Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft
File:                     TvlHO1VK4acroJgf_v4Tji1IDsw.mft (raw, json)
Hash identifier:          L4RbDpFM4liJLtGDlptWt91frD5CLKkR1phUvQQh+Cg=
Subject key identifier:   19:F6:88:97:5B:45:9A:B3:45:38:34:69:8C:9C:59:D4:2C:5D:60:D0
Authority key identifier: 4E:F9:47:3B:55:4A:E1:A7:2B:A0:98:1F:FE:FE:13:8E:2D:48:0E:CC
Certificate issuer:       /CN=A91DB4C3/serialNumber=4EF9473B554AE1A72BA0981FFEFE138E2D480ECC
Certificate serial:       095D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft
Manifest number:          0955
Signing time:             Mon 16 Jun 2025 20:01:59 +0000
Manifest this update:     Mon 16 Jun 2025 20:01:58 +0000
Manifest next update:     Mon 23 Jun 2025 20:01:58 +0000
Files and hashes:         1: TvlHO1VK4acroJgf_v4Tji1IDsw.crl (hash: GACe1hXyLrPB4oQipDiFkOsc67vu2uKKotFzfOIm/AE=)
                          2: E32E2F000EE811EE90BBC818C4F9AE02.roa (hash: rZTxgnVXWMDQsg0oTYE7f4kyKGpDxh1zgyaFzYbZkqY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.crl
                          rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Jun 2025 20:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2397 (0x95d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB4C3, serialNumber=4EF9473B554AE1A72BA0981FFEFE138E2D480ECC
        Validity
            Not Before: Jun 16 20:01:58 2025 GMT
            Not After : Jun 23 20:01:58 2025 GMT
        Subject: CN=68507836-78af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fe:ba:14:2a:82:34:45:18:66:10:bd:88:55:
                    ef:bb:5c:86:a2:ac:0b:42:f9:a9:6e:ed:63:3f:1d:
                    ab:72:99:92:34:a7:39:fe:a7:55:42:07:50:93:83:
                    8e:98:87:69:0d:2c:b2:3d:9d:ed:0a:27:5b:74:0a:
                    20:61:2d:98:7b:39:b2:5a:94:a3:14:64:b5:70:8d:
                    31:5f:eb:55:eb:72:ff:c8:f4:c4:11:9b:23:3b:b7:
                    b6:c2:b0:5e:14:b4:fd:61:05:22:f7:5b:7c:49:65:
                    fa:e6:09:16:fe:8c:42:ab:47:21:57:cc:81:4b:e8:
                    f6:70:06:72:f6:e8:63:14:b4:e0:f3:3e:f1:54:e1:
                    2e:40:35:75:59:3b:a7:3a:5d:a6:6f:7f:19:c1:b2:
                    9a:4b:e8:95:8a:5c:57:77:0b:0e:9f:61:5f:7a:55:
                    db:5c:ef:25:05:42:05:db:ac:a1:9e:d8:2b:b4:fc:
                    4a:03:1f:94:7b:18:f6:b0:dd:4f:23:7d:17:3b:68:
                    ea:57:cf:db:a0:ef:1f:db:9b:74:07:34:3f:22:5f:
                    f1:d1:f6:d4:22:9e:50:95:d2:3c:f3:01:e9:75:11:
                    14:4b:ef:3f:32:39:45:3e:92:38:29:6d:25:a5:48:
                    a2:b1:36:97:01:0b:d3:a7:48:75:13:3e:e3:16:2e:
                    75:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F6:88:97:5B:45:9A:B3:45:38:34:69:8C:9C:59:D4:2C:5D:60:D0
            X509v3 Authority Key Identifier:
                keyid:4E:F9:47:3B:55:4A:E1:A7:2B:A0:98:1F:FE:FE:13:8E:2D:48:0E:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:a8:3c:4d:89:f5:ed:fa:42:51:52:c9:24:d1:89:07:ad:bb:
         7d:89:ad:98:43:1b:01:32:d1:4a:1b:f5:3b:6c:47:21:8c:93:
         64:a0:0f:db:e4:84:2c:05:fe:7b:08:dc:de:ca:96:68:4d:79:
         3f:68:38:d6:60:ae:ed:76:ef:9e:46:c6:d9:2e:46:a5:b4:cd:
         4b:06:a8:6a:be:88:e8:6f:c5:26:7b:9a:04:1a:54:40:35:4f:
         c2:63:c2:fb:e5:04:75:dd:ef:e4:9c:45:f9:9f:fc:23:9c:32:
         5a:1c:8d:4d:8b:60:56:5e:47:61:15:b6:e0:5a:06:6e:1b:71:
         3e:18:dc:14:9e:cb:6e:03:29:f8:a9:ed:ee:4d:77:c6:6c:f1:
         14:bb:07:c0:65:1b:20:29:c0:81:b6:3f:55:43:51:fc:0c:b1:
         97:97:ba:50:b8:b3:16:1a:73:88:9b:95:2f:b7:40:ea:36:af:
         75:89:8d:d0:95:f6:ee:7a:c8:76:ac:cf:31:5c:5d:51:94:15:
         9b:49:fa:b7:b0:cf:d4:a6:ac:f9:c8:79:07:61:bc:1b:3c:93:
         c5:1e:e8:9d:cc:4e:80:43:35:6c:b2:e5:95:47:f0:c4:a0:88:
         c9:97:5c:23:90:de:0a:40:49:e4:27:34:eb:48:6e:c2:7f:49:
         d9:12:82:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 13:35:12 2025 by rpki-client