Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
File:                     f32FZbsEGDw68czSI-nEYR8VCAY.mft (raw, json)
Hash identifier:          tkuOFCNVn/d16jqS0IULzVeu3hZBD4h4h+ZAjPnlrw0=
Subject key identifier:   96:64:9F:F4:AF:27:F4:C4:4A:42:DF:88:93:45:7B:76:B7:63:CC:26
Authority key identifier: 7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06
Certificate issuer:       /CN=A9194004/serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806
Certificate serial:       0175
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
Manifest number:          0172
Signing time:             Wed 23 Jul 2025 03:59:58 +0000
Manifest this update:     Wed 23 Jul 2025 03:59:58 +0000
Manifest next update:     Wed 30 Jul 2025 03:59:58 +0000
Files and hashes:         1: f32FZbsEGDw68czSI-nEYR8VCAY.crl (hash: 0cTaqqJITRwPMA+hVxV7kLmS/MWViuCkU9xRwZGzwrk=)
                          2: 4A6E97AC311E11EE85C30E3BC4F9AE02.roa (hash: qONN8LKBOCS/G8QK//DwNmNBl/nUXzBz7NrGBoGYHlQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl
                          rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 03:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194004, serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806
        Validity
            Not Before: Jul 23 03:59:58 2025 GMT
            Not After : Jul 30 03:59:58 2025 GMT
        Subject: CN=68805e3e-8e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e9:98:4d:34:df:b7:95:46:6a:59:11:78:18:
                    3e:dd:55:cc:67:c5:9a:f8:6d:2d:a3:65:c2:d2:29:
                    bb:25:74:7d:54:9f:7a:11:6a:2b:c4:e5:73:ac:3e:
                    ce:e9:90:44:8f:dd:9d:bb:1b:4e:c1:22:fc:ae:6d:
                    c4:0e:ce:43:eb:95:19:d5:1f:7c:ee:dd:d0:bc:19:
                    87:ac:da:cd:2e:ae:c1:0a:98:1c:ef:8c:da:ad:6c:
                    00:30:00:3a:ee:a7:61:bb:ef:04:b6:d4:7e:e6:6d:
                    be:fe:2a:80:19:a9:32:f9:04:84:6c:03:a5:50:c4:
                    a2:d7:b1:f5:14:a3:26:c9:ab:71:39:4a:88:eb:55:
                    b4:7d:f5:3c:16:0e:44:01:f4:5f:a0:89:3a:4d:3e:
                    a0:0f:67:42:43:0e:d7:36:61:b1:ac:9d:4c:2c:e5:
                    76:09:f0:89:0b:83:a9:67:d6:a3:cb:28:a4:5d:e3:
                    7b:cb:fe:5f:6e:76:5c:21:aa:22:5c:1d:4c:ed:b7:
                    44:f7:e1:d3:01:b5:6b:dc:76:70:5f:2f:02:dc:f3:
                    f1:fb:91:3d:7c:1b:08:2b:8a:e9:6c:6f:25:68:0c:
                    a2:05:f2:7c:22:28:be:1f:16:df:2d:a5:bb:b5:1e:
                    57:d9:1f:f0:aa:9a:4e:44:94:33:5f:8d:7f:5b:7f:
                    85:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:64:9F:F4:AF:27:F4:C4:4A:42:DF:88:93:45:7B:76:B7:63:CC:26
            X509v3 Authority Key Identifier:
                keyid:7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:0b:ad:c6:6a:de:31:8e:ca:cf:89:d9:02:25:69:22:68:80:
         ac:9c:34:ce:cf:5c:1b:68:7f:3e:49:dd:94:b6:3a:1d:f1:fe:
         2f:18:81:04:70:df:90:f2:32:2d:6b:77:93:32:6a:d1:57:aa:
         39:56:e8:ea:68:61:f1:7c:12:ad:93:f3:01:ab:90:46:a5:c1:
         50:60:ac:1d:b9:e9:ed:64:de:e1:5d:4b:20:a9:bf:eb:e2:17:
         3f:cd:5f:fa:72:78:91:12:33:a2:4c:70:48:86:c2:b4:6e:56:
         17:01:87:8b:83:98:5b:54:1d:e8:ca:12:a1:1a:76:e9:a1:32:
         e2:aa:7e:72:ee:5e:84:d4:5c:24:29:8e:ad:14:80:10:46:4e:
         ba:93:e7:1e:80:fc:21:eb:b6:11:2e:18:96:5d:ca:4a:a0:78:
         d5:74:b3:90:1f:16:03:7c:f3:3b:fa:ed:b1:92:71:ea:da:d1:
         81:bd:23:e9:c9:95:c2:da:8d:2c:41:04:5f:48:25:02:ce:72:
         49:41:3c:e0:85:08:08:5b:29:b7:c4:ec:91:cf:25:fd:54:1d:
         54:a3:ce:04:80:82:eb:15:5f:bd:56:32:be:35:2b:d0:e2:9e:
         fb:92:10:c3:74:83:65:26:02:44:9a:3f:7f:b3:76:76:34:8c:
         cd:46:02:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 04:57:45 2025 by rpki-client