Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft
File:                     Tusdx9KCFNMWqjN4seKV6RAbTKo.mft (raw, json)
Hash identifier:          txs+MdmVy8xWvMYxWwqey725OKPxswv0olURACtM/RM=
Subject key identifier:   E6:36:4F:09:2C:68:E8:3F:E7:6C:A5:7E:54:7F:19:E3:74:53:B2:CB
Authority key identifier: 4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA
Certificate issuer:       /CN=A91B6B4B/serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft
Manifest number:          07
Signing time:             Fri 09 May 2025 07:10:34 +0000
Manifest this update:     Fri 09 May 2025 07:10:33 +0000
Manifest next update:     Fri 16 May 2025 07:10:33 +0000
Files and hashes:         1: Tusdx9KCFNMWqjN4seKV6RAbTKo.crl (hash: wfjQK1TOi9A+2qiF2Bw2CDpzYIg+ib/dvd/QkL381NU=)
                          2: B47FEDD024C411F0A4C45287C4F9AE02.roa (hash: wvzHuF+2h6ezDImAHqgncsm+q7jG9ZtSU72WgGzJGBg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl
                          rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 May 2025 07:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6B4B, serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA
        Validity
            Not Before: May  9 07:10:33 2025 GMT
            Not After : May 16 07:10:33 2025 GMT
        Subject: CN=681daa69-4ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ef:b5:aa:5a:5f:7d:5a:83:1b:b0:59:0e:2b:
                    a0:6e:a8:f7:60:94:90:7f:78:79:9f:8b:42:23:5d:
                    54:31:eb:8e:db:ed:a9:10:3b:f6:99:38:57:97:39:
                    f0:7a:f1:f5:66:7f:c8:f3:13:80:8c:80:27:aa:a4:
                    7b:7b:fb:38:5d:cd:f0:9b:e3:f6:fd:88:b6:6c:96:
                    2a:81:e1:ba:b9:19:53:f4:9c:dd:e5:01:b6:62:28:
                    65:41:f2:4d:93:b3:8a:f5:58:0c:6a:2b:13:35:08:
                    3c:98:f8:f7:a9:18:8c:b0:0e:7c:18:57:4c:b8:d8:
                    bc:67:09:f7:fe:a5:2b:5d:fc:22:ec:06:4b:ae:af:
                    31:0e:7f:53:dd:b8:29:01:e2:b5:d3:27:83:f1:b3:
                    3b:ee:85:40:18:21:6e:ad:48:27:55:25:85:25:34:
                    20:59:54:7e:4e:b4:ae:8c:c3:bb:90:64:b2:34:8c:
                    3c:f2:a0:ef:9f:6b:e4:4a:16:fa:05:bd:b1:81:b3:
                    11:ca:84:ea:5c:6d:8b:08:f3:91:e7:7b:4a:70:ee:
                    12:83:d7:b3:45:fd:ea:f4:a8:eb:08:dc:94:91:7e:
                    94:02:75:c4:77:00:ae:aa:22:02:0b:cb:cc:5d:24:
                    2c:c6:8a:5c:4a:cb:b4:8a:2e:26:29:31:87:6a:50:
                    b1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:36:4F:09:2C:68:E8:3F:E7:6C:A5:7E:54:7F:19:E3:74:53:B2:CB
            X509v3 Authority Key Identifier:
                keyid:4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f1:ad:ed:b5:d6:e3:d2:f2:28:67:6a:2b:a4:3f:aa:c6:d8:
         91:ca:36:46:8a:69:e5:16:6a:af:d1:af:a2:11:4c:46:4c:95:
         29:31:09:87:90:19:68:24:c4:2d:e9:dc:58:2d:a0:c5:83:04:
         f6:93:22:c7:ab:9b:97:86:c3:22:77:1e:62:a7:7d:8f:9f:f9:
         7b:9b:08:c7:2e:6c:94:84:c6:50:3a:d8:7f:50:e6:37:21:93:
         35:e8:fc:71:77:aa:1a:68:64:06:17:ad:9a:20:42:0b:45:09:
         22:4b:1d:50:78:d5:ca:8a:18:4f:38:a0:66:43:ee:4f:7c:1b:
         89:ea:53:ed:e2:72:5e:0d:dc:d5:eb:27:3f:ed:83:3f:05:2e:
         60:46:94:38:80:59:bf:8a:92:bd:92:fe:f9:c5:0b:50:44:28:
         ea:71:e0:25:2e:9e:3a:cd:c7:39:a8:2c:51:6a:e6:98:43:58:
         23:10:6a:46:1b:29:6f:3a:c0:ea:5b:10:20:7b:6c:07:41:a8:
         5c:81:3a:dc:a0:75:27:ea:a3:29:c3:55:20:5e:0e:c2:08:71:
         5a:7d:43:30:26:10:8d:42:0c:c7:9e:0e:ea:bf:de:dd:92:42:
         c1:1f:7b:ca:09:94:92:2c:f2:7c:3c:95:46:b4:f3:99:e8:6d:
         68:60:13:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:47:26 2025 by rpki-client