Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
File:                     TTnePlBgaMODagBUgVVBPmgllbM.mft (raw, json)
Hash identifier:          aZlZGFuWVwYntxBUKiuF9BpUI2gNOLPwyN9wkYfBMDY=
Subject key identifier:   5D:DD:B7:86:7E:B4:B9:DA:28:A1:BD:B3:66:EE:A6:FB:80:49:11:58
Authority key identifier: 4D:39:DE:3E:50:60:68:C3:83:6A:00:54:81:55:41:3E:68:25:95:B3
Certificate issuer:       /CN=A916C4FA/serialNumber=4D39DE3E506068C3836A00548155413E682595B3
Certificate serial:       0376
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
Manifest number:          0544
Signing time:             Sat 09 Aug 2025 01:26:03 +0000
Manifest this update:     Sat 09 Aug 2025 01:26:03 +0000
Manifest next update:     Sat 16 Aug 2025 01:26:03 +0000
Files and hashes:         1: TTnePlBgaMODagBUgVVBPmgllbM.crl (hash: ETVxZC1L0Ta7KN16ttg+Bdx+Ka4L0ygzIV20oADisFE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.crl
                          rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886 (0x376)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C4FA, serialNumber=4D39DE3E506068C3836A00548155413E682595B3
        Validity
            Not Before: Aug  9 01:26:03 2025 GMT
            Not After : Aug 16 01:26:03 2025 GMT
        Subject: CN=6896a3ab-15e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e2:7f:aa:48:1d:a7:85:88:59:3d:ba:35:51:
                    ce:f2:1b:03:21:bf:d5:a8:ff:91:6e:8b:fd:55:d8:
                    4c:65:c0:22:90:fd:69:d4:ff:b9:4b:ee:e0:b4:ad:
                    2b:5d:3f:0c:87:f7:8c:77:2d:59:bf:eb:72:8c:7c:
                    81:f3:80:fc:d1:ab:fe:67:76:88:ac:29:4e:0d:4f:
                    43:b1:30:04:67:7b:85:be:b1:21:26:2b:88:d2:0d:
                    7d:be:62:1a:f1:a9:ac:fd:0f:8f:b0:64:68:28:5b:
                    09:61:31:32:31:7b:d9:1b:c8:77:a8:f2:4e:88:56:
                    23:c7:24:43:10:eb:ec:9d:1b:48:39:08:20:74:9c:
                    45:ab:89:26:78:60:be:5d:88:f1:37:12:16:4f:f8:
                    36:af:ee:7e:27:cd:6d:35:cf:b0:73:44:55:6c:e4:
                    36:35:48:5c:3d:0c:d2:21:8f:b0:fc:d1:c2:a9:6c:
                    be:66:8c:b2:1f:b7:46:f2:e2:c3:39:95:13:7b:9c:
                    ee:24:4f:b3:4f:00:e9:1b:63:db:d8:41:ca:15:ef:
                    51:3a:b9:c7:96:72:32:8f:40:9d:f1:e7:c9:48:6c:
                    7c:15:22:d3:96:99:03:76:f0:1d:29:36:e5:02:1d:
                    28:87:b7:d1:ff:e2:aa:18:5a:5b:03:73:78:b2:8c:
                    a8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DD:B7:86:7E:B4:B9:DA:28:A1:BD:B3:66:EE:A6:FB:80:49:11:58
            X509v3 Authority Key Identifier:
                keyid:4D:39:DE:3E:50:60:68:C3:83:6A:00:54:81:55:41:3E:68:25:95:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ae:dd:e3:ef:4d:5a:12:46:d1:7e:2b:8a:dc:90:98:1e:cc:
         5c:f2:13:ad:1e:f9:75:71:9e:47:17:3e:6a:c9:c2:ec:01:89:
         29:ec:6c:0f:14:25:a0:14:5b:0a:73:10:cc:33:ec:12:36:6f:
         44:46:e9:aa:5b:08:2b:dd:e5:92:6c:99:fe:84:22:34:0e:e1:
         b9:2e:26:ab:94:3b:15:0c:c2:d9:57:8b:4d:fa:f4:a7:93:a1:
         92:99:5f:93:38:84:38:35:65:1a:87:50:e0:a7:d8:98:88:cd:
         44:e3:b9:c1:5a:78:a8:53:5b:53:94:ff:49:bf:1c:ad:1e:5f:
         f4:b2:9b:e0:65:40:23:bc:af:78:03:90:3b:ed:24:cf:74:ce:
         54:1a:97:1e:c7:75:c7:db:23:1f:dc:69:aa:9e:8b:91:41:26:
         be:12:16:37:6a:29:e9:76:8d:1b:b8:92:a2:e6:42:20:d6:64:
         1a:30:75:c2:48:a4:09:a2:40:a7:e3:c3:5d:d2:92:b9:9d:a0:
         a9:46:22:23:96:6b:35:c4:29:b1:e6:54:d6:cb:a6:19:a3:9d:
         d8:b5:f1:15:40:de:cb:6a:9a:85:f0:51:2d:8f:b2:a7:99:bd:
         09:65:34:2c:20:eb:e8:61:09:58:06:ac:a8:f6:cc:72:ce:5d:
         82:e7:60:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:40:06 2025 by rpki-client