Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
File:                     4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft (raw, json)
Hash identifier:          JoebPypbyQhRuKigV807mE9tFpmqr+FJz3wfTkq+06E=
Subject key identifier:   10:A3:16:55:01:98:A8:D1:85:CD:BD:42:21:CB:F5:2C:0A:C6:EC:9C
Authority key identifier: E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1
Certificate issuer:       /CN=A9139220/serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1
Certificate serial:       076D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
Manifest number:          0764
Signing time:             Thu 24 Jul 2025 21:47:45 +0000
Manifest this update:     Thu 24 Jul 2025 21:47:45 +0000
Manifest next update:     Thu 31 Jul 2025 21:47:45 +0000
Files and hashes:         1: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl (hash: usvEaeFdxNklZvGQMH7DvT64wFIUJWV39HnNTvbebD4=)
                          2: 7EBB570A296C11EBB7D88147C4F9AE02.roa (hash: By6Dq5HHVlEkvf0nTtSM0kJMMOYfz+8LI2/AK8Ixb68=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl
                          rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 21:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1901 (0x76d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139220, serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1
        Validity
            Not Before: Jul 24 21:47:45 2025 GMT
            Not After : Jul 31 21:47:45 2025 GMT
        Subject: CN=6882aa01-307f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:31:81:5e:07:43:c4:d3:b6:59:c0:c1:ad:fd:
                    a5:60:13:07:68:d1:87:65:34:ce:ee:1b:7d:96:a9:
                    c6:1f:a2:4a:e5:83:d3:c7:e3:4e:f5:5a:98:b9:87:
                    09:c2:d1:5d:b0:7e:f6:60:f2:50:31:68:fe:7f:20:
                    4c:0c:29:c5:e0:84:2f:45:0f:9c:d4:a9:a5:2a:76:
                    24:8e:b7:f2:b9:b2:68:0c:01:b7:b3:b0:92:5e:26:
                    68:8f:d8:ba:ca:80:86:ba:43:ad:e5:99:3b:3c:03:
                    0c:92:3e:7b:70:24:66:1c:5d:cc:f7:80:bd:bc:9b:
                    82:72:00:58:11:b7:70:49:07:e7:e3:c9:0d:33:f2:
                    3a:58:e0:d8:44:04:b0:22:aa:bc:48:ac:58:40:50:
                    de:3a:c8:ee:53:3a:e0:d4:31:74:48:de:9f:23:59:
                    67:ae:2d:8d:03:75:9b:06:8f:d2:97:05:ce:0b:eb:
                    2b:e4:5c:0b:3f:5b:9a:75:2e:4e:2b:fa:2a:38:bf:
                    0e:61:04:3f:8a:dd:c4:c5:00:22:0e:a5:f3:d8:d9:
                    69:4b:2f:ea:e7:fe:be:e2:eb:5c:25:0c:ff:ad:73:
                    4b:09:7d:e7:6e:2d:23:07:d3:13:1f:c9:3f:fd:5f:
                    05:23:71:07:1b:8c:e7:0f:b2:f7:20:59:ae:50:e6:
                    9c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A3:16:55:01:98:A8:D1:85:CD:BD:42:21:CB:F5:2C:0A:C6:EC:9C
            X509v3 Authority Key Identifier:
                keyid:E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ff:58:28:29:97:68:f1:19:31:7e:2e:90:25:d6:fe:01:76:
         9a:df:3b:73:15:2c:5f:c5:14:64:7b:ca:db:d9:19:51:37:98:
         7a:d7:5b:81:4c:e3:e6:a3:d0:33:30:ea:08:e1:c8:e4:77:3f:
         37:88:3c:90:05:9e:a4:14:cf:13:02:f7:d3:fb:20:18:69:58:
         0e:94:28:7a:25:b1:6d:58:1e:ec:ca:85:b0:8f:5c:b5:09:ab:
         c4:be:22:eb:5b:f5:87:79:8e:ec:cc:88:00:20:aa:c3:31:45:
         2a:65:91:4a:69:8f:42:77:c2:20:8a:b3:c4:11:b7:73:ba:17:
         52:43:95:52:18:87:d4:8b:44:2f:7c:9a:22:02:34:0c:ea:d0:
         8d:10:8f:8a:15:86:ac:3d:d3:8e:0e:4d:be:95:55:74:aa:d3:
         c7:49:df:a0:f2:b2:00:7a:34:9f:90:bd:09:a2:02:5e:cd:98:
         55:04:3f:07:d0:2c:da:0c:a1:76:68:be:03:a7:9f:15:98:3e:
         a3:2e:d7:79:42:c3:ae:c2:b9:78:6e:22:0b:60:be:56:9e:41:
         06:b7:d4:86:fc:a4:bb:4d:2e:b4:5e:b3:b3:e7:59:6b:b3:34:
         72:b1:5e:48:1f:6b:a4:9e:e3:c9:32:fa:b3:f7:00:6a:6b:d6:
         e7:67:b4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 07:03:09 2025 by rpki-client