Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
File:                     15_gsJykSoRmkoOPxCvPQ9KjKtI.mft (raw, json)
Hash identifier:          UDKgccRGqm95kmADDM/1Ui+Bp/YCRvInaom8JnsDlrQ=
Subject key identifier:   0C:5C:E1:87:59:66:C6:FC:E8:AE:D7:A8:C1:B6:BC:42:91:EB:7F:3A
Authority key identifier: D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2
Certificate issuer:       /CN=A9127DE3/serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2
Certificate serial:       48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
Manifest number:          46
Signing time:             Sat 19 Jul 2025 07:41:20 +0000
Manifest this update:     Sat 19 Jul 2025 07:41:19 +0000
Manifest next update:     Sat 26 Jul 2025 07:41:19 +0000
Files and hashes:         1: 15_gsJykSoRmkoOPxCvPQ9KjKtI.crl (hash: QPNFc6FyItJ6JvxELbFnm5WpTyNjxv1DFoUdT0JcLdE=)
                          2: AA99F49CFC3711EFA9688687C4F9AE02.roa (hash: 970zffhkVpQStk3jgKgrN42mDxhaIFK4aP3YfXR8LM0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl
                          rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 07:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127DE3, serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2
        Validity
            Not Before: Jul 19 07:41:19 2025 GMT
            Not After : Jul 26 07:41:19 2025 GMT
        Subject: CN=687b4c1f-9f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ef:e8:a1:b8:83:56:c4:7a:d9:62:db:5b:58:
                    07:bc:be:2d:24:5d:e6:07:86:f7:90:f1:8b:69:ce:
                    77:ca:2f:56:dd:36:f9:93:af:b7:1a:78:30:89:53:
                    50:53:9b:3e:30:ee:8f:23:09:fc:6b:cf:b9:3d:bf:
                    56:0a:ae:d6:8a:f3:fa:9d:cd:22:45:16:76:62:3d:
                    8d:bf:3f:4c:f8:c4:4c:10:c4:d4:aa:64:c1:b0:b4:
                    7d:15:84:a7:7b:e2:56:03:6c:51:44:c7:9f:9f:62:
                    60:17:7d:a8:ca:d7:5c:02:9c:61:ac:58:78:3a:22:
                    17:ec:be:f0:75:37:44:12:d8:86:c7:d2:4f:a1:92:
                    0d:ca:2a:bf:9a:48:d4:cb:f4:b9:6d:64:0d:b9:80:
                    6b:85:56:e6:8f:b6:14:80:0c:22:ab:f3:b9:16:3c:
                    99:eb:fe:19:18:35:f9:43:22:e3:99:ce:e2:e1:85:
                    49:0a:ca:7a:0c:ac:a9:42:bb:91:0e:ff:17:e1:e3:
                    56:a7:f3:b8:43:4e:c8:11:14:1f:3f:8e:9e:90:3c:
                    16:ff:93:1d:e7:97:96:fa:72:49:ad:cd:75:c1:d6:
                    56:21:69:81:f6:2d:fa:d3:7c:58:eb:7f:09:db:6a:
                    7e:9d:20:f8:f8:e6:5c:6c:a1:ba:73:d4:a1:17:6e:
                    a2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5C:E1:87:59:66:C6:FC:E8:AE:D7:A8:C1:B6:BC:42:91:EB:7F:3A
