Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
File:                     TTnePlBgaMODagBUgVVBPmgllbM.mft (raw, json)
Hash identifier:          CKBE1lhJ9bzkN5gf+dd1E26v4OSENH514AkgtKTIzJ0=
Subject key identifier:   47:D5:65:48:81:93:52:4F:A4:EB:7C:13:31:50:54:74:AE:98:D9:3A
Authority key identifier: 4D:39:DE:3E:50:60:68:C3:83:6A:00:54:81:55:41:3E:68:25:95:B3
Certificate issuer:       /CN=A916C4FA/serialNumber=4D39DE3E506068C3836A00548155413E682595B3
Certificate serial:       037D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
Manifest number:          0552
Signing time:             Sat 23 Aug 2025 01:07:43 +0000
Manifest this update:     Sat 23 Aug 2025 01:07:42 +0000
Manifest next update:     Sat 30 Aug 2025 01:07:42 +0000
Files and hashes:         1: TTnePlBgaMODagBUgVVBPmgllbM.crl (hash: OYdpd2RRyk3PuxNcY+356nqpPI+hGpzyzwIAX0+IWio=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.crl
                          rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:07:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 893 (0x37d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C4FA, serialNumber=4D39DE3E506068C3836A00548155413E682595B3
        Validity
            Not Before: Aug 23 01:07:42 2025 GMT
            Not After : Aug 30 01:07:42 2025 GMT
        Subject: CN=68a9145e-5474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b4:f1:10:b0:85:cb:a4:ca:58:d4:2e:86:d1:
                    04:bf:fa:d8:ef:01:d1:90:32:50:6b:6d:6f:d1:67:
                    3c:da:04:0c:5a:aa:74:8e:86:6d:b5:76:ec:28:95:
                    33:1a:d8:61:c0:7e:2f:12:2b:92:c0:2e:f7:da:a2:
                    76:5f:cd:8d:79:3d:98:7d:6f:68:40:d2:ec:23:ce:
                    fd:7b:c3:ff:c7:13:3b:5d:88:28:b7:11:5e:37:e6:
                    b8:7f:50:47:8e:1a:81:83:5d:92:bd:fd:56:d4:d6:
                    71:53:ff:3c:2b:85:30:9a:4a:78:fb:ba:8f:8d:aa:
                    96:f2:91:0d:0c:b7:67:ac:34:83:14:34:71:7a:16:
                    da:60:03:77:81:fa:71:7f:8e:ce:55:50:2e:d3:c8:
                    df:58:78:a6:e0:97:89:26:5a:84:ef:c5:1d:8f:fd:
                    cb:b1:0d:02:4c:20:76:e9:19:b3:93:b1:c7:f6:ba:
                    2b:e9:81:1a:94:d5:a5:24:17:9a:b1:22:e9:e1:52:
                    66:52:43:ed:23:2b:f6:cd:6f:0d:5e:5c:9b:aa:3b:
                    60:90:3f:d1:76:ff:c5:e0:ff:3b:ed:30:23:fc:d7:
                    08:e2:08:dc:84:b3:c7:e0:84:9c:3b:58:c0:fa:b6:
                    1b:0d:5c:cc:9b:ea:d8:d0:ed:67:5c:38:6d:a2:87:
                    e7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D5:65:48:81:93:52:4F:A4:EB:7C:13:31:50:54:74:AE:98:D9:3A
            X509v3 Authority Key Identifier:
                keyid:4D:39:DE:3E:50:60:68:C3:83:6A:00:54:81:55:41:3E:68:25:95:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:9a:62:5d:47:e9:29:0b:10:10:d4:b2:58:0e:38:36:df:2b:
         f8:6b:5d:fe:fe:33:3c:fa:ac:07:65:74:e1:03:d1:f1:7f:ff:
         3c:4e:a6:d2:a5:45:fd:73:0d:aa:86:53:d8:b7:e3:db:95:06:
         b5:3f:41:0e:f4:18:e4:12:8e:ea:fc:4b:b2:6c:1a:e1:a2:cf:
         d5:e0:b1:97:a8:5d:32:bc:80:73:a5:10:c2:de:0e:15:6c:58:
         60:63:4e:14:9b:e8:95:9c:0b:93:9a:02:e1:85:37:5e:0f:47:
         18:63:89:2d:22:36:4d:1d:98:ba:4a:f1:5e:a3:64:b1:72:26:
         c7:7e:5e:e4:70:e6:95:07:b0:d2:54:fe:de:f5:32:41:04:1e:
         b9:8b:5c:3a:5c:67:f5:a4:7d:b1:03:cf:b9:2e:70:9f:c3:c2:
         6a:6a:f3:b0:a5:fc:1f:79:22:18:ba:10:ae:1b:72:8c:8c:3a:
         c4:c9:3a:b0:2d:22:65:7a:1f:f3:40:09:f4:6d:79:72:2c:91:
         2f:4a:4c:84:a2:23:90:ed:97:b3:9d:3c:04:06:df:49:39:1b:
         a3:71:81:05:dd:67:25:97:72:a9:95:c1:28:7d:ee:6f:ae:51:
         88:fc:68:6f:b8:da:84:24:58:13:08:f1:7c:fc:28:ce:7f:a4:
         97:c4:44:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:41:58 2025 by rpki-client