Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
File:                     f32FZbsEGDw68czSI-nEYR8VCAY.mft (raw, json)
Hash identifier:          d5H55TEYBq5+nxfQKLRo9hnfertLejfTKKfFI4bIGPs=
Subject key identifier:   99:B9:D6:15:4C:DF:45:75:E5:3D:15:A7:D2:33:3F:34:8C:86:C6:E7
Authority key identifier: 7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06
Certificate issuer:       /CN=A9194004/serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806
Certificate serial:       0176
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
Manifest number:          0173
Signing time:             Fri 25 Jul 2025 03:59:15 +0000
Manifest this update:     Fri 25 Jul 2025 03:59:14 +0000
Manifest next update:     Fri 01 Aug 2025 03:59:14 +0000
Files and hashes:         1: f32FZbsEGDw68czSI-nEYR8VCAY.crl (hash: ml+bGTPzQtlCJEsatptFDoi9TOrpRAPjAHorlgeawdo=)
                          2: 4A6E97AC311E11EE85C30E3BC4F9AE02.roa (hash: qONN8LKBOCS/G8QK//DwNmNBl/nUXzBz7NrGBoGYHlQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl
                          rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 01 Aug 2025 03:59:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194004, serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806
        Validity
            Not Before: Jul 25 03:59:14 2025 GMT
            Not After : Aug  1 03:59:14 2025 GMT
        Subject: CN=68830113-b3a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:df:47:54:76:a5:ac:ac:c6:70:e5:11:53:9d:
                    be:15:f7:32:dd:80:6b:6d:6b:fc:6d:1f:f9:32:2c:
                    fe:44:0e:1c:f4:52:12:20:02:75:70:fc:89:e9:46:
                    6e:1c:af:5c:bb:89:46:1a:c9:29:78:0e:d0:e3:42:
                    17:fb:d1:01:01:49:6d:47:b2:0d:29:19:55:77:c5:
                    43:ab:61:d3:54:61:39:d8:58:46:fa:7f:23:54:26:
                    75:0f:f7:41:e7:a0:4f:e1:44:f1:3d:a9:92:7c:74:
                    0b:f9:5e:93:18:92:b2:17:e8:d0:28:55:a5:75:4b:
                    db:62:5b:7d:b7:87:70:01:78:2e:80:4c:44:7e:ec:
                    aa:42:a5:cd:1b:b1:91:70:06:51:2c:e1:ac:2d:40:
                    04:2d:f7:41:65:af:2d:4c:ea:7a:ca:23:38:6c:0f:
                    d9:78:53:43:6c:3e:c3:c2:f4:1b:b5:ae:98:ca:ea:
                    e1:94:36:9d:3f:bf:47:c3:ea:92:2d:fc:ae:56:f0:
                    9f:2d:9e:4c:63:49:9e:9d:21:73:c5:54:67:7f:28:
                    78:78:99:6d:33:3f:7b:2b:f8:8a:2a:e8:4f:0b:5e:
                    91:1b:44:e5:44:0e:7d:2e:b7:e7:e6:4a:bb:93:9f:
                    eb:80:1e:44:94:90:38:a6:fe:28:93:36:da:e2:7e:
                    c5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B9:D6:15:4C:DF:45:75:E5:3D:15:A7:D2:33:3F:34:8C:86:C6:E7
            X509v3 Authority Key Identifier:
                keyid:7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:9e:e5:d1:99:75:a5:0f:64:f5:2c:1e:0f:31:4f:68:96:aa:
         2a:38:ba:62:4d:77:16:17:5d:f9:44:70:f7:b0:b8:9f:29:0d:
         bf:33:6a:69:dd:d7:dc:24:9e:dc:5e:83:5c:b7:d5:9e:cc:73:
         40:8e:23:1e:5e:1c:ba:35:37:cf:57:2a:a8:69:87:e4:84:c7:
         77:2e:5f:03:50:db:ee:a1:97:bb:09:c1:80:00:b5:90:8b:c2:
         96:dd:d1:f2:14:f2:76:4c:21:78:65:df:53:ae:79:9f:98:36:
         98:90:c7:2c:68:e6:cc:44:51:23:8e:62:e8:ff:8a:e2:db:a0:
         40:27:47:b7:84:f9:79:b0:e7:b1:25:b6:94:27:8b:ac:9f:78:
         e6:96:3c:13:7c:08:08:62:28:d6:d8:bd:ae:85:e0:62:44:0a:
         27:6a:79:80:5e:01:ed:1d:4c:d9:86:09:ce:ec:2d:a3:1c:72:
         2a:92:04:cd:ea:f2:7f:6a:9c:fd:06:9c:af:6c:ff:31:d5:1e:
         65:d8:d7:5b:68:21:ef:2b:01:99:3d:99:0d:c4:a3:e1:98:ee:
         3f:a9:b9:f6:2a:34:6c:4e:eb:13:c3:d3:0b:a5:72:dd:77:48:
         bd:99:05:00:c9:12:d4:24:c0:1b:2d:c5:71:c1:d3:f1:8d:d8:
         fc:b0:c1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:54:21 2025 by rpki-client