Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
File:                     hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft (raw, json)
Hash identifier:          XIc3DidJdA0gLi9dIEkzTL4E5dqPFDfqAHFgxQa/Hiw=
Subject key identifier:   A6:72:C8:5B:0E:1C:34:0A:78:17:BD:6C:39:4B:4F:D9:35:8B:70:08
Authority key identifier: 86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53
Certificate issuer:       /CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
Certificate serial:       0386
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
Manifest number:          0376
Signing time:             Sat 19 Jul 2025 01:20:17 +0000
Manifest this update:     Sat 19 Jul 2025 01:20:16 +0000
Manifest next update:     Sat 26 Jul 2025 01:20:16 +0000
Files and hashes:         1: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl (hash: xivL9Yhmr7Pnjxqd808ND/pPdHQ+wcSiG9KYGIZpvLE=)
                          2: 72F3E64ECB3011EEB1D2092CC4F9AE02.roa (hash: 1k9px+guhI8FPx4KjWECV5o6vUIYaS4zqWPtQTFTkGA=)
                          3: C80B0244CB2F11EEB240B62AC4F9AE02.roa (hash: 1pOI0527imuvZcTDV+q5rDya5atw0bipn9DUjAh03Hc=)
                          4: 6E6B914234E311EDB9020B6DC4F9AE02.roa (hash: 88ko9UJFFNtj+HS4XzX5w+1kD78T/NOvmunkaebMytY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl
                          rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 01:20:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902 (0x386)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167742, serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
        Validity
            Not Before: Jul 19 01:20:16 2025 GMT
            Not After : Jul 26 01:20:16 2025 GMT
        Subject: CN=687af2d1-6e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:75:b7:ea:60:c5:bf:5b:ff:2b:94:29:7c:29:
                    5b:a3:27:44:f7:6e:7d:46:a1:d3:7b:71:3f:cf:3b:
                    51:c4:5a:10:5a:ad:22:4b:4f:e1:da:06:a8:06:d2:
                    04:a6:15:14:c3:1e:33:77:72:07:9a:c6:37:c2:7d:
                    7d:d4:fc:97:51:57:53:df:78:b0:a9:0a:5c:e5:24:
                    f5:ed:27:e4:b2:6e:8b:80:cb:5f:59:10:66:f0:6e:
                    9e:52:c3:ea:41:f3:00:b1:a2:97:fb:fc:0c:68:76:
                    cc:b9:39:0b:d7:85:ae:9a:ff:fc:9d:b9:65:b6:f5:
                    61:16:ec:81:2a:ed:c1:05:0c:38:fe:75:d8:77:56:
                    59:e8:6e:a8:cf:fb:f3:0f:f2:7b:17:d7:70:80:d5:
                    a0:33:13:a8:22:8a:96:bf:df:98:ee:c8:b3:19:f2:
                    4b:a2:9a:39:44:08:f4:af:7a:50:d8:fe:d1:49:f0:
                    74:55:c9:96:7c:f0:63:a3:f5:66:29:84:12:a7:21:
                    80:dd:7c:98:80:7d:1a:47:04:3d:bd:f2:11:8f:05:
                    d6:7e:b8:25:fe:0b:b4:16:c0:19:e7:46:70:62:8e:
                    7f:63:b6:33:37:31:d2:9d:fd:af:88:5a:03:67:a0:
