Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
File:                     TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft (raw, json)
Hash identifier:          Do4FkzQB1ptrp0oGUaLvTFnIDVJYCS6/YSuAClyv2MA=
Subject key identifier:   77:31:B4:41:67:28:F9:4B:15:8F:2B:25:8B:4C:73:BE:8A:EC:4C:5A
Authority key identifier: 4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03
Certificate issuer:       /CN=A913344F/serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603
Certificate serial:       10BA
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
Manifest number:          10B1
Signing time:             Wed 02 Jul 2025 17:30:29 +0000
Manifest this update:     Wed 02 Jul 2025 17:30:28 +0000
Manifest next update:     Wed 09 Jul 2025 17:30:28 +0000
Files and hashes:         1: TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl (hash: uehMdkOyL4+g5IrKBgYMyXhMOW/U66NtLCHkGzCw6ok=)
                          2: 10CDE53E2C4111E98AA5057DC4F9AE02.roa (hash: XRUvAzYaseIVxGtch+U0AQhcNiwJ6tjLkzEhHdxkHCM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl
                          rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 17:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4282 (0x10ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913344F, serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603
        Validity
            Not Before: Jul  2 17:30:28 2025 GMT
            Not After : Jul  9 17:30:28 2025 GMT
        Subject: CN=68656cb5-9ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7c:36:60:78:cf:74:9e:f7:13:c3:fe:a3:b0:
                    fd:33:b1:a8:0e:fa:52:96:00:f4:a8:71:04:23:ad:
                    4e:82:25:a6:15:89:25:a0:6b:20:e7:0a:d3:e9:cd:
                    2a:e0:d8:cc:25:bc:27:db:9b:d3:0a:d0:7d:85:26:
                    d8:57:81:70:0c:17:03:3c:ee:0d:0f:1e:80:15:19:
                    80:1b:aa:e1:cf:d4:87:3d:c1:a7:c5:21:8a:48:4c:
                    1a:29:fc:04:8d:3b:92:fb:91:28:49:f6:7b:a2:cd:
                    80:22:9c:e6:44:d1:5a:d6:3f:1b:f9:25:76:4e:ce:
                    ae:c2:31:dc:ce:3f:64:18:76:f3:c3:ff:c3:32:d6:
                    b7:24:cb:a3:dc:36:c5:4f:2a:7f:0b:89:62:58:77:
                    5d:94:bf:58:10:dc:2e:d9:eb:89:4c:f8:7b:c8:e9:
                    a7:13:aa:bb:ee:93:21:fa:70:33:9c:7f:99:53:06:
                    b6:9f:03:fc:53:d0:66:91:dd:24:c6:aa:c1:75:bc:
                    fe:2f:2a:45:84:43:fc:d2:35:9a:b5:c2:2f:69:a8:
                    7b:50:7c:93:c9:bb:b8:db:10:f1:db:de:26:01:fe:
                    6a:7c:32:ef:3a:10:8c:0a:05:a1:da:4f:3b:2d:4c:
                    e3:f2:bd:9d:cb:55:27:a9:04:60:ed:6f:bd:0e:61:
                    b0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:31:B4:41:67:28:F9:4B:15:8F:2B:25:8B:4C:73:BE:8A:EC:4C:5A
            X509v3 Authority Key Identifier:
                keyid:4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:77:32:05:9d:a4:d4:50:f5:a2:25:7c:a8:f6:03:78:30:d5:
         60:ea:39:f7:b4:76:2d:3e:41:f9:72:52:7d:5b:35:00:86:67:
         14:5b:30:16:8c:35:bb:b3:99:f4:96:ea:d3:67:8d:69:98:07:
         db:a5:e7:a7:97:25:46:41:d5:19:50:72:52:55:81:7b:96:93:
         f3:1d:c2:06:94:c2:ef:24:89:ef:6f:08:90:d4:21:88:69:3a:
         44:df:36:ae:5e:aa:85:43:50:82:ac:db:3b:ef:26:2e:b9:61:
         31:38:ef:d5:98:5b:5e:0c:85:11:b7:14:46:47:ec:1c:9d:02:
         f2:52:a9:25:28:bb:6f:55:29:93:80:70:22:45:56:c5:14:03:
         c3:bf:62:58:5a:57:23:ee:15:de:05:e7:3f:08:21:e3:1c:9e:
         89:7b:b1:6e:4a:7c:9d:92:8e:20:c4:fd:0a:93:b7:9f:3c:4f:
         af:52:3b:9b:da:91:e2:74:5f:cf:fc:81:54:fe:82:fa:9b:b1:
         77:2f:d3:e0:d3:2b:a8:1a:87:55:67:8b:28:30:38:46:ad:40:
         77:52:97:c8:7e:04:ac:ba:a1:a6:3f:da:cc:f1:16:5a:10:67:
         10:4f:d1:d0:39:c0:79:55:58:e7:5f:0f:33:bf:18:86:a2:ad:
         8a:a4:91:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 01:01:38 2025 by rpki-client