Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft
File:                     TR4XV9LTAT5AudfK9e_JxHs3KwM.mft (raw, json)
Hash identifier:          LZ7fixKVscy8MAimj2S7+MnlSH00oWJIyUuzWLb4fi0=
Subject key identifier:   89:A2:92:F6:49:28:67:07:FD:BD:0E:3F:95:B8:AA:4E:05:48:CF:E5
Authority key identifier: 4D:1E:17:57:D2:D3:01:3E:40:B9:D7:CA:F5:EF:C9:C4:7B:37:2B:03
Certificate issuer:       /CN=A91B5CEF/serialNumber=4D1E1757D2D3013E40B9D7CAF5EFC9C47B372B03
Certificate serial:       02F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft
Manifest number:          02F6
Signing time:             Tue 05 Aug 2025 01:51:11 +0000
Manifest this update:     Tue 05 Aug 2025 01:51:10 +0000
Manifest next update:     Tue 12 Aug 2025 01:51:10 +0000
Files and hashes:         1: TR4XV9LTAT5AudfK9e_JxHs3KwM.crl (hash: 6tf3Zbqc9Nqk1McChrumFM9Had5sbb79zN9UGsH03mc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.crl
                          rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 01:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 758 (0x2f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5CEF, serialNumber=4D1E1757D2D3013E40B9D7CAF5EFC9C47B372B03
        Validity
            Not Before: Aug  5 01:51:10 2025 GMT
            Not After : Aug 12 01:51:10 2025 GMT
        Subject: CN=6891638f-f1a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:70:50:54:af:63:ba:55:28:25:4e:27:ab:5c:
                    2a:ac:d9:30:51:d8:26:a6:05:92:27:f8:a9:2d:21:
                    8b:81:10:4c:fe:3e:cb:a0:42:47:22:8a:6f:b4:d1:
                    7d:77:31:66:dc:8e:12:20:1d:ed:35:d5:ed:58:32:
                    82:8a:09:e8:eb:e3:a0:06:f0:21:11:6b:61:f4:1d:
                    0b:08:a5:a3:cd:7d:f8:4a:b3:c8:e7:c8:6e:79:6e:
                    39:c5:12:59:39:1b:c8:0b:54:b9:f0:2c:2a:6d:44:
                    87:8f:33:88:a1:9c:ab:3f:7e:ce:6e:de:e8:e3:fd:
                    4d:52:91:3c:1a:bf:6f:de:4a:67:fd:1b:37:11:e0:
                    76:0b:84:89:eb:7e:19:eb:c6:29:8c:06:02:9c:89:
                    cb:f7:91:01:71:fd:a1:97:82:30:e9:19:fa:de:44:
                    a1:1b:43:41:98:1d:d8:27:79:a0:ef:ea:4a:e5:db:
                    f5:e2:09:8d:4c:3d:c2:d1:c4:3e:e6:b9:86:2e:a3:
                    77:46:03:51:d9:60:fe:c0:34:95:be:ae:35:c1:56:
                    4d:92:41:b6:a6:90:c0:a3:68:46:89:34:b6:1f:ce:
                    10:1f:a5:c4:cf:a0:06:9f:5d:bc:d5:17:41:bc:7e:
                    a2:4f:ab:d0:9b:52:02:ec:8a:d3:6f:6c:5b:44:8d:
                    c1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A2:92:F6:49:28:67:07:FD:BD:0E:3F:95:B8:AA:4E:05:48:CF:E5
            X509v3 Authority Key Identifier:
                keyid:4D:1E:17:57:D2:D3:01:3E:40:B9:D7:CA:F5:EF:C9:C4:7B:37:2B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:3c:93:5e:60:6c:f0:92:55:9c:8a:d0:c0:d1:2a:68:85:bd:
         da:47:a8:cb:0d:6b:a0:30:ad:37:91:e5:82:a8:a8:6d:39:db:
         fc:f4:04:d8:69:79:62:27:a1:2e:f7:7f:f0:3d:3e:a3:b6:c5:
         ef:74:a6:b9:1f:33:86:21:bd:6a:56:3b:34:98:63:df:8e:98:
         66:5e:88:01:7c:11:68:10:c9:a8:a6:6e:d1:0a:0f:fb:59:5b:
         e7:8d:f7:e2:09:38:de:d1:87:83:9b:ae:1b:7d:2d:6c:e0:2c:
         50:e4:2d:c2:22:07:b1:4d:ab:f6:9c:10:0a:6e:5e:bb:60:ce:
         6c:a6:88:f3:a2:a6:96:1f:f0:d2:7d:ef:2a:5a:cf:1f:87:48:
         2c:28:1d:f6:44:c8:cc:48:47:cb:bf:b5:69:80:e9:43:dd:32:
         ce:05:c3:a0:8f:b8:fd:2a:c2:5a:07:55:52:0a:f0:b9:cb:1e:
         1c:9b:17:09:76:ca:cc:1a:87:3d:93:cc:34:2c:44:6b:51:13:
         6d:8e:bf:2e:45:10:26:26:4c:dc:d7:dd:61:35:c8:65:5c:72:
         a5:0c:7a:b8:0e:01:2c:cf:06:51:a6:b8:f6:8b:5c:75:be:09:
         5a:42:3c:64:71:2a:ce:37:63:1d:9a:ac:2f:1d:4e:e0:dd:b8:
         54:52:80:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:16:52 2025 by rpki-client