                    6e:72:86:fb:ba:31:30:ff:69:df:ce:09:5b:ab:d7:
                    a4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:72:C8:5B:0E:1C:34:0A:78:17:BD:6C:39:4B:4F:D9:35:8B:70:08
            X509v3 Authority Key Identifier:
                keyid:86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:61:16:20:ca:79:64:a6:b6:64:de:84:b3:6c:af:19:6a:45:
         b8:29:86:68:0c:4d:70:f8:8c:45:33:ee:b6:3b:b3:34:4f:95:
         47:04:3e:aa:10:7a:ac:65:c3:60:c0:65:a5:25:74:2d:7a:48:
         79:7a:0d:34:c4:84:79:dd:f5:4c:db:dd:46:b3:34:ef:36:62:
         3b:51:25:28:29:3a:99:a8:08:a5:c6:28:c2:7d:c4:8d:34:5b:
         6e:fd:12:86:78:42:17:fc:6d:5a:7c:5b:dd:13:17:7d:a6:c1:
         34:0d:1f:e7:ec:24:c0:fa:a7:d1:f5:62:55:a5:c7:06:7b:27:
         76:e8:d0:c7:a0:29:79:f9:96:fb:ca:83:28:13:2d:09:59:76:
         e9:d6:c4:df:d2:a4:d9:d7:ec:a0:ee:11:ee:d8:b7:29:4e:e4:
         d4:6d:a8:4a:d8:ac:40:22:27:af:1b:ba:8c:78:cd:49:b9:05:
         41:c6:43:a9:db:16:0b:9f:dd:ab:d9:bb:0c:38:a4:4c:d2:fd:
         bc:d6:a3:c9:09:c5:d6:35:ce:d1:57:e5:3b:33:24:18:c8:a1:
         06:d4:30:62:66:e8:4f:e4:3b:c6:0c:46:e0:70:7c:1f:91:38:
         1e:3a:5f:97:5f:5e:3e:96:9c:53:b8:3e:ba:01:7a:61:4f:d5:
         a3:1e:83:e2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njc3NDIxMTAvBgNVBAUTKDg2M0NEMDNDRDdCMEFDQjU4OTY1OUVENkE5MUNGMUVC
MjA0MzY3NTMwHhcNMjUwNzE5MDEyMDE2WhcNMjUwNzI2MDEyMDE2WjAYMRYwFAYD
VQQDEw02ODdhZjJkMS02ZTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnHW36mDFv1v/K5QpfClboydE9259RqHTe3E/zztRxFoQWq0iS0/h2gaoBtIE
phUUwx4zd3IHmsY3wn191PyXUVdT33iwqQpc5ST17Sfksm6LgMtfWRBm8G6eUsPq
QfMAsaKX+/wMaHbMuTkL14Wumv/8nblltvVhFuyBKu3BBQw4/nXYd1ZZ6G6oz/vz
D/J7F9dwgNWgMxOoIoqWv9+Y7sizGfJLopo5RAj0r3pQ2P7RSfB0VcmWfPBjo/Vm
KYQSpyGA3XyYgH0aRwQ9vfIRjwXWfrgl/gu0FsAZ50ZwYo5/Y7YzNzHSnf2viFoD
Z6Bucob7ujEw/2nfzglbq9ekBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZyyFsO
HDQKeBe9bDlLT9k1i3AIMB8GA1UdIwQYMBaAFIY80DzXsKy1iWWe1qkc8esgQ2dT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Nzc0Mi85NEU1MDgwMEI3
RDcxMUVDOUE4Mzc0NjJDNEY5QUUwMi9oanpRUE5ld3JMV0paWjdXcVJ6eDZ5QkRa
MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hqelFQTmV3ckxXSlpaN1dxUnp4NnlCRFoxTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Nzc0Mi85NEU1MDgwMEI3RDcxMUVDOUE4Mzc0NjJDNEY5QUUwMi9oanpRUE5ld3JM
V0paWjdXcVJ6eDZ5QkRaMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA+YRYgynlkprZk3oSzbK8ZakW4KYZoDE1w+IxFM+62O7M0T5VHBD6q
EHqsZcNgwGWlJXQtekh5eg00xIR53fVM291GszTvNmI7USUoKTqZqAilxijCfcSN
NFtu/RKGeEIX/G1afFvdExd9psE0DR/n7CTA+qfR9WJVpccGeyd26NDHoCl5+Zb7
yoMoEy0JWXbp1sTf0qTZ1+yg7hHu2LcpTuTUbahK2KxAIievG7qMeM1JuQVBxkOp
2xYLn92r2bsMOKRM0v281qPJCcXWNc7RV+U7MyQYyKEG1DBiZuhP5DvGDEbgcHwf
kTgeOl+XX14+lpxTuD66AXphT9WjHoPi
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:30:41 2025 by rpki-client