Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft
File:                     tendxr8J-JRYVWCHRC2UjEQDRTA.mft (raw, json)
Hash identifier:          KIbglqZ8K8YB6CDDIwFNlf2aKrHfQXjkxEuaVzCrTww=
Subject key identifier:   32:79:A6:AC:A5:B4:97:E1:AD:F8:B2:20:FB:0B:92:B5:B7:77:AA:75
Authority key identifier: B5:E9:DD:C6:BF:09:F8:94:58:55:60:87:44:2D:94:8C:44:03:45:30
Certificate issuer:       /CN=A915568B/serialNumber=B5E9DDC6BF09F89458556087442D948C44034530
Certificate serial:       01F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft
Manifest number:          01EB
Signing time:             Sun 19 Oct 2025 05:01:26 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:26 +0000
Manifest next update:     Sun 26 Oct 2025 05:01:26 +0000
Files and hashes:         1: tendxr8J-JRYVWCHRC2UjEQDRTA.crl (hash: Zpe69qq/Kpf0LznjRiV6NGX+9UCReWw0raJ7BBqFJ+I=)
                          2: 4FD4AF70C39511ED99703D2AC4F9AE02.roa (hash: 9/AcvjliR95434ywgMrtXlXwFBmsQrBKTnsFFaaHZi8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.crl
                          rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915568B, serialNumber=B5E9DDC6BF09F89458556087442D948C44034530
        Validity
            Not Before: Oct 19 05:01:26 2025 GMT
            Not After : Oct 26 05:01:26 2025 GMT
        Subject: CN=68f470a6-03de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:fe:b4:24:80:9b:79:f5:5b:38:4f:8a:8c:20:
                    7f:36:05:1e:b6:73:7e:c2:ea:95:c3:6e:81:60:25:
                    8c:3b:6e:4c:73:28:2b:74:c0:73:8a:8d:13:df:71:
                    06:ae:0a:16:01:79:26:49:89:be:49:d2:b1:cf:3a:
                    13:7b:20:b0:92:de:1a:df:d3:c3:f5:03:b2:6f:b2:
                    d9:2b:cc:a5:69:27:cb:fb:4a:c2:2c:e8:c9:36:45:
                    79:fa:0e:70:f0:76:74:db:e2:a3:31:d8:96:a1:35:
                    82:63:68:7e:86:c2:1c:35:f7:37:5e:da:15:6b:27:
                    6b:43:89:fc:35:5b:0b:b2:41:09:27:ea:f9:ef:e8:
                    e0:98:ee:26:f4:2d:08:fb:53:5f:b0:e3:02:0b:36:
                    ea:83:34:24:1f:55:5a:26:98:4f:43:bc:15:8b:3f:
                    ea:f8:bc:5d:9c:fc:66:b7:cd:f0:2d:fb:3c:b9:71:
                    d6:fd:ae:9c:af:16:81:85:1f:8b:43:ed:37:8b:1c:
                    9e:dd:cb:31:da:3c:19:e1:00:96:a3:37:82:93:34:
                    13:1a:c1:6e:9d:0f:84:73:18:ca:29:ae:36:cd:08:
                    95:bd:53:f0:65:8b:f9:6a:08:86:c8:87:ed:c4:55:
                    1a:34:53:cc:a1:64:cf:f3:b8:bd:9f:b1:6b:30:3b:
                    b9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:79:A6:AC:A5:B4:97:E1:AD:F8:B2:20:FB:0B:92:B5:B7:77:AA:75
            X509v3 Authority Key Identifier:
                keyid:B5:E9:DD:C6:BF:09:F8:94:58:55:60:87:44:2D:94:8C:44:03:45:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:76:c8:d1:1a:29:d0:5d:dc:c3:43:41:9e:4c:b8:aa:fa:5f:
         4a:c3:bf:52:6d:b7:c5:5e:9c:dd:85:26:15:41:05:5a:bd:9d:
         60:a8:e2:6d:0c:7f:0e:a1:9b:0c:f9:15:51:6d:8b:28:32:c7:
         01:b9:2a:bf:fe:24:cf:61:60:dd:25:5b:bf:fb:1d:21:2b:6f:
         ca:93:b9:d1:08:7f:e2:fb:34:eb:a4:aa:49:29:ae:57:8d:86:
         df:1a:dd:03:05:04:96:0f:5a:e1:20:c2:c2:a1:22:62:95:32:
         4e:e1:e6:20:0b:56:06:c7:33:9e:25:18:a9:8f:12:52:6e:23:
         b0:20:ca:39:9d:ef:27:9a:3c:3c:6e:05:ce:63:8c:06:51:3b:
         a2:79:cf:0b:22:2e:ec:92:dc:4e:66:79:59:74:a6:c1:76:68:
         ac:ff:1c:3c:31:e3:9e:5b:23:bd:98:ea:f5:16:e1:85:4a:f1:
         e7:21:e5:b7:29:19:c1:f7:ae:ad:b2:19:0d:50:69:a1:3e:07:
         45:a7:57:94:ff:ff:48:27:a8:9b:ad:19:55:fe:21:67:0b:d2:
         2c:2d:13:c6:29:a9:23:05:94:ea:57:2e:e5:24:ec:29:e3:34:
         e3:41:3e:38:95:b1:c2:ea:0b:af:f5:76:96:15:98:89:ba:73:
         43:fb:7a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:45:08 2025 by rpki-client