Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft
File:                     TSeYiynlKyZQPcq8BBqz9h8kEFE.mft (raw, json)
Hash identifier:          dbhdMhN7dJX2bNm9Ftpo6+XhkFo6FLPoI4Qu2Yhp4Jo=
Subject key identifier:   2F:4C:C2:93:1D:E3:50:C0:41:AF:66:BD:4F:4E:F6:A0:87:9B:0E:CC
Authority key identifier: 4D:27:98:8B:29:E5:2B:26:50:3D:CA:BC:04:1A:B3:F6:1F:24:10:51
Certificate issuer:       /CN=A91383D8/serialNumber=4D27988B29E52B26503DCABC041AB3F61F241051
Certificate serial:       05AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft
Manifest number:          05A7
Signing time:             Mon 12 May 2025 22:58:12 +0000
Manifest this update:     Mon 12 May 2025 22:58:11 +0000
Manifest next update:     Mon 19 May 2025 22:58:11 +0000
Files and hashes:         1: TSeYiynlKyZQPcq8BBqz9h8kEFE.crl (hash: 3yGPbYtVo3HYHXFJOel/4U6PVVs9E5YuxjK1Yv137Gs=)
                          2: F14DD31CCA2D11EB8B7FE060C4F9AE02.roa (hash: nlbZwdmWCR0rCntJsOjXUzxC/iQIDD9NG+5T6R9ZlqQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.crl
                          rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 22:58:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1454 (0x5ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91383D8, serialNumber=4D27988B29E52B26503DCABC041AB3F61F241051
        Validity
            Not Before: May 12 22:58:11 2025 GMT
            Not After : May 19 22:58:11 2025 GMT
        Subject: CN=68227d04-25d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ca:31:cf:da:c3:66:8c:67:ec:be:0b:44:c0:
                    d2:f9:40:1f:e9:c7:fd:0b:c7:b5:85:4a:88:54:fb:
                    c4:d9:18:1c:31:70:25:65:27:b3:d7:5c:1a:73:4f:
                    56:11:5e:0c:6d:59:13:0e:ca:6a:14:2e:17:62:ec:
                    f6:b8:33:3e:8a:ec:48:10:ff:ab:94:29:7c:c0:f3:
                    f3:14:f1:2e:f5:55:f3:7d:9c:82:5c:46:15:14:14:
                    84:49:af:76:01:0c:d4:54:b7:97:6c:3a:a3:47:c6:
                    85:f6:ae:3c:ea:de:ef:b9:76:8a:d9:04:73:9b:8b:
                    f3:da:cf:10:59:75:68:c2:1c:15:42:84:ff:38:c2:
                    e9:59:f8:40:d1:4a:c8:ec:93:2e:07:1a:5d:a5:79:
                    3c:85:36:d2:8a:03:b0:c0:a4:88:64:11:5a:8f:87:
                    25:61:ed:9f:b6:17:34:c7:dd:c1:8b:df:4d:dc:03:
                    18:85:46:37:cf:53:26:19:6d:b2:99:c9:5c:5e:36:
                    97:b6:0c:73:8c:85:b6:ac:38:f0:6c:33:27:15:b7:
                    a6:de:63:25:c4:a1:06:5e:68:ba:35:fd:79:dd:a5:
                    39:20:b7:5d:f3:f8:93:f9:2b:a7:d0:97:36:3a:82:
                    bc:2d:05:44:68:34:a1:a5:f5:0d:db:98:e6:7a:eb:
                    3f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:4C:C2:93:1D:E3:50:C0:41:AF:66:BD:4F:4E:F6:A0:87:9B:0E:CC
            X509v3 Authority Key Identifier:
                keyid:4D:27:98:8B:29:E5:2B:26:50:3D:CA:BC:04:1A:B3:F6:1F:24:10:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:db:c5:01:b6:11:c5:80:ae:5f:bb:3f:9f:6e:d9:92:e4:17:
         48:72:2b:43:be:e9:e1:9a:9c:71:45:3a:37:b1:e9:6c:e0:90:
         83:ec:06:1e:ca:c4:6b:8e:ec:e6:11:fa:61:7f:2f:ad:9d:69:
         12:0d:6a:8d:0c:5c:b9:f9:3c:bc:37:b1:df:be:da:7a:22:fc:
         39:f4:39:b4:21:1f:3c:de:2a:64:33:9b:b6:ea:a4:93:94:97:
         c5:53:38:0a:d2:e6:dc:a5:21:03:13:9d:34:be:31:81:d4:28:
         03:76:b4:d7:ec:cf:16:89:37:d8:1f:0f:df:ed:f0:7a:23:1b:
         cc:b5:a7:67:cd:56:31:53:0e:2d:87:38:53:ab:e8:a4:a4:09:
         d5:6a:4a:ab:f1:1c:46:af:70:ca:e6:64:5d:b9:34:29:ba:89:
         fd:85:95:22:6a:a4:3c:b1:f5:b9:74:ea:3d:6b:82:56:e7:5b:
         f8:26:b1:87:1b:42:6a:fb:ad:21:63:ff:1f:58:a9:72:40:6b:
         65:bf:59:36:ba:9a:8f:5b:33:c1:43:70:39:f3:07:10:35:bb:
         d3:b6:fb:7d:84:6d:bd:8a:17:b2:20:5e:8b:89:ef:61:9a:44:
         c0:ee:b6:15:e7:23:40:b7:dd:9b:ee:46:95:c5:82:6b:58:95:
         ed:46:ac:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:30:53 2025 by rpki-client