Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
File:                     4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft (raw, json)
Hash identifier:          qk3WTFB4KLA0/kacsB2Z8lzWoEs0DDMPLB/Xcun4zh8=
Subject key identifier:   24:B8:8F:58:7C:B4:34:DC:39:1A:17:A7:21:91:2A:45:34:8B:C4:34
Authority key identifier: E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1
Certificate issuer:       /CN=A9139220/serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1
Certificate serial:       076C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
Manifest number:          0763
Signing time:             Tue 22 Jul 2025 21:53:41 +0000
Manifest this update:     Tue 22 Jul 2025 21:53:40 +0000
Manifest next update:     Tue 29 Jul 2025 21:53:40 +0000
Files and hashes:         1: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl (hash: 5/Ce1grAr0TeUQLK0e8dRJ2Ekw2/KcI3IzYbPfni8zY=)
                          2: 7EBB570A296C11EBB7D88147C4F9AE02.roa (hash: By6Dq5HHVlEkvf0nTtSM0kJMMOYfz+8LI2/AK8Ixb68=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl
                          rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 21:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1900 (0x76c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139220, serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1
        Validity
            Not Before: Jul 22 21:53:40 2025 GMT
            Not After : Jul 29 21:53:40 2025 GMT
        Subject: CN=68800864-4af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a4:c0:c7:7e:22:0e:e7:df:a2:60:b4:53:70:
                    3a:c7:a6:a9:4e:3a:45:2e:cd:4e:e6:ad:60:4f:ad:
                    2d:8d:ff:0e:2f:55:8f:6b:8d:6e:0b:b0:e0:7c:3f:
                    5f:5a:f8:72:74:99:ad:05:c1:12:4e:ef:85:e8:dd:
                    ef:2d:90:7a:ee:c7:06:49:98:fa:62:18:5d:a9:28:
                    f3:0c:da:16:9f:14:7c:d0:27:82:0c:03:8d:e4:22:
                    39:0a:f2:e4:4f:47:21:a9:85:83:fd:03:d1:93:30:
                    e3:e7:3e:fc:17:17:f0:f3:29:60:86:c3:4e:d8:fb:
                    ed:9d:5d:43:c2:6d:ae:02:69:d1:cf:8a:ed:11:5c:
                    18:cd:73:1a:3a:9a:26:24:24:07:f2:8e:50:91:fc:
                    8e:d3:f7:5e:d7:1c:87:45:d2:19:5a:6f:54:e9:86:
                    f9:e5:32:f0:b2:fb:13:1b:4b:ad:a2:ea:f7:3b:95:
                    2c:9a:64:53:6a:08:25:0f:cf:ca:1e:9b:9f:15:20:
                    4f:7f:26:d5:e2:75:13:48:cf:f6:2d:4d:be:9b:13:
                    42:85:d9:00:49:95:43:a9:87:54:af:c4:4e:33:60:
                    41:da:d3:4b:45:58:cc:ff:1f:c2:06:9a:d4:7e:fb:
                    4a:ff:dd:59:1d:c2:24:18:85:0c:ca:11:6b:3a:3d:
