Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
File:                     _PdT00aqq5WrFMYmdRXN8T-A-7s.mft (raw, json)
Hash identifier:          Vr1zKlH8w4vlsA2hebs2MyPkqJGthjto0Z7kRVfsA4A=
Subject key identifier:   F2:59:96:5A:6E:FC:AA:A5:51:BA:3E:37:F9:57:23:3C:83:7D:F6:97
Authority key identifier: FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB
Certificate issuer:       /CN=A9179F22/serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
Manifest number:          014A
Signing time:             Tue 19 Aug 2025 04:40:55 +0000
Manifest this update:     Tue 19 Aug 2025 04:40:54 +0000
Manifest next update:     Tue 26 Aug 2025 04:40:54 +0000
Files and hashes:         1: _PdT00aqq5WrFMYmdRXN8T-A-7s.crl (hash: ZOvZkzx2UKAz+B5go5+OOxofqiecmGTGg5k6mVo49ys=)
                          2: 4120F6A28F3011EEA61ACF62C4F9AE02.roa (hash: OCepXKtPM8Ugq1ZnTOeqLJrMwE6SWX8J/dtz+Y3O35w=)
                          3: 41969D1C8F3011EEA61ACF62C4F9AE02.roa (hash: mRLPSGz3fDg54l8MXzyosEq3sw4/imNOjGKPzEwZfwU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl
                          rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 04:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F22, serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB
        Validity
            Not Before: Aug 19 04:40:54 2025 GMT
            Not After : Aug 26 04:40:54 2025 GMT
        Subject: CN=68a40056-a918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b7:23:b7:50:33:62:cb:03:f7:7a:62:ae:1a:
                    39:bf:cd:d5:96:59:7d:6a:87:8f:2d:f6:49:94:50:
                    91:d4:55:11:98:cb:f9:b6:6c:89:8f:fa:83:f0:db:
                    08:47:f7:7c:b5:37:bb:ea:65:7b:dc:3d:79:fa:05:
                    30:e9:fc:ee:a3:78:17:c4:bd:3f:85:a9:0f:da:14:
                    f1:ea:c6:8e:64:50:9d:ea:e7:29:a9:ff:44:48:52:
                    2e:a3:a8:22:16:ad:b4:ab:31:79:e3:dc:9c:a6:82:
                    20:80:5d:f2:6f:4a:22:ae:8d:ba:32:79:53:d5:84:
                    8d:92:b1:87:e0:3d:06:04:6c:2b:2f:c3:b2:52:50:
                    14:64:1b:f2:15:f5:df:a8:5b:be:4b:0e:5c:8b:1d:
                    d0:e9:8e:fe:f7:72:5c:0f:c0:24:b5:e6:12:44:6f:
                    fe:1f:ce:0b:db:50:d9:60:22:93:73:44:82:9b:38:
                    69:21:ed:34:de:a2:b0:c9:40:ed:82:74:ed:e7:56:
                    5a:a1:24:0d:1b:52:a2:5d:8b:47:b0:c0:35:3c:2c:
                    fc:8f:97:d1:5d:d9:af:6c:81:d2:0e:4f:c8:20:8a:
                    fa:78:1b:46:a0:50:e2:cf:a7:20:89:73:dc:50:b2:
                    7b:cc:47:27:7b:7b:49:f1:2a:5a:30:dd:9b:4f:30:
                    4f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:59:96:5A:6E:FC:AA:A5:51:BA:3E:37:F9:57:23:3C:83:7D:F6:97
            X509v3 Authority Key Identifier:
                keyid:FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ae:e6:17:63:57:88:d9:ef:f3:76:67:f0:3a:23:38:0f:b9:
         3b:57:34:70:2b:3e:0c:9f:4c:6a:0c:5d:37:20:6b:e1:b7:1a:
         e2:05:d3:32:2d:cc:31:e3:2d:7f:f8:71:c2:d6:ed:00:d8:61:
         aa:bb:83:94:51:b2:5a:a1:0e:89:91:35:ce:5a:ae:f8:12:ea:
         90:4c:88:3b:68:da:de:b8:6c:ef:c9:50:94:ea:29:78:79:44:
         4a:dc:f5:26:9a:a6:e0:75:14:39:99:6a:e1:4b:c6:21:20:28:
         19:10:6f:b2:67:d5:5d:24:78:2d:fd:35:70:5f:85:74:98:11:
         6f:ce:61:be:6e:1e:98:ea:4c:0c:da:11:7d:ec:ce:30:ea:60:
         c3:f6:df:f8:1f:c7:1d:01:e1:46:0f:e5:6c:34:fd:0a:0b:55:
         a1:54:a5:69:d1:f9:50:80:c1:90:95:8d:f9:49:58:ef:db:87:
         33:87:9f:3b:0e:f0:d3:b3:a3:9d:67:c6:01:f1:8e:b6:d9:f6:
         b8:c3:55:32:51:cc:9e:37:c3:aa:a1:04:18:bd:bd:48:4f:6d:
         bd:84:6b:87:8a:72:9a:0e:7f:be:a8:ba:38:b9:71:df:35:ac:
         ca:8c:9a:41:e2:bb:d7:ae:51:78:ec:c5:b2:95:9d:79:97:f4:
         fd:9c:ea:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:37:22 2025 by rpki-client