Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
File:                     Iek1nelgenjM01kOC0SctSsXtrs.mft (raw, json)
Hash identifier:          cgRJrlHZOwnmuP45+aOHOeRXNWagulYFy5rS2Z4sjto=
Subject key identifier:   C6:BB:92:2D:56:1C:A5:7F:A4:70:00:CE:17:1B:46:93:EB:F2:2E:DA
Authority key identifier: 21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB
Certificate issuer:       /CN=A915C83A/serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB
Certificate serial:       0736
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
Manifest number:          072F
Signing time:             Tue 22 Jul 2025 22:06:38 +0000
Manifest this update:     Tue 22 Jul 2025 22:06:37 +0000
Manifest next update:     Tue 29 Jul 2025 22:06:37 +0000
Files and hashes:         1: Iek1nelgenjM01kOC0SctSsXtrs.crl (hash: j2SBI6KVbRJhKJIP15YmIESgCQFQoBFO7QI6Sdj01aA=)
                          2: EF5A16E89F3E11EB852AB17AC4F9AE02.roa (hash: cX9Jr6xc2q7kpQ4bV2j0kItAk4ZpyW8j6vKTdZBHzDU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl
                          rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 22:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1846 (0x736)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C83A, serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB
        Validity
            Not Before: Jul 22 22:06:37 2025 GMT
            Not After : Jul 29 22:06:37 2025 GMT
        Subject: CN=68800b6e-98e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1f:a5:e7:94:58:50:2f:30:8a:a8:21:2a:5e:
                    45:fe:0d:a6:93:13:7b:67:d9:fc:42:3e:c2:77:55:
                    05:c4:22:42:c6:27:49:d4:3d:5c:bd:33:56:9b:17:
                    96:42:2b:41:a7:0c:b9:84:12:be:c5:1e:61:39:d7:
                    f8:96:50:ae:d1:e0:5f:2e:b2:7e:57:99:87:f9:56:
                    56:23:36:4f:26:bb:b8:af:11:a9:aa:cb:ef:b3:21:
                    c8:40:8e:47:bd:60:c2:f8:7f:a1:c1:d1:4a:71:00:
                    8e:d4:5e:a5:56:9e:96:59:b1:59:f3:2c:a0:05:2c:
                    28:5d:35:3b:3d:6f:79:b0:7c:ea:9b:30:c6:2f:62:
                    57:6d:01:d1:96:e9:aa:97:c3:81:3d:77:d7:76:dd:
                    3b:c2:bd:29:35:06:92:c2:fa:e6:40:26:a0:25:7e:
                    ef:79:7e:cc:6b:a7:e7:5f:46:66:ad:7c:90:51:68:
                    ef:e5:da:74:ac:04:e0:ad:ef:cd:58:21:49:a5:41:
                    a6:e6:eb:0a:ac:b2:dc:b9:ee:69:ac:85:e7:21:a4:
                    30:c3:2b:88:d1:70:2b:c9:66:65:0c:cb:c1:bc:24:
                    d6:03:b0:90:0f:8e:5f:67:96:08:fb:d4:7e:42:b5:
                    e5:a4:44:92:46:1c:af:78:12:a8:49:e4:a7:bf:1c:
                    ac:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BB:92:2D:56:1C:A5:7F:A4:70:00:CE:17:1B:46:93:EB:F2:2E:DA
            X509v3 Authority Key Identifier:
                keyid:21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:de:95:2d:94:6b:57:d1:58:3f:2c:f0:e5:16:ff:c3:b5:4c:
         c8:7d:63:8e:87:19:64:05:b4:63:2c:e9:03:e0:16:4a:a9:ad:
         d2:ef:b4:85:39:3d:d9:01:f3:78:2a:9f:6a:50:03:de:cd:6b:
         73:13:65:df:1a:6f:f9:53:8e:af:5c:5b:90:bc:f0:71:90:e6:
         fd:73:cb:a2:0d:71:21:56:41:39:9f:cb:b3:b2:b7:64:96:49:
         7b:be:7f:7f:2e:a5:5e:18:25:35:48:4a:14:de:15:1f:89:c6:
         31:2b:2f:9f:0c:8f:85:7b:7e:4e:79:86:c2:4c:2e:c1:b4:f5:
         5f:b6:66:2f:a1:93:84:e6:0c:31:c4:05:57:19:46:28:90:00:
         b6:8a:14:7f:da:c4:66:57:17:a7:aa:4f:d8:84:a2:02:71:6b:
         37:87:ee:80:73:9c:bd:0a:25:12:28:d9:17:4d:fd:c5:bb:15:
         81:5e:4e:6d:d0:70:d9:c8:65:4c:7d:22:84:35:d2:cb:3a:aa:
         ea:3a:2f:31:11:0a:53:e0:d6:94:12:1b:49:b3:77:1f:0f:32:
         36:f1:10:55:43:a2:3b:f6:64:b6:f1:7b:98:8b:c5:8e:08:bc:
         03:d9:8d:03:28:15:0d:c2:5a:21:06:63:08:8b:e5:9b:3a:4f:
         b4:bf:a5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 09:05:47 2025 by rpki-client