                    19:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B8:8F:58:7C:B4:34:DC:39:1A:17:A7:21:91:2A:45:34:8B:C4:34
            X509v3 Authority Key Identifier:
                keyid:E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:f9:ea:6f:8e:c6:d3:8b:1a:c9:f4:b2:c2:0c:ea:14:a8:33:
         3a:ce:10:24:f1:9a:b3:8d:20:15:84:91:99:c1:fe:1c:07:9c:
         57:48:df:ac:70:36:b7:dc:a7:9b:3f:01:1d:67:d5:84:bb:6e:
         60:3a:80:70:81:ae:4f:ff:07:35:33:d2:93:a1:29:9a:1a:ca:
         f8:bc:ca:79:6f:1d:b0:e4:2e:42:42:40:79:61:47:cb:d5:4e:
         11:e6:ae:c7:42:70:15:df:ab:fb:6b:2f:f7:96:ae:51:f0:55:
         a0:90:0a:18:55:6a:46:22:7f:38:f5:45:16:9e:25:6a:4c:3a:
         3c:ec:d9:99:77:92:f8:8b:84:87:5b:d8:d4:64:02:1a:52:5b:
         00:ef:01:9a:79:b8:d2:06:d4:0e:e3:a9:8b:e0:9e:bf:76:e3:
         63:09:20:35:82:2d:bb:68:73:27:e6:25:79:ad:ad:19:e5:56:
         48:3a:7d:e7:75:30:5a:d4:3d:e4:64:9d:79:b2:16:64:fd:f4:
         79:45:3a:bc:ac:07:41:a7:b9:d1:f6:52:57:d3:c3:2a:0e:26:
         e1:91:37:a3:4f:a6:e2:a2:17:5f:e5:11:e7:00:b6:07:ce:5d:
         04:f7:4a:0e:46:53:18:af:f9:c4:bf:a1:4d:19:1a:8b:10:61:
         ea:1d:dd:24
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzkyMjAxMTAvBgNVBAUTKEUyQ0ZDNDJCNkEwODE1MEFFRkVGRTcxODlCRTVBRjJC
RTU2OEY4QzEwHhcNMjUwNzIyMjE1MzQwWhcNMjUwNzI5MjE1MzQwWjAYMRYwFAYD
VQQDEw02ODgwMDg2NC00YWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlaTAx34iDuffomC0U3A6x6apTjpFLs1O5q1gT60tjf8OL1WPa41uC7DgfD9f
WvhydJmtBcESTu+F6N3vLZB67scGSZj6YhhdqSjzDNoWnxR80CeCDAON5CI5CvLk
T0chqYWD/QPRkzDj5z78Fxfw8ylghsNO2PvtnV1Dwm2uAmnRz4rtEVwYzXMaOpom
JCQH8o5QkfyO0/de1xyHRdIZWm9U6Yb55TLwsvsTG0utour3O5UsmmRTagglD8/K
HpufFSBPfybV4nUTSM/2LU2+mxNChdkASZVDqYdUr8ROM2BB2tNLRVjM/x/CBprU
fvtK/91ZHcIkGIUMyhFrOj0Z9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCS4j1h8
tDTcORoXpyGRKkU0i8Q0MB8GA1UdIwQYMBaAFOLPxCtqCBUK7+/nGJvlryvlaPjB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTIyMC8xNUNEMUMyMjI4
QjAxMUVCQjQ0NjlFMUVDNEY5QUUwMi80c19FSzJvSUZRcnY3LWNZbS1XdkstVm8t
TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRzX0VLMm9JRlFydjctY1ltLVd2Sy1Wby1NRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OTIyMC8xNUNEMUMyMjI4QjAxMUVCQjQ0NjlFMUVDNEY5QUUwMi80c19FSzJvSUZR
cnY3LWNZbS1XdkstVm8tTUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA8+epvjsbTixrJ9LLCDOoUqDM6zhAk8ZqzjSAVhJGZwf4cB5xXSN+s
cDa33KebPwEdZ9WEu25gOoBwga5P/wc1M9KToSmaGsr4vMp5bx2w5C5CQkB5YUfL
1U4R5q7HQnAV36v7ay/3lq5R8FWgkAoYVWpGIn849UUWniVqTDo87NmZd5L4i4SH
W9jUZAIaUlsA7wGaebjSBtQO46mL4J6/duNjCSA1gi27aHMn5iV5ra0Z5VZIOn3n
dTBa1D3kZJ15shZk/fR5RTq8rAdBp7nR9lJX08MqDibhkTejT6biohdf5RHnALYH
zl0E90oORlMYr/nEv6FNGRqLEGHqHd0k
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:16:59 2025 by rpki-client