Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915542D/0D1EC92C1FE111EB99C01C60C4F9AE02/TShKyE8O4JX9a-sO2MZfx15p__g.mft
File:                     TShKyE8O4JX9a-sO2MZfx15p__g.mft (raw, json)
Hash identifier:          UglhbnU670NO1EMYIhyBPQwacY7Huql++43SMZ6qIhc=
Subject key identifier:   0F:F5:F2:A9:5F:3A:54:08:DE:D3:0D:7C:20:37:7E:10:07:8C:BB:6B
Authority key identifier: 4D:28:4A:C8:4F:0E:E0:95:FD:6B:EB:0E:D8:C6:5F:C7:5E:69:FF:F8
Certificate issuer:       /CN=A915542D/serialNumber=4D284AC84F0EE095FD6BEB0ED8C65FC75E69FFF8
Certificate serial:       076C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TShKyE8O4JX9a-sO2MZfx15p__g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915542D/0D1EC92C1FE111EB99C01C60C4F9AE02/TShKyE8O4JX9a-sO2MZfx15p__g.mft
Manifest number:          076A
Signing time:             Wed 02 Jul 2025 21:50:06 +0000
Manifest this update:     Wed 02 Jul 2025 21:50:05 +0000
Manifest next update:     Wed 09 Jul 2025 21:50:05 +0000
Files and hashes:         1: TShKyE8O4JX9a-sO2MZfx15p__g.crl (hash: qQ84TWz88g0Uynr4Paqorw77Dd/A8KAwQ7ZoV+iDPbE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915542D/0D1EC92C1FE111EB99C01C60C4F9AE02/TShKyE8O4JX9a-sO2MZfx15p__g.crl
                          rsync://rpki.apnic.net/member_repository/A915542D/0D1EC92C1FE111EB99C01C60C4F9AE02/TShKyE8O4JX9a-sO2MZfx15p__g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TShKyE8O4JX9a-sO2MZfx15p__g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 21:50:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1900 (0x76c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915542D, serialNumber=4D284AC84F0EE095FD6BEB0ED8C65FC75E69FFF8
        Validity
            Not Before: Jul  2 21:50:05 2025 GMT
            Not After : Jul  9 21:50:05 2025 GMT
        Subject: CN=6865a98e-ab02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:28:8d:2b:ab:f3:81:fc:5e:55:44:f3:ed:4a:
                    b0:47:95:97:df:40:85:1f:17:61:7c:08:76:58:ee:
                    e4:bd:53:a9:24:37:f0:8d:b6:b9:22:5b:9d:0c:70:
                    b3:97:d6:d5:f1:d8:7b:38:ac:36:e8:c9:f5:fb:3f:
                    5f:d5:30:8c:96:be:5a:5b:39:d4:d8:c2:67:ff:0b:
                    fd:62:bf:d9:ad:17:a5:c8:8f:f9:20:4e:ba:3f:e9:
                    f4:e6:4f:2f:b1:68:28:ca:f2:0f:af:d5:ce:16:12:
                    a7:46:1b:23:fb:6c:e1:df:2e:af:8d:36:aa:f8:4f:
                    10:0a:a7:43:3d:4c:bf:7c:7e:ff:e9:7c:59:fe:d0:
                    f0:7c:2c:09:a7:a7:10:5a:63:85:2d:f0:c1:a0:50:
                    9f:ba:98:ae:10:44:1c:e4:85:44:a1:23:4b:3d:f7:
                    5c:a3:6d:59:d7:82:d4:fb:86:a0:ff:4f:ec:22:ca:
                    00:39:93:ec:36:66:37:a1:44:f9:6b:f6:04:95:e6:
                    64:ff:06:0d:15:bf:8b:e3:8d:c6:65:33:57:52:44:
                    3d:9a:a6:38:64:da:3c:7f:27:bf:87:7a:cb:c3:b4:
                    50:0c:e0:3b:73:31:df:95:f6:d2:a6:a8:52:05:ca:
                    c0:4b:8f:87:d3:1a:e0:cc:ba:05:fa:d0:f5:26:02:
                    99:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F5:F2:A9:5F:3A:54:08:DE:D3:0D:7C:20:37:7E:10:07:8C:BB:6B
            X509v3 Authority Key Identifier:
                keyid:4D:28:4A:C8:4F:0E:E0:95:FD:6B:EB:0E:D8:C6:5F:C7:5E:69:FF:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915542D/0D1EC92C1FE111EB99C01C60C4F9AE02/TShKyE8O4JX9a-sO2MZfx15p__g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TShKyE8O4JX9a-sO2MZfx15p__g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915542D/0D1EC92C1FE111EB99C01C60C4F9AE02/TShKyE8O4JX9a-sO2MZfx15p__g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:fb:ef:88:97:dd:08:fd:29:69:b4:58:26:9b:e6:5b:e4:a5:
         b4:e1:e8:f5:eb:a7:52:59:0b:1d:40:bc:b3:04:a7:e6:1b:43:
         94:ef:3b:0a:8a:31:50:79:9f:ff:d7:21:bc:e7:04:f3:5a:a4:
         7e:32:50:ec:fb:73:11:ac:47:77:e7:3f:a6:60:c3:9e:83:03:
         23:7f:8d:c9:83:f7:62:df:84:0e:c5:4d:f6:5e:3e:9a:d2:fa:
         24:2c:3e:03:ec:91:3d:db:8f:f6:21:2b:7d:b8:fd:fa:f0:63:
         09:68:a9:fa:77:e4:f8:ea:ab:26:7f:a8:9d:a7:5b:35:c8:b9:
         5c:58:d8:26:ff:d0:37:e0:58:39:0e:41:a1:4d:5a:0a:ec:13:
         a0:d6:83:62:b6:b9:af:cc:6a:8d:86:c1:d1:98:74:f2:5f:88:
         40:d3:ec:b7:2b:a3:a4:91:50:c3:49:ae:47:09:43:c8:11:f0:
         4a:62:72:69:04:1b:d8:1c:ea:ac:b8:73:46:e4:91:8f:23:a4:
         58:e9:21:56:62:0e:ee:6a:80:75:93:bc:1a:a1:2f:bc:f8:ac:
         ec:5f:52:f1:af:0b:72:42:d1:c2:34:5f:23:f5:cb:d2:fa:7c:
         c7:6f:b0:a5:38:0e:72:59:50:91:fb:a9:f8:58:48:f3:5a:c0:
         21:24:c0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:11:10 2025 by rpki-client