Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
File:                     TPLdZtykL-r2DDjnaVsDtD5-ets.mft (raw, json)
Hash identifier:          7H0IBNbyRig7sLqZB4AmCWNecQF4IEcb7L14wJ6Jphw=
Subject key identifier:   7D:97:BF:5F:27:1B:76:D4:1D:DD:95:77:A2:C0:F1:59:87:AD:97:B1
Authority key identifier: 4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB
Certificate issuer:       /CN=A915C094/serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
Certificate serial:       0D0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
Manifest number:          0CEE
Signing time:             Sun 02 Nov 2025 18:08:37 +0000
Manifest this update:     Sun 02 Nov 2025 18:08:36 +0000
Manifest next update:     Sun 09 Nov 2025 18:08:36 +0000
Files and hashes:         1: TPLdZtykL-r2DDjnaVsDtD5-ets.crl (hash: eWIjrId7avSG0kVfDGArB0Nz/N8fkPY25es2BWSttqw=)
                          2: D0A73A449B8511F09D2ADB37C4F9AE02.roa (hash: dD6j+sczHYx/xPgDziOIUSB6+t7p5ThcbsCjerYQNgo=)
                          3: 67C349FA9B8011F0A7C4F875C4F9AE02.roa (hash: uhrbx22Mj7VPipJqiTCyDkTOObnHgzhVyzrHGF2K3fo=)
                          4: 6953C1BE9B8011F0A7C4F875C4F9AE02.roa (hash: Czi9t9FosAi4B7FBGuvwgOvx85ntHpJmoFPT2ay3ZXo=)
                          5: 4C65E804F68911E98EF88758C4F9AE02.roa (hash: nVclf58inHRItWEODJ4FKUnmAP+f1Uxv1S86KdkjVqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl
                          rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 18:08:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3340 (0xd0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C094, serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
        Validity
            Not Before: Nov  2 18:08:36 2025 GMT
            Not After : Nov  9 18:08:36 2025 GMT
        Subject: CN=69079e25-894d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2a:ee:2e:ed:e1:bc:17:89:5e:95:56:17:2a:
                    89:d7:c4:d5:e7:23:7c:72:58:ca:d5:16:35:9f:d9:
                    58:2d:c1:0d:9c:22:f6:f5:76:f7:19:d0:6f:4a:45:
                    ef:02:f8:09:0a:56:a4:0b:3d:a5:8f:76:dd:3e:be:
                    c2:f5:75:73:68:d7:d9:81:ed:22:b9:d1:61:77:09:
                    6b:8f:d2:0a:ad:68:00:fe:72:bc:10:d7:1a:4d:70:
                    e1:fe:7f:2d:f4:fa:29:04:41:65:67:6b:af:2c:43:
                    e7:17:75:6e:e3:41:ae:be:cf:c4:87:d3:03:91:1b:
                    3c:5d:48:0c:a4:1b:41:78:c5:19:4a:39:34:ea:3a:
                    d5:06:23:48:4f:de:4b:8a:7f:80:2b:cd:0c:3b:eb:
                    46:fb:b5:c9:da:17:60:2e:b4:4c:d2:dc:77:ab:79:
                    80:ea:57:40:1f:c6:85:9e:39:95:4a:e6:b1:ea:7d:
                    29:46:5b:4d:96:1f:b1:27:2f:dc:df:28:12:99:1d:
                    39:3e:d7:ce:d1:c5:c9:c3:07:01:fa:d6:40:e2:fe:
                    32:46:ae:fb:c5:29:4f:29:e4:db:1a:02:f3:18:26:
                    0e:3c:5f:d6:26:92:33:43:9b:29:25:6d:6a:f3:aa:
                    07:f9:50:0a:48:89:92:08:e8:11:b2:02:58:0a:76:
                    10:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:97:BF:5F:27:1B:76:D4:1D:DD:95:77:A2:C0:F1:59:87:AD:97:B1
            X509v3 Authority Key Identifier:
                keyid:4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:d1:0c:66:cf:82:52:c8:fe:e8:af:c5:b9:8d:5a:b4:92:8f:
         59:03:12:f2:4e:c1:fc:2d:be:e0:9e:c9:ac:23:60:d9:4a:e9:
         f7:a3:55:87:21:c5:f3:71:cb:1e:ff:04:96:42:ba:a7:8d:1a:
         48:6e:52:fb:ad:c6:a6:ab:3b:89:a1:98:24:a4:0c:d2:83:7d:
         6a:3c:71:49:18:f5:5d:e5:b0:43:9a:97:14:ec:af:b3:b5:95:
         2b:08:6a:cc:fa:61:f6:52:3e:05:9a:82:ec:c4:01:8f:75:59:
         45:01:28:66:eb:30:4b:fe:9f:b1:0f:4d:1b:25:7f:27:c9:d3:
         fe:ce:ff:78:4b:29:86:9a:37:20:37:87:f6:5e:dc:77:d8:d3:
         73:22:d8:b6:cc:02:3d:34:20:2f:8b:42:3d:01:c3:6f:72:bf:
         26:97:d3:32:78:4b:06:0e:52:a8:55:ba:11:97:12:33:aa:29:
         0d:62:1c:5c:1e:57:0a:6e:74:89:98:38:c2:9e:1c:bd:85:14:
         69:68:0c:09:33:1f:ee:33:71:90:35:55:97:e8:fc:5b:f0:90:
         76:eb:53:c7:28:c3:f0:8c:36:c0:4a:a9:86:d7:aa:66:48:49:
         84:65:68:96:81:23:ba:b2:53:f8:40:83:25:96:58:a6:1a:ac:
         b2:b2:58:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:41:30 2025 by rpki-client