Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
File:                     f32FZbsEGDw68czSI-nEYR8VCAY.mft (raw, json)
Hash identifier:          zdwU6x4XO2jyK9lTIHu37pK8rex1z5Ndj5eOY8x49gI=
Subject key identifier:   61:B7:7E:C2:93:80:C3:C6:93:1E:F5:38:5F:4A:4E:0A:A3:5E:01:A1
Authority key identifier: 7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06
Certificate issuer:       /CN=A9194004/serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806
Certificate serial:       0174
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
Manifest number:          0171
Signing time:             Mon 21 Jul 2025 03:51:36 +0000
Manifest this update:     Mon 21 Jul 2025 03:51:36 +0000
Manifest next update:     Mon 28 Jul 2025 03:51:36 +0000
Files and hashes:         1: f32FZbsEGDw68czSI-nEYR8VCAY.crl (hash: tCEU66v1Jbk2jLvW27qod654XgxLmbU7KL/bLAa1xUs=)
                          2: 4A6E97AC311E11EE85C30E3BC4F9AE02.roa (hash: qONN8LKBOCS/G8QK//DwNmNBl/nUXzBz7NrGBoGYHlQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl
                          rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 03:51:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372 (0x174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194004, serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806
        Validity
            Not Before: Jul 21 03:51:36 2025 GMT
            Not After : Jul 28 03:51:36 2025 GMT
        Subject: CN=687db948-ff75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ef:f1:fe:4e:29:7d:a5:1b:1f:3f:e8:11:a1:
                    17:a4:3d:50:0a:2c:f5:f1:a4:56:41:15:34:69:d2:
                    80:70:57:7f:c6:62:27:d0:43:84:73:d3:8d:87:8b:
                    b4:b5:9f:67:7d:f9:47:0b:70:9a:8b:03:52:5b:08:
                    50:f7:31:64:ad:3a:97:ea:af:0e:19:c5:e9:63:23:
                    76:b4:f8:90:43:d8:f9:a8:70:9c:bb:81:b4:86:e7:
                    b5:7d:ba:cf:7d:e6:4f:ec:cd:8f:0a:06:8a:28:cc:
                    f3:fb:a3:36:cc:b7:e7:28:cd:82:e7:b1:0a:57:3e:
                    30:ff:cf:07:fc:b6:9b:0b:bf:94:40:f3:32:c4:fe:
                    45:2f:09:8a:51:9a:48:39:d5:f8:72:75:56:ce:a6:
                    f6:dd:7c:f3:42:9d:de:97:11:2a:46:59:43:b1:66:
                    89:d7:f1:bd:00:c4:d7:91:1c:71:c0:03:97:7f:d5:
                    26:1a:1e:d7:fd:18:c6:46:45:53:e4:6b:ac:34:70:
                    e7:26:df:1a:38:1d:84:e4:a7:a6:7f:a6:ec:d1:fe:
                    69:2f:f5:5f:67:8c:73:8e:9d:91:23:8c:16:8d:f6:
                    ae:12:0a:cb:f7:ef:35:cf:63:fb:f4:b8:40:c2:69:
                    a0:a1:5f:6c:dc:cb:92:2f:7e:ec:46:dc:d3:4d:3b:
                    84:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B7:7E:C2:93:80:C3:C6:93:1E:F5:38:5F:4A:4E:0A:A3:5E:01:A1
            X509v3 Authority Key Identifier:
                keyid:7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:44:e6:9e:4c:04:be:e0:ab:22:8c:45:9d:d2:65:2b:44:57:
         56:e2:c0:c6:45:25:f1:7e:3d:e0:6b:ae:c4:98:e3:b6:e8:89:
         4d:08:50:c1:78:3f:46:1d:be:6a:c0:91:05:ab:e0:b0:d5:5f:
         5d:3e:fd:7a:df:96:7e:7f:63:06:04:fe:d5:6c:5a:2b:8f:c3:
         71:8f:62:82:5b:7d:3b:20:66:f7:d7:81:b3:7e:94:24:c5:e3:
         23:f6:b5:40:78:80:83:31:c0:28:55:0d:80:a5:a9:4e:6c:2a:
         c9:eb:c5:dc:e4:18:83:46:70:21:b0:f5:98:b6:15:06:6c:55:
         73:ab:a9:8e:45:8f:3c:f9:64:01:20:32:ec:ba:e5:bb:8c:25:
         c6:c2:55:83:12:bb:28:53:72:26:cf:6f:71:4b:72:5a:4b:11:
         5a:bd:23:a0:ff:6a:1f:5d:9e:28:f1:d0:04:b7:a1:78:74:19:
         79:79:01:31:3d:22:d7:8c:c9:1d:cc:c8:42:52:c9:79:99:a9:
         98:1e:61:71:ea:49:c4:fb:ea:47:51:b5:ff:39:28:cf:11:3a:
         fd:51:4c:34:70:12:52:67:f6:04:aa:96:1b:ee:2f:6b:3d:d0:
         03:4d:c0:64:be:e9:c3:49:5c:4c:cb:9f:fa:af:f4:8d:70:a8:
         20:4b:75:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:57:19 2025 by rpki-client