Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft
File:                     Te4INvoPfuksLmpsGYAW3oz4vxY.mft (raw, json)
Hash identifier:          k9iBW/FM1fNm2wmeP+nIe9XKmLl1lv2MWz6yhJtZN8M=
Subject key identifier:   8F:4A:19:9D:22:1A:BF:C1:A9:99:1C:84:7E:46:54:C6:33:CA:02:44
Authority key identifier: 4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16
Certificate issuer:       /CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16
Certificate serial:       019E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft
Manifest number:          0190
Signing time:             Thu 03 Jul 2025 03:40:49 +0000
Manifest this update:     Thu 03 Jul 2025 03:40:49 +0000
Manifest next update:     Thu 10 Jul 2025 03:40:49 +0000
Files and hashes:         1: Te4INvoPfuksLmpsGYAW3oz4vxY.crl (hash: 1/NryO6QgbtihGPyGjocnOP39rDmOVGrLfyrU3LS83k=)
                          2: 4C1CC64C7F1A11EEAD41A94EC4F9AE02.roa (hash: e0njY5XzEF4ErGMr0YeVgmDBWLHo1AgDUgiIRsmRwsA=)
                          3: 9BC1D2907EDF11EE86C6A27BC4F9AE02.roa (hash: aXPGPliFMNRdmipqY0pnCkYXCLYjrZXxds+RZFMmzeM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl
                          rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171D3C, serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16
        Validity
            Not Before: Jul  3 03:40:49 2025 GMT
            Not After : Jul 10 03:40:49 2025 GMT
        Subject: CN=6865fbc1-8b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3d:89:40:cc:9b:02:0e:fb:71:35:60:bd:03:
                    bc:07:6b:4e:15:44:c1:48:94:7d:4f:39:a5:e3:20:
                    e1:f9:7f:0e:50:00:6b:1d:91:4e:36:ff:97:2f:76:
                    a5:46:c5:1e:69:80:78:25:0f:4d:4b:f0:6c:7f:bb:
                    b7:64:83:26:29:31:79:4c:e8:2f:23:7c:fc:e2:ad:
                    79:06:a8:bc:5e:54:d4:89:a5:15:83:0c:0f:c4:2c:
                    a1:f1:8d:50:13:48:c8:3c:f6:ac:3d:d5:df:81:b2:
                    8d:0b:94:cc:9e:44:74:96:60:bd:7f:57:bf:d6:9d:
                    47:85:b7:ee:de:22:61:67:41:1a:4e:69:da:df:2b:
                    03:86:d1:51:44:08:40:1d:3a:83:ba:69:86:ae:c1:
                    55:6a:4a:4c:a4:ed:21:19:f9:35:23:63:91:40:ea:
                    53:28:42:ce:f6:1b:cc:fb:84:fb:aa:fe:c6:ff:8e:
                    bd:2a:c4:86:db:c8:d9:b8:b1:a3:96:24:47:9e:61:
                    f3:d2:5f:8c:b3:e6:ff:53:8b:13:0f:94:d1:c3:61:
                    c5:88:de:d5:4f:f2:f6:2c:d0:c4:46:91:ab:d7:71:
                    9c:da:38:8d:de:08:f5:18:20:ee:f3:af:63:16:39:
                    57:59:98:57:45:ab:d0:b9:61:49:c7:3e:ea:b9:9a:
                    8f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4A:19:9D:22:1A:BF:C1:A9:99:1C:84:7E:46:54:C6:33:CA:02:44
            X509v3 Authority Key Identifier:
                keyid:4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:03:a3:47:09:89:ad:63:a1:b6:eb:0a:c8:b7:be:ac:e8:15:
         34:ef:78:bc:10:1b:eb:d4:7e:10:a3:96:b3:98:d6:de:8c:69:
         43:d8:77:5d:09:8b:d5:08:65:50:ba:2b:91:2d:d7:9f:98:51:
         e3:c4:51:24:8e:4e:c0:ff:65:08:13:9b:d1:3c:e1:af:33:70:
         d2:3e:60:c3:28:28:e6:c0:3f:ef:90:2d:c5:a4:bc:06:46:50:
         b3:67:d8:ef:73:29:6c:da:a1:80:7e:8a:89:75:03:01:42:15:
         bd:a0:4b:4a:a0:16:9e:7c:3c:19:58:77:35:dc:fc:29:1e:11:
         39:1f:9a:d0:58:80:b5:1c:51:03:c8:5e:29:5b:da:eb:e4:ba:
         cb:64:69:4e:30:04:f2:c0:75:3b:06:38:86:55:89:36:b8:82:
         fa:f1:c3:39:bf:ea:8a:b3:52:3e:8c:56:02:14:d3:c3:08:05:
         fb:9e:3f:12:cd:15:6a:b6:94:c1:0a:48:05:23:69:2c:c5:e4:
         5f:0f:9f:a6:03:72:bf:8a:09:83:ab:f0:19:c8:c4:d9:4f:83:
         49:30:86:2f:c7:da:89:16:fa:a5:b8:82:b8:f0:ae:82:5c:37:
         f2:87:7b:d8:a5:65:fd:0f:48:34:62:0d:8c:fc:5b:12:b0:fb:
         da:93:99:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:11:10 2025 by rpki-client