Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft
File:                     tendxr8J-JRYVWCHRC2UjEQDRTA.mft (raw, json)
Hash identifier:          dCurDoQoV7EXGrDoH2Ml3uagLH45ZKKdtnv8ql6K29k=
Subject key identifier:   AD:EC:95:EC:4F:22:36:18:9E:B3:DA:E0:2A:39:6E:F4:F5:23:81:47
Authority key identifier: B5:E9:DD:C6:BF:09:F8:94:58:55:60:87:44:2D:94:8C:44:03:45:30
Certificate issuer:       /CN=A915568B/serialNumber=B5E9DDC6BF09F89458556087442D948C44034530
Certificate serial:       019E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft
Manifest number:          0199
Signing time:             Tue 13 May 2025 02:41:37 +0000
Manifest this update:     Tue 13 May 2025 02:41:37 +0000
Manifest next update:     Tue 20 May 2025 02:41:37 +0000
Files and hashes:         1: tendxr8J-JRYVWCHRC2UjEQDRTA.crl (hash: TDuufXo5pAAs2og84sCZ0bm54kWCm3RWY7guOGBhC50=)
                          2: 4FD4AF70C39511ED99703D2AC4F9AE02.roa (hash: +f458BpYNQXJWNiE1S64iQtoNN+WOZY8faBLRWwapzs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.crl
                          rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 02:41:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915568B, serialNumber=B5E9DDC6BF09F89458556087442D948C44034530
        Validity
            Not Before: May 13 02:41:37 2025 GMT
            Not After : May 20 02:41:37 2025 GMT
        Subject: CN=6822b161-086d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:e2:34:cc:f9:c7:39:ed:50:e9:6b:dc:ce:96:
                    74:2e:29:8f:47:a8:ed:23:a2:ef:75:94:a6:e5:07:
                    b0:2f:e4:10:a9:f4:29:14:24:47:11:3a:d9:40:32:
                    53:39:fd:63:4b:63:2a:b1:a8:56:67:f0:46:e4:48:
                    28:ac:cf:a2:6a:48:16:3f:86:a8:e5:45:19:cf:ca:
                    99:dc:fe:8f:37:92:04:7e:20:f3:b2:6a:af:0f:2b:
                    b4:33:7a:9d:7c:00:38:fa:8b:f9:ba:3c:d8:82:04:
                    42:25:f0:c0:fb:9e:70:57:3c:ad:1f:91:43:06:2a:
                    d2:e5:a0:7a:38:64:28:af:73:b3:fb:35:2a:dc:1e:
                    72:e8:1c:64:d9:83:8f:f9:a1:48:c5:50:ff:97:6c:
                    95:e9:3d:88:c0:f8:f5:37:17:42:42:df:c8:12:e7:
                    7a:e9:05:28:52:1c:0d:44:f2:80:d8:94:ab:d9:d2:
                    d2:d5:80:b2:fc:85:3f:01:b9:11:cc:f8:cf:cc:86:
                    35:20:d1:f5:7a:5e:af:35:a5:28:15:9f:73:da:7f:
                    b2:b6:22:73:10:7c:fb:45:f7:2c:9c:55:cc:0b:3b:
                    ba:22:65:4f:e4:82:ae:5d:20:83:98:e7:8a:89:fd:
                    40:f8:5f:6b:32:db:fe:4f:a5:b9:97:92:a5:1d:74:
                    04:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:EC:95:EC:4F:22:36:18:9E:B3:DA:E0:2A:39:6E:F4:F5:23:81:47
            X509v3 Authority Key Identifier:
                keyid:B5:E9:DD:C6:BF:09:F8:94:58:55:60:87:44:2D:94:8C:44:03:45:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:26:52:a3:5a:e8:c3:d0:d6:ac:1e:42:ec:e4:aa:2c:7b:90:
         5e:4a:a6:81:cf:a0:14:d1:dc:de:d6:ff:10:f8:dc:2d:0e:ef:
         b1:14:2e:64:06:c4:da:f9:8f:0c:6e:c2:24:0b:ac:d7:4e:d4:
         72:15:90:a9:fe:4f:d0:8d:38:d5:9a:61:85:6c:e3:4a:0c:ab:
         1c:2c:5e:a3:65:61:4b:4f:fd:9e:d4:0b:2c:8f:6a:64:3e:9f:
         c1:c0:68:da:df:80:c0:05:3c:4e:1a:54:a2:90:dc:51:82:a9:
         e6:7f:b7:4b:49:26:57:1a:49:53:d1:71:20:1e:99:a2:88:34:
         1a:fe:85:c4:3b:de:0f:0a:c8:4b:fe:4b:9c:63:c7:67:4a:25:
         97:83:5c:3b:81:a8:ef:42:af:a4:79:90:8d:6e:1a:14:14:26:
         af:d0:97:d6:64:d6:ec:16:ad:cc:6b:1a:2e:f9:a7:9f:27:06:
         b9:75:9a:ae:4a:df:c9:75:90:1c:ee:d5:68:63:ec:54:0c:21:
         fb:64:c7:e5:7a:d5:32:c5:20:a7:0e:2f:c8:6e:3f:0b:99:3c:
         aa:a0:78:db:44:f9:22:21:25:c6:e1:57:cc:4d:a3:46:17:54:
         f1:20:82:12:ac:d2:d9:c8:c9:91:b2:79:a1:fa:2a:dd:3a:01:
         40:8c:07:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:04:35 2025 by rpki-client