Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
File:                     t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft (raw, json)
Hash identifier:          VjSqLe4eXMPc3xZYmkrNrByhsbqHsZTQ9DwOfyUG0pE=
Subject key identifier:   50:11:0E:C2:ED:8E:20:C7:5E:04:D9:9D:37:97:C7:A9:E8:AA:4C:85
Authority key identifier: B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21
Certificate issuer:       /CN=A919EE77/serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
Certificate serial:       07C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
Manifest number:          07B4
Signing time:             Thu 24 Jul 2025 21:29:21 +0000
Manifest this update:     Thu 24 Jul 2025 21:29:21 +0000
Manifest next update:     Thu 31 Jul 2025 21:29:21 +0000
Files and hashes:         1: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl (hash: rrpi605b3S8Nd82aO3wNsCi5X6MwunpY75K7jISFR3w=)
                          2: 7BAB9AF01B3D11EE903BB536C4F9AE02.roa (hash: tLbfqsiqbU5f5RIfXdeZj0H0Fi86hjwtE1k3SMfEBD0=)
                          3: B811CFA2BF7811EE80314533C4F9AE02.roa (hash: /j+vq5djnc7hZrEiUy4WmMk+wFiISuWLXCgiYcfhmKo=)
                          4: CD284E600CEE11EB88376B5BC4F9AE02.roa (hash: tkd8GU4TJwZRxQo7fPIxlQckyw3LFTCGlrBbg1Zjf+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl
                          rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 21:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1991 (0x7c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EE77, serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
        Validity
            Not Before: Jul 24 21:29:21 2025 GMT
            Not After : Jul 31 21:29:21 2025 GMT
        Subject: CN=6882a5b1-067b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2a:5b:d5:ca:0e:c1:15:28:ee:5f:f8:f7:b5:
                    6e:cd:a3:60:c5:92:1b:f4:85:b8:6e:23:98:89:ee:
                    e5:7b:82:16:50:84:88:6d:9f:18:4a:53:67:b4:b7:
                    36:ea:90:1c:37:79:7f:a1:cd:50:2a:8c:5c:51:b0:
                    21:be:1c:d6:f6:bc:ec:e6:66:b1:fe:0f:4d:6f:be:
                    5e:24:01:d1:45:27:f1:48:d0:9a:b0:01:12:34:eb:
                    a5:aa:79:45:2a:a4:e2:86:c4:1d:31:61:11:0c:05:
                    2f:79:f6:f1:34:3a:74:63:60:72:50:c6:fd:f2:80:
                    ab:f0:a7:4f:87:29:40:f7:98:8e:63:65:72:4b:bd:
                    8b:a2:09:22:5f:a7:f8:54:74:40:13:91:03:af:98:
                    de:61:1f:b7:f8:9a:b5:8c:55:9d:14:52:10:2b:ea:
                    8e:c5:02:42:fa:ae:a5:c5:3d:41:0f:d2:b9:ca:5c:
                    bc:9d:1e:4b:25:1b:e3:87:e6:95:9d:d6:18:79:1c:
                    06:7b:95:f4:b9:bd:cf:22:e3:13:d6:5b:51:9a:89:
                    d2:4b:9a:af:07:a4:8a:f7:ea:b7:94:6c:52:f4:e0:
                    be:d7:0f:3d:c6:8a:82:16:03:51:dc:c3:da:31:f3:
                    5c:00:6e:39:c3:6b:77:fd:12:a5:7b:a3:ec:f9:2e:
                    25:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:11:0E:C2:ED:8E:20:C7:5E:04:D9:9D:37:97:C7:A9:E8:AA:4C:85
            X509v3 Authority Key Identifier:
                keyid:B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ed:92:6b:3c:92:fd:ed:95:da:46:c2:fd:d6:48:53:08:6f:
         94:42:1a:e6:4f:ce:8b:31:dc:e9:83:61:cf:31:20:ff:20:55:
         1a:c1:0b:d7:4b:76:e0:7f:11:e3:76:f1:99:33:98:e6:11:82:
         47:b1:21:32:d2:b8:ba:ca:3e:33:95:df:6a:0b:3b:ac:f8:4e:
         08:0f:cb:a0:11:92:9c:fb:b2:a6:f4:27:bb:6f:a9:7d:7b:9f:
         68:fe:fc:07:c3:8b:e0:87:87:c1:35:09:c2:b4:21:87:83:db:
         4e:bb:ba:42:f7:13:5d:d6:d9:64:6d:e7:b4:7f:4f:8e:00:7e:
         fe:3c:f9:13:98:84:83:b1:03:09:e7:72:e5:f6:8a:4e:dd:20:
         96:f2:12:38:47:2e:1c:2e:b9:e4:9a:c9:c7:7b:1b:ce:58:14:
         61:3d:3c:4b:61:b9:16:32:e1:85:93:ec:3a:9f:2f:dd:eb:a7:
         da:f7:64:fd:bb:f3:16:c4:ee:0f:ee:8e:cc:3a:96:46:c5:ef:
         30:90:50:ea:bf:a3:7b:0f:07:d0:2b:9f:a9:f5:97:5c:07:d6:
         8d:ab:d1:aa:b5:20:80:fa:d0:f8:37:45:0e:75:43:ce:6e:b5:
         85:0f:cb:d9:ed:74:8a:17:f7:06:db:be:ab:1d:76:2f:f0:fe:
         ac:c7:14:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 07:05:31 2025 by rpki-client