Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/9mluXbsSLaCFN-pSMG7vDK6Tb5M.mft
File:                     9mluXbsSLaCFN-pSMG7vDK6Tb5M.mft (raw, json)
Hash identifier:          rmZR/39bfzD1GqyZqFUq9LX9qmkphYOwQe8Yz2LIAkw=
Subject key identifier:   DA:71:36:D4:80:58:69:B7:49:69:E7:74:4B:25:B6:D7:03:83:54:4C
Authority key identifier: F6:69:6E:5D:BB:12:2D:A0:85:37:EA:52:30:6E:EF:0C:AE:93:6F:93
Certificate issuer:       /CN=A915A15E/serialNumber=F6696E5DBB122DA08537EA52306EEF0CAE936F93
Certificate serial:       0223
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mluXbsSLaCFN-pSMG7vDK6Tb5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/9mluXbsSLaCFN-pSMG7vDK6Tb5M.mft
Manifest number:          0221
Signing time:             Sat 19 Jul 2025 02:22:39 +0000
Manifest this update:     Sat 19 Jul 2025 02:22:39 +0000
Manifest next update:     Sat 26 Jul 2025 02:22:39 +0000
Files and hashes:         1: 9mluXbsSLaCFN-pSMG7vDK6Tb5M.crl (hash: OORhmB5kzIa5a7NptpXXgrt2oqMT5/ffOJraRUXL/zc=)
                          2: EA813D021FFC11F0A17B9441C4F9AE02.roa (hash: yKsH6HpvVtjhTQFrfTZTpYvl4BY01lpay1ETEnbArEo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/9mluXbsSLaCFN-pSMG7vDK6Tb5M.crl
                          rsync://rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/9mluXbsSLaCFN-pSMG7vDK6Tb5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mluXbsSLaCFN-pSMG7vDK6Tb5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 02:22:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 547 (0x223)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A15E, serialNumber=F6696E5DBB122DA08537EA52306EEF0CAE936F93
        Validity
            Not Before: Jul 19 02:22:39 2025 GMT
            Not After : Jul 26 02:22:39 2025 GMT
        Subject: CN=687b016f-80b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c7:95:2f:f4:1e:2d:a7:26:99:6c:94:5a:ff:
                    b1:f1:f2:7c:eb:d3:8e:d6:00:bd:2e:c6:f9:7c:91:
                    49:61:3c:1e:b7:ed:77:d6:4f:64:cb:fd:0b:7a:8a:
                    b5:52:56:df:6f:4c:c2:ad:c6:c6:63:20:9c:f5:c3:
                    23:b5:04:62:15:9a:ad:d2:82:7d:9a:2c:26:09:cc:
                    bf:91:91:5a:2f:fd:72:4f:49:8b:bd:48:2c:04:05:
                    4d:a4:f7:bf:53:b8:0a:a9:b1:81:c4:59:ab:43:d5:
                    4b:5d:77:36:af:3f:98:16:b7:67:92:47:a1:3c:d5:
                    6a:17:43:a7:51:75:8e:91:da:88:0b:19:64:28:4b:
                    cc:4e:e4:35:84:0b:11:d7:aa:e7:71:f8:33:33:c6:
                    69:b8:f5:42:18:d8:a1:16:71:e5:65:66:24:14:3e:
                    72:da:aa:6e:d0:c7:29:4b:0d:e5:a6:cd:4f:66:1f:
                    b1:18:fe:2c:34:61:ce:f1:74:83:a2:03:e0:50:a3:
                    25:9b:7f:bc:a8:d3:e3:60:55:64:a0:9d:1b:f3:73:
                    ee:3d:a3:e8:66:2e:90:21:24:8c:48:9a:de:6a:34:
                    71:a4:64:fd:0a:18:ae:d7:02:dd:6e:0b:91:1f:48:
                    4e:06:3e:a2:4c:35:ae:57:2f:f3:95:e5:26:f8:62:
                    ba:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:71:36:D4:80:58:69:B7:49:69:E7:74:4B:25:B6:D7:03:83:54:4C
            X509v3 Authority Key Identifier:
                keyid:F6:69:6E:5D:BB:12:2D:A0:85:37:EA:52:30:6E:EF:0C:AE:93:6F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/9mluXbsSLaCFN-pSMG7vDK6Tb5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mluXbsSLaCFN-pSMG7vDK6Tb5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A15E/7AE1328038A111ED86A56A0BC4F9AE02/9mluXbsSLaCFN-pSMG7vDK6Tb5M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f2:e7:d2:1a:2d:cd:fc:0b:be:30:1e:69:f1:21:ca:03:fd:
         3e:83:20:83:82:63:40:5c:2f:46:2f:40:9a:72:a8:44:43:5c:
         14:c1:ee:06:f8:a6:b9:09:2e:07:6d:0b:58:59:11:df:83:c7:
         ca:81:38:e3:94:38:f5:b1:55:66:60:c7:02:da:6f:ce:a1:36:
         54:98:bd:bd:9a:73:2f:26:56:18:87:8a:62:71:85:09:09:64:
         59:4f:ba:40:d4:76:3e:a1:26:f7:23:52:05:d0:cb:c7:87:d1:
         9d:51:c4:11:ef:fa:82:fd:13:10:12:31:ae:09:a7:14:d7:ac:
         66:78:91:ec:ed:42:96:48:e9:5e:02:7b:3a:b8:c1:e4:ae:2a:
         b5:b3:1d:f9:83:3e:42:32:e2:ea:b8:99:a5:3e:51:df:05:99:
         a9:cd:a1:f8:68:ff:93:da:1f:0a:fe:dc:ef:d3:9d:28:bb:7d:
         0e:70:d1:1b:35:4d:c4:87:26:6e:bc:8b:ea:6f:7b:94:9f:dd:
         1f:67:83:61:03:8e:9b:67:ca:03:ab:2e:9e:b3:b5:77:f6:20:
         b0:0a:1e:a4:18:98:85:0d:ef:b5:85:46:52:88:05:6c:bc:c6:
         70:64:e1:7d:cf:78:64:e2:15:ef:42:bd:00:8d:ba:dd:f2:41:
         67:33:be:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:45:06 2025 by rpki-client