Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft
File:                     tr-xkXvTGlViMihYRudjoUMyymg.mft (raw, json)
Hash identifier:          Y1ca5n7nhWwM6NY/L0zUw/z30OIhCwmju7gjogNEqrE=
Subject key identifier:   74:87:F0:3D:E2:EC:DF:82:6C:51:23:77:4B:4F:6D:4E:E7:60:20:E6
Authority key identifier: B6:BF:B1:91:7B:D3:1A:55:62:32:28:58:46:E7:63:A1:43:32:CA:68
Certificate issuer:       /CN=A91A6E4D/serialNumber=B6BFB1917BD31A556232285846E763A14332CA68
Certificate serial:       053A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tr-xkXvTGlViMihYRudjoUMyymg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft
Manifest number:          053A
Signing time:             Mon 30 Jun 2025 23:53:41 +0000
Manifest this update:     Mon 30 Jun 2025 23:53:40 +0000
Manifest next update:     Mon 07 Jul 2025 23:53:40 +0000
Files and hashes:         1: tr-xkXvTGlViMihYRudjoUMyymg.crl (hash: P1NfU5DWWQBStSYDwjqZ84dUbLOvbiYK8nvlhA8C39k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.crl
                          rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tr-xkXvTGlViMihYRudjoUMyymg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 23:53:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1338 (0x53a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6E4D, serialNumber=B6BFB1917BD31A556232285846E763A14332CA68
        Validity
            Not Before: Jun 30 23:53:40 2025 GMT
            Not After : Jul  7 23:53:40 2025 GMT
        Subject: CN=68632384-9e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:01:9e:b5:25:51:78:04:92:30:80:5c:3c:59:
                    43:0e:5a:7d:20:e5:6d:25:26:13:86:a5:18:77:7e:
                    38:85:b4:03:70:63:32:cf:50:e4:7e:6f:21:f0:4d:
                    0e:5e:ec:51:04:78:7e:d1:72:d7:3c:2b:0b:0d:d9:
                    b5:56:2f:94:19:b1:a5:17:e1:11:5d:e6:9c:f7:d0:
                    dd:78:91:24:19:89:10:4a:94:9a:47:fd:13:62:e1:
                    e7:c7:19:b1:af:bc:d8:db:f5:80:d0:02:82:62:f6:
                    16:d4:fd:07:76:5b:79:41:3a:68:05:38:96:f6:b5:
                    92:fe:2f:52:7d:21:8f:f4:3f:bd:3b:67:87:54:bb:
                    41:b5:7e:49:3b:75:7a:40:09:a1:18:4e:01:0d:1e:
                    36:ef:ef:c6:50:0b:59:3f:b3:f9:2c:a1:00:0e:3c:
                    88:aa:a8:db:15:b1:6a:05:15:34:a4:2d:e7:97:f5:
                    74:6c:31:b7:39:90:02:82:83:c9:99:64:47:e2:7f:
                    a2:1d:3a:07:00:16:e5:9d:8e:64:51:6b:a3:46:f0:
                    90:0a:b1:9e:cc:d8:cf:b9:dd:61:07:e8:b4:97:32:
                    1c:a1:56:71:2b:97:42:e9:60:a3:24:97:68:20:bf:
                    4d:f2:3f:22:96:50:de:ae:0f:68:8b:07:c7:88:59:
                    78:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:87:F0:3D:E2:EC:DF:82:6C:51:23:77:4B:4F:6D:4E:E7:60:20:E6
            X509v3 Authority Key Identifier:
                keyid:B6:BF:B1:91:7B:D3:1A:55:62:32:28:58:46:E7:63:A1:43:32:CA:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tr-xkXvTGlViMihYRudjoUMyymg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f5:f0:99:85:41:8f:c6:4a:68:b1:ec:11:89:01:1c:ef:bf:
         21:de:aa:78:71:0e:fd:1b:f1:59:61:0b:73:10:b0:37:bf:fe:
         6b:36:b9:ce:ad:de:64:69:86:01:dd:0f:91:74:a1:47:96:bd:
         ff:f0:16:d3:03:94:52:56:17:e4:df:7c:6b:e0:b0:22:1d:68:
         cd:7c:82:7a:f0:68:fa:5d:16:cc:95:3e:86:62:48:52:e5:de:
         35:b1:47:c0:f5:f8:5b:b4:ba:f2:b4:fe:ea:89:71:7d:06:34:
         73:37:c9:dd:b1:78:ec:03:70:03:3e:6f:86:3e:bc:97:e0:9d:
         bb:67:a2:6a:cb:cf:ee:9a:22:71:c8:f1:48:de:39:cf:17:24:
         28:fb:cb:01:a7:f4:ec:12:e2:f5:10:cf:69:c8:59:4d:b0:26:
         5b:de:a9:64:d6:a5:7c:28:43:b4:69:34:88:cf:b2:34:26:7e:
         a3:a7:33:f5:ff:b7:b2:9e:55:03:a2:64:4b:71:a8:53:c7:07:
         69:06:53:e4:56:92:de:2c:2c:78:64:f8:3d:b9:a4:7a:d0:d7:
         70:23:8c:e9:6f:24:5d:de:d1:7c:34:29:cc:48:15:8e:25:de:
         d6:6b:f1:4b:67:cb:93:82:6e:7a:af:a3:1c:88:a0:4c:d9:ae:
         89:34:4e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:29:48 2025 by rpki-client