Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft
File:                     tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft (raw, json)
Hash identifier:          r/uH7RHhelHNdSbCcMim9k0cq90PZ1p2Q9NARV3vAWw=
Subject key identifier:   6C:3B:62:E8:E2:CD:C2:79:BA:15:E2:7D:90:3D:D8:37:D6:2E:EA:D9
Authority key identifier: B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05
Certificate issuer:       /CN=A916A0AF/serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105
Certificate serial:       0563
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft
Manifest number:          055E
Signing time:             Mon 12 May 2025 23:10:18 +0000
Manifest this update:     Mon 12 May 2025 23:10:17 +0000
Manifest next update:     Mon 19 May 2025 23:10:17 +0000
Files and hashes:         1: tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl (hash: BmEeasSm5ZmYVyw/h359HdbmTPtzHpnoxeYCAYoUfJQ=)
                          2: 529F69FCE5CA11EBB98C5577C4F9AE02.roa (hash: iGGEAjUC0++42POw1gb2SZmwmNS0zkkpPN27YBry/aI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl
                          rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 23:10:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1379 (0x563)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A0AF, serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105
        Validity
            Not Before: May 12 23:10:17 2025 GMT
            Not After : May 19 23:10:17 2025 GMT
        Subject: CN=68227fda-4dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:79:79:21:90:64:b0:c6:b9:05:a7:07:7e:e9:
                    2a:c7:a2:79:7f:b7:ba:26:8b:27:60:16:b1:ab:08:
                    d6:a8:17:ea:82:32:af:35:e9:55:f3:20:d8:7e:eb:
                    be:52:d2:8f:f3:ae:97:c7:67:f1:3e:bb:1f:5f:a6:
                    0c:e5:13:19:8d:f9:20:3f:f3:d8:e9:b2:ab:83:f3:
                    a4:6c:86:74:55:5b:5d:5a:ea:d3:bc:02:85:07:9f:
                    c8:6f:1d:36:e3:2c:00:c7:ff:14:cb:2e:69:6d:8c:
                    b9:61:55:1a:0a:04:df:3c:cb:83:ee:25:47:10:2f:
                    ae:5a:89:7a:47:70:82:ea:c2:b6:60:fc:0e:4d:24:
                    1a:65:ba:70:0d:f1:2c:31:66:de:bc:b2:d6:d7:d5:
                    43:51:ca:cd:dc:b7:71:b5:8f:f6:3a:7d:3c:8d:f4:
                    d3:6e:ef:33:24:c3:1e:9b:a8:52:d1:99:24:23:b8:
                    27:78:8c:0a:a6:85:35:d3:1b:45:a7:2c:8a:05:c0:
                    bc:4d:ed:be:11:6a:40:f8:f0:74:d1:f6:9d:8f:2c:
                    4e:34:b4:20:96:c5:f3:ae:e4:91:24:3d:98:08:bf:
                    08:97:78:f1:94:2b:17:ac:99:6f:46:75:0c:af:21:
                    c6:6e:5f:41:37:57:76:57:85:6a:d3:65:3c:cf:50:
                    64:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:3B:62:E8:E2:CD:C2:79:BA:15:E2:7D:90:3D:D8:37:D6:2E:EA:D9
            X509v3 Authority Key Identifier:
                keyid:B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:6d:16:c0:66:62:f5:43:c7:09:92:e6:5e:7f:99:a6:f7:0d:
         fe:3e:da:95:9c:95:88:94:21:3d:f8:18:78:47:8a:c0:6f:e1:
         15:23:36:0c:e6:1d:52:5e:8c:ec:56:b8:18:41:9f:d6:99:ce:
         80:f4:81:22:79:b0:18:68:6c:92:85:c0:73:58:2a:e5:74:65:
         95:c1:23:de:f7:65:53:2e:98:6f:ff:ae:0f:14:43:35:d4:79:
         2c:41:60:d5:92:3c:9b:d1:48:3a:7a:06:1b:aa:c1:81:f4:97:
         2e:6e:af:ae:21:21:18:b6:b7:da:de:34:ad:ea:d2:1c:d0:5c:
         0b:12:e8:65:ce:85:04:93:7b:98:25:3e:5d:8a:3c:ba:ff:23:
         5e:71:96:ff:39:83:63:fb:a1:b3:8f:e5:75:54:98:bb:4a:0f:
         7b:52:70:5c:d6:39:9c:f1:87:23:3d:36:67:7a:9d:b0:d1:b4:
         aa:5b:99:45:76:49:ee:49:8a:06:17:5e:cc:53:ff:bb:67:00:
         59:37:5b:98:ec:b7:31:f4:39:d7:37:c1:5e:64:ad:02:f7:3b:
         25:34:eb:1a:d8:61:23:fc:52:c6:c4:0a:ba:48:7d:07:4b:4f:
         4c:3a:13:1e:e0:d8:1b:91:39:2f:c9:b5:bf:d6:89:7a:4f:e4:
         55:75:a4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:37:34 2025 by rpki-client