Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
File:                     15_gsJykSoRmkoOPxCvPQ9KjKtI.mft (raw, json)
Hash identifier:          Ggp4Yy4n3e6+3CKC2sBzw24DtV/uq3ecST5ns8NFs4M=
Subject key identifier:   CA:19:C7:2D:74:B3:BE:A5:C2:7E:79:A9:11:9A:47:C9:66:78:9D:2B
Authority key identifier: D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2
Certificate issuer:       /CN=A9127DE3/serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
Manifest number:          75
Signing time:             Sun 19 Oct 2025 10:11:19 +0000
Manifest this update:     Sun 19 Oct 2025 10:11:19 +0000
Manifest next update:     Sun 26 Oct 2025 10:11:19 +0000
Files and hashes:         1: 15_gsJykSoRmkoOPxCvPQ9KjKtI.crl (hash: Ofs1k2o6cIAll38VwCHCYAdK5nrB0DmFJ+M7/7YLv3c=)
                          2: AA99F49CFC3711EFA9688687C4F9AE02.roa (hash: 970zffhkVpQStk3jgKgrN42mDxhaIFK4aP3YfXR8LM0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl
                          rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127DE3, serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2
        Validity
            Not Before: Oct 19 10:11:19 2025 GMT
            Not After : Oct 26 10:11:19 2025 GMT
        Subject: CN=68f4b947-b3d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8c:58:f1:de:e5:e6:19:46:d7:44:5f:db:c4:
                    ec:76:60:26:2e:04:48:e2:46:ff:0a:ac:ac:1e:21:
                    36:e2:d1:9e:96:52:2f:eb:61:c8:67:cb:d2:12:7f:
                    ec:87:ff:0f:10:eb:59:77:fe:ac:89:b8:d4:c7:00:
                    c7:b9:70:30:d2:b6:f1:92:34:36:dc:d2:e5:10:c2:
                    e0:56:6f:4c:74:d5:a3:e0:57:5e:34:b9:1c:69:a6:
                    8d:9a:2a:56:52:5d:e3:cc:15:c3:69:85:73:df:a9:
                    06:31:85:61:4d:e7:ba:69:7e:a9:30:8b:22:3c:aa:
                    53:2b:c5:0a:f9:10:30:b7:28:02:88:0b:93:15:70:
                    a0:be:eb:90:82:f8:89:e7:bb:02:60:63:e9:69:84:
                    39:01:21:d8:0c:c9:23:6a:42:a4:b7:bb:ee:25:b1:
                    c4:6f:72:dd:63:f2:1e:bc:27:c9:4a:f1:d1:de:0b:
                    19:d5:61:fd:75:17:eb:89:a3:9b:5f:c0:b3:18:52:
                    4d:36:2f:19:eb:ee:fa:2d:05:92:cb:25:b4:48:f5:
                    29:8b:e7:9f:41:48:0f:6c:92:31:22:a8:a5:26:78:
                    fe:19:8b:8a:3b:7a:86:3f:37:1e:32:f2:0c:8b:78:
                    af:74:d2:6a:1c:f4:3a:d7:bd:c9:db:f1:c1:e2:e7:
                    1e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:19:C7:2D:74:B3:BE:A5:C2:7E:79:A9:11:9A:47:C9:66:78:9D:2B
            X509v3 Authority Key Identifier:
                keyid:D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:14:e8:3d:d2:e8:b7:3f:54:38:f4:a9:03:b1:a2:8a:98:2d:
         72:46:da:e5:76:09:72:c3:6f:7e:63:74:da:20:a2:e7:c5:ea:
         3d:39:7e:8b:34:e2:ad:d2:36:b6:29:c1:4a:89:64:52:f7:58:
         2b:61:e4:67:d4:c5:e1:20:0a:ea:7c:05:d9:4c:00:14:fb:eb:
         7e:5c:18:c7:fb:8f:a4:f8:5a:0d:65:c5:34:e9:b5:be:7f:ed:
         ad:50:c2:f9:80:12:91:4f:69:f2:36:af:06:98:dc:30:b7:87:
         59:a2:46:ff:19:43:57:91:55:65:d9:6a:39:fb:87:4f:18:ba:
         72:40:0b:ce:62:bf:1f:46:f6:2c:47:3d:af:fe:1b:53:d5:0e:
         50:f2:f0:dc:1d:c2:1c:23:fc:60:c0:28:97:69:23:55:ab:e9:
         5c:a1:44:b3:c0:63:e4:c5:b3:f8:63:7a:02:da:0f:0a:2d:60:
         41:9a:1d:f3:0d:28:d1:3b:57:d9:3b:2c:ba:ee:d8:06:5d:93:
         4c:cf:7f:44:97:c1:f8:a9:e9:ea:16:f9:83:76:eb:9d:4d:a1:
         e7:28:e2:08:7a:8c:b0:07:ab:f1:d7:d7:d1:a7:c2:55:05:8f:
         af:3a:f4:1c:e1:d6:98:d8:fe:5e:3b:99:02:9b:21:05:b4:6a:
         64:ae:9a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:45:22 2025 by rpki-client