Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
File:                     TYR1I-W92eO4lpgooEv-2isMAxs.mft (raw, json)
Hash identifier:          90vcGF0Y6ZulCMMNvBT6BVgQl4JoLduosUCOVKRAeXU=
Subject key identifier:   B1:EE:20:0B:E5:05:A0:33:82:63:26:C8:26:CC:04:EE:13:5A:32:C8
Authority key identifier: 4D:84:75:23:E5:BD:D9:E3:B8:96:98:28:A0:4B:FE:DA:2B:0C:03:1B
Certificate issuer:       /CN=A91AC726/serialNumber=4D847523E5BDD9E3B8969828A04BFEDA2B0C031B
Certificate serial:       075D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
Manifest number:          0748
Signing time:             Sun 10 Aug 2025 21:46:48 +0000
Manifest this update:     Sun 10 Aug 2025 21:46:47 +0000
Manifest next update:     Sun 17 Aug 2025 21:46:47 +0000
Files and hashes:         1: TYR1I-W92eO4lpgooEv-2isMAxs.crl (hash: wTwn2P5R11V/l8IE29fARR5JmxJh9BXInG4+7QXtnew=)
                          2: A8D1E0DE688811ECBE2C4F49C4F9AE02.roa (hash: kx9nS8Hy/44UXC7d2ifVO4Goy7FXc+e33XmugE3Qfuc=)
                          3: 52EFDBAE687D11ECBF82F558C4F9AE02.roa (hash: mMIicPlcpaWI6t1PAKb6yu3WWQthocogsEM4ChK6LBo=)
                          4: CA9D82E8688511EC999E8B70C4F9AE02.roa (hash: N+QdUNWO187I03mcscDr7w/J8yhiTVdD5WODMWRBeG0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.crl
                          rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1885 (0x75d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC726, serialNumber=4D847523E5BDD9E3B8969828A04BFEDA2B0C031B
        Validity
            Not Before: Aug 10 21:46:47 2025 GMT
            Not After : Aug 17 21:46:47 2025 GMT
        Subject: CN=68991348-3353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3d:7a:12:4d:4f:47:b8:b4:8b:17:fb:3d:ee:
                    ef:e1:3a:52:bd:3a:24:f5:14:1a:d9:3c:ad:d1:5c:
                    84:98:29:b7:df:8d:da:2d:d7:8b:16:5b:e9:b4:7c:
                    95:c3:ff:41:78:a6:7a:84:a0:f7:94:54:c6:93:94:
                    bf:58:73:28:15:96:ec:7a:d3:12:80:b9:d9:af:97:
                    c9:e2:ee:3b:12:3f:74:b0:54:db:29:b7:07:41:55:
                    43:fb:52:25:c6:c9:9c:4f:0d:c7:10:8a:3c:60:98:
                    fc:41:a8:f5:94:97:6f:fb:7d:03:87:c5:0b:d3:84:
                    bf:22:55:0c:da:5f:e3:7b:63:a5:94:ba:8e:b4:8b:
                    4e:26:0b:73:85:89:cb:2d:f8:97:a4:c1:d2:24:0d:
                    18:a6:50:f2:18:e9:dc:19:f8:e2:03:96:9e:90:a9:
                    bf:2b:7c:90:14:34:c0:34:ab:de:ac:c1:21:20:f0:
                    eb:89:42:6e:0c:13:9d:cd:18:2f:da:4b:d6:98:54:
                    65:2a:95:d6:71:6a:dc:61:fe:60:96:ec:5c:59:39:
                    e0:10:88:6e:cf:5e:5c:91:0e:06:0d:9a:ed:36:9b:
                    a7:45:e4:fe:6c:4f:6d:46:58:38:99:48:c3:69:45:
                    5b:bc:d0:0c:b0:c2:13:da:3f:50:7a:94:c9:62:9d:
                    6d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EE:20:0B:E5:05:A0:33:82:63:26:C8:26:CC:04:EE:13:5A:32:C8
            X509v3 Authority Key Identifier:
                keyid:4D:84:75:23:E5:BD:D9:E3:B8:96:98:28:A0:4B:FE:DA:2B:0C:03:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:e3:bf:97:01:4b:d6:0e:4e:1a:47:f5:ea:fd:eb:6d:3f:32:
         51:06:08:0e:51:28:41:44:90:d9:54:2b:04:07:9e:ad:0b:95:
         3b:be:08:45:c8:67:8b:de:ee:ee:e8:65:5b:4c:65:af:45:2d:
         4d:a9:ac:f1:5b:4c:c7:36:95:04:17:3e:e5:e8:66:61:c4:fd:
         9f:1f:b4:d4:81:29:e7:df:eb:78:9d:16:bb:1b:57:e6:66:e5:
         f8:eb:ec:13:03:63:5b:3e:0b:d9:77:35:43:24:c7:10:88:d8:
         1c:ec:ce:05:c8:b9:92:84:cb:07:67:f7:1e:f3:3d:ab:49:b5:
         98:da:ee:e5:62:13:d5:11:0c:28:ce:7c:99:70:e0:9b:32:11:
         05:05:b6:f1:41:8e:7c:63:6a:86:17:01:26:46:e7:fc:92:26:
         93:6a:ba:5b:3c:a6:5e:95:91:94:c1:ed:e2:9a:3b:89:17:09:
         72:28:b3:63:5d:e1:f5:14:55:f9:99:82:4f:ec:f0:b5:62:b4:
         8d:4e:78:29:3f:9e:64:3d:9d:d8:49:35:3a:0e:2d:60:0f:fe:
         69:45:63:a3:37:76:9f:e3:f2:ec:1d:ea:31:ed:ff:52:8a:d2:
         ec:91:c3:eb:58:e4:a4:83:d3:37:b2:24:36:bc:6d:06:27:52:
         60:6e:33:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:31:34 2025 by rpki-client