            X509v3 Authority Key Identifier:
                keyid:D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:31:2d:8c:ce:9f:a1:e4:c7:c1:9c:9f:fb:74:22:cc:22:99:
         c8:a5:94:43:f8:c6:e1:91:58:32:e3:d7:21:e7:3b:78:88:91:
         f8:23:bd:45:f6:8a:01:ea:66:db:82:49:8d:b4:27:be:d8:79:
         91:7a:17:45:1a:ff:f2:82:75:f3:48:33:1f:14:f7:8b:dc:d6:
         43:b6:61:55:f6:29:48:3d:a0:7a:0b:03:a1:db:82:3e:c4:17:
         f3:09:7c:0e:16:91:3f:c7:cc:5b:41:b3:7f:d4:ae:d7:a6:f0:
         74:be:c3:66:b2:51:44:c6:c3:ee:85:05:c7:0a:9b:9e:94:e5:
         e9:ae:ce:66:5f:7e:36:3e:c9:13:07:71:0e:4f:db:67:30:1b:
         21:55:ab:06:dd:b8:57:bb:7c:29:6b:1a:48:9b:10:9d:c1:1e:
         17:df:89:8b:8b:92:10:11:39:bb:37:13:59:a1:64:1a:f2:a4:
         dd:c6:1a:58:0c:74:ff:c7:81:d4:9b:22:0a:d4:dd:2c:fb:ff:
         4e:50:f1:f0:2b:2b:24:d0:8c:1d:58:6f:9a:87:68:02:f0:49:
         e6:98:69:46:e2:01:d1:16:e7:51:ac:58:d6:47:71:ba:c0:18:
         34:15:13:2a:15:db:1a:8a:dc:8d:3f:07:c7:2d:0d:64:8e:8e:
         a0:01:13:02
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
N0RFMzExMC8GA1UEBRMoRDc5RkUwQjA5Q0E0NEE4NDY2OTI4MzhGQzQyQkNGNDNE
MkEzMkFEMjAeFw0yNTA3MTkwNzQxMTlaFw0yNTA3MjYwNzQxMTlaMBgxFjAUBgNV
BAMTDTY4N2I0YzFmLTlmOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDi7+ihuINWxHrZYttbWAe8vi0kXeYHhveQ8YtpznfKL1bdNvmTr7caeDCJU1BT
mz4w7o8jCfxrz7k9v1YKrtaK8/qdzSJFFnZiPY2/P0z4xEwQxNSqZMGwtH0VhKd7
4lYDbFFEx5+fYmAXfajK11wCnGGsWHg6IhfsvvB1N0QS2IbH0k+hkg3KKr+aSNTL
9LltZA25gGuFVuaPthSADCKr87kWPJnr/hkYNflDIuOZzuLhhUkKynoMrKlCu5EO
/xfh41an87hDTsgRFB8/jp6QPBb/kx3nl5b6ckmtzXXB1lYhaYH2LfrTfFjrfwnb
an6dIPj45lxsobpz1KEXbqJLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDFzhh1lm
xvzorteowba8QpHrfzowHwYDVR0jBBgwFoAU15/gsJykSoRmkoOPxCvPQ9KjKtIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3REUzLzRFMUVFQUJBRkMz
NzExRUZCMUMwNzI4NkM0RjlBRTAyLzE1X2dzSnlrU29SbWtvT1B4Q3ZQUTlLakt0
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMTVfZ3NKeWtTb1Jta29PUHhDdlBROUtqS3RJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3
REUzLzRFMUVFQUJBRkMzNzExRUZCMUMwNzI4NkM0RjlBRTAyLzE1X2dzSnlrU29S
bWtvT1B4Q3ZQUTlLakt0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACExLYzOn6Hkx8Gcn/t0IswimcillEP4xuGRWDLj1yHnO3iIkfgjvUX2
igHqZtuCSY20J77YeZF6F0Ua//KCdfNIMx8U94vc1kO2YVX2KUg9oHoLA6Hbgj7E
F/MJfA4WkT/HzFtBs3/Urtem8HS+w2ayUUTGw+6FBccKm56U5emuzmZffjY+yRMH
cQ5P22cwGyFVqwbduFe7fClrGkibEJ3BHhffiYuLkhARObs3E1mhZBrypN3GGlgM
dP/HgdSbIgrU3Sz7/05Q8fArKyTQjB1Yb5qHaALwSeaYaUbiAdEW51GsWNZHcbrA
GDQVEyoV2xqK3I0/B8ctDWSOjqABEwI=
-----END CERTIFICATE-----
Generated at Mon Jul 21 08:06:49 2025 by rpki-client