Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft
File:                     tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft (raw, json)
Hash identifier:          nrDbstzy2S6R/EsOAYGhTObwMLfQ0shAiGA5m9Jxgn4=
Subject key identifier:   BA:75:37:70:65:BA:C9:5E:F5:96:7B:9C:01:7D:AE:28:AC:98:6F:0A
Authority key identifier: B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E
Certificate issuer:       /CN=A91BA0AE/serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E
Certificate serial:       01FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft
Manifest number:          0A77
Signing time:             Fri 08 Aug 2025 20:59:21 +0000
Manifest this update:     Fri 08 Aug 2025 20:59:21 +0000
Manifest next update:     Fri 15 Aug 2025 20:59:21 +0000
Files and hashes:         1: tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl (hash: cYKYXvr4Wr4VbU+fbEnGwXzZSCg2VQa1xispJZjDtno=)
                          2: 6897097E6C6311EDBCFA073FC4F9AE02.roa (hash: iM1WPBGRU8kyt2wtZ44xuEtw5kiXcIfrSzUOCPpEqtg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl
                          rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 510 (0x1fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA0AE, serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E
        Validity
            Not Before: Aug  8 20:59:21 2025 GMT
            Not After : Aug 15 20:59:21 2025 GMT
        Subject: CN=68966529-34d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:e6:b9:a0:9f:52:68:b1:52:9e:f2:40:1a:
                    01:25:5e:d5:b7:a8:b1:c7:48:18:f2:0f:c4:d7:b7:
                    a0:d7:1c:e9:47:82:fa:cd:f3:28:b9:e1:e8:b3:aa:
                    58:b4:cc:e4:99:45:c0:9b:8b:a4:25:9f:90:f1:a5:
                    62:24:17:71:dc:19:d5:65:2a:80:3c:9c:ed:36:91:
                    3d:97:95:0d:42:07:98:41:8b:86:e5:d1:89:9c:bb:
                    f4:76:a8:ad:50:f1:39:f3:19:4a:0a:df:67:70:a3:
                    ba:6e:df:e5:b5:c2:14:3a:a0:df:eb:d2:88:8b:d7:
                    8d:0d:09:d5:b1:89:17:f4:53:8e:02:4d:06:c9:14:
                    f9:bd:fc:9e:c6:26:a5:62:9f:fe:57:a3:0f:5e:3c:
                    4d:c4:0b:27:74:90:e7:7e:05:e6:5b:57:a3:2c:92:
                    5e:32:6a:9c:97:8e:47:3d:b8:d0:b2:89:a0:ff:02:
                    9d:a9:42:3f:00:70:a8:73:a7:1f:cb:23:78:bf:84:
                    1d:c7:b0:90:82:95:26:99:08:0f:d1:b6:30:c9:cb:
                    8c:05:62:5f:4d:11:32:6d:5b:73:a6:3b:c3:0f:4b:
                    b1:d1:e6:80:ed:fa:b7:eb:39:cd:0e:c0:d5:34:37:
                    5a:1a:9c:41:c7:b2:c0:60:e6:ab:d6:fc:65:52:35:
                    1e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:75:37:70:65:BA:C9:5E:F5:96:7B:9C:01:7D:AE:28:AC:98:6F:0A
            X509v3 Authority Key Identifier:
                keyid:B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:43:df:5b:ba:e3:f7:03:b2:d1:53:d7:1b:b3:df:4a:6c:40:
         21:f9:ad:7b:11:de:d6:e5:91:30:a4:61:b3:b2:00:a0:8b:3b:
         45:19:a6:ce:38:ca:e1:3c:7c:1c:cb:0a:99:d6:bd:7d:ee:76:
         20:01:e1:69:77:64:f6:e3:67:23:2e:eb:31:d4:e4:1d:57:15:
         76:fa:2b:ef:77:99:6c:6b:7e:70:cc:8c:80:b1:53:2d:d0:cf:
         86:9b:03:c4:37:3e:ca:40:f2:dc:5e:ef:af:63:00:ea:de:8f:
         4e:73:87:b2:bb:b3:db:fc:ee:19:d3:c2:67:9d:44:d0:d4:7e:
         a2:5d:1d:40:98:33:8c:cc:62:a1:82:87:e4:e2:22:76:eb:b9:
         7e:51:b6:4b:66:ca:9a:e4:bc:a1:50:4c:4d:49:e5:43:90:f5:
         ad:0d:ea:4f:c2:bb:87:ec:e0:e0:4e:2e:63:b2:e3:07:92:5c:
         4e:b0:12:db:e3:b4:0a:2a:e6:43:4b:ca:4e:ca:c2:11:ee:58:
         01:58:65:83:c0:42:86:bb:ef:e4:3b:77:a2:a8:41:fe:56:72:
         dd:3e:3a:9f:8c:d5:41:50:8d:74:19:ca:93:39:0c:da:20:c8:
         a1:b7:dc:33:14:33:3c:3e:a5:44:62:a1:bf:6c:33:d8:49:70:
         4e:b6:b3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:57:08 2025 by rpki-client