:85:c2:3c:31:96:b0:08:89:b5:8a:b4:44:ea:
                    02:aa:3e:bb:93:81:e0:12:06:5a:b5:c8:b0:4e:f3:
                    7a:9a:fa:ed:74:9a:29:95:47:08:06:24:1c:9f:bd:
                    60:25:80:11:3f:3c:24:d0:0f:e2:06:b5:c6:86:da:
                    05:a9:5a:c1:ba:37:c8:02:38:35:b8:78:04:a4:b7:
                    9b:2e:98:2b:22:08:3c:71:fe:58:f8:00:74:07:9b:
                    15:95:4a:7c:67:bc:5f:a1:7d:56:26:89:b0:60:df:
                    e2:ff:1e:44:89:dd:8d:6b:27:4b:35:17:1d:41:b7:
                    2d:9c:4a:c0:71:36:16:c3:15:02:4e:c1:d6:2c:d7:
                    be:e0:8f:02:ab:09:c4:4f:c1:ef:40:79:40:55:8e:
                    ef:0d:dc:28:b0:56:59:31:59:27:d2:85:3f:c6:1f:
                    56:51:19:38:b8:ff:60:92:54:9b:26:c5:cb:5d:8c:
                    29:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AE:89:A5:71:65:D0:49:A2:13:C8:48:C9:2D:04:FC:43:D8:A9:BD
            X509v3 Authority Key Identifier:
                keyid:B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:2d:33:a5:09:2f:d0:22:4c:46:9c:e0:f8:7c:e5:03:dc:d9:
         c0:52:22:b3:04:21:57:53:bc:2e:b6:80:78:25:b8:fa:1c:22:
         a1:30:4a:40:39:23:53:73:06:75:59:7c:69:81:1a:a7:6e:2f:
         b4:26:88:2d:97:ac:ee:0e:88:e3:4b:e1:b2:69:2e:d7:58:5b:
         e5:e6:d7:1d:ba:b1:12:e3:b6:e6:f8:49:2d:76:e6:15:a0:e2:
         dd:34:25:45:05:80:64:c9:1c:ea:9a:dd:3c:3a:71:82:79:e4:
         8c:ce:25:64:c6:dd:b0:d1:4f:58:24:79:2f:7b:a7:85:2a:dd:
         43:1e:8a:81:fa:1a:8e:51:ed:ad:7e:a4:05:34:04:5c:3c:8d:
         6b:e9:54:03:4b:19:67:dd:33:0a:b2:c9:b5:db:96:fd:cf:a4:
         ce:d5:33:3b:f9:0d:f6:05:91:f1:73:6b:68:ae:92:35:df:77:
         8b:de:55:65:cf:b3:1c:90:d8:05:a5:a1:35:7f:c6:bc:26:1b:
         17:97:6a:d8:12:03:52:c4:52:51:da:17:dc:7d:b6:c4:1b:09:
         85:1d:20:d5:5e:91:e2:b7:68:67:45:a1:ec:76:d7:40:cc:5b:
         6d:f5:3a:39:cf:98:95:fb:c5:a9:30:b3:37:fa:65:39:98:4d:
         03:67:52:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:11:01 2025 by rpki-client