Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
File:                     _PdT00aqq5WrFMYmdRXN8T-A-7s.mft (raw, json)
Hash identifier:          Z2E7mHwI+tHm0D/8svwsaB4Ih3m2D76bvATeQg5dsQQ=
Subject key identifier:   2A:99:A2:6D:5A:9D:38:3B:16:20:0B:61:26:F2:C4:7A:07:E3:41:0E
Authority key identifier: FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB
Certificate issuer:       /CN=A9179F22/serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB
Certificate serial:       013E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
Manifest number:          0132
Signing time:             Thu 03 Jul 2025 04:42:57 +0000
Manifest this update:     Thu 03 Jul 2025 04:42:56 +0000
Manifest next update:     Thu 10 Jul 2025 04:42:56 +0000
Files and hashes:         1: _PdT00aqq5WrFMYmdRXN8T-A-7s.crl (hash: SlPIp9v+KbTUlkiPSN1Ks3XAJLZBTuPQ+NCWWI5kzdM=)
                          2: 4120F6A28F3011EEA61ACF62C4F9AE02.roa (hash: OCepXKtPM8Ugq1ZnTOeqLJrMwE6SWX8J/dtz+Y3O35w=)
                          3: 41969D1C8F3011EEA61ACF62C4F9AE02.roa (hash: mRLPSGz3fDg54l8MXzyosEq3sw4/imNOjGKPzEwZfwU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl
                          rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F22, serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB
        Validity
            Not Before: Jul  3 04:42:56 2025 GMT
            Not After : Jul 10 04:42:56 2025 GMT
        Subject: CN=68660a51-f843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:42:52:83:d5:10:6d:8c:6b:03:2d:da:ed:1d:
                    bc:20:38:7e:4d:82:92:d0:e1:b2:5c:9c:fd:1d:0e:
                    0e:a7:7f:50:7c:0c:a8:65:0f:d9:0f:10:bc:a3:56:
                    58:8b:68:01:14:3a:f3:a1:97:af:b7:a2:6f:c5:32:
                    2e:c6:8a:96:b6:df:41:90:4a:75:98:b4:ae:b5:ac:
                    32:ac:8e:b5:61:65:6c:68:15:e2:6f:6f:c8:49:0c:
                    57:d4:7e:9d:fd:6b:2a:2a:ad:11:4f:56:14:89:a8:
                    56:19:eb:a9:39:f9:6e:ed:ce:56:b7:b0:23:48:f9:
                    92:22:82:c1:66:a2:2b:89:d9:a0:e2:6e:d2:df:b7:
                    ed:0f:69:83:5d:f5:9a:7f:3b:73:8c:fb:5b:58:2c:
                    63:0c:93:c3:23:cd:bc:30:26:8b:ce:b5:bf:45:e9:
                    cd:ce:db:76:49:a8:5b:3d:6f:f7:79:97:00:56:d6:
                    46:80:83:14:cd:61:ef:d8:58:73:eb:64:2a:ff:28:
                    ef:59:ab:0f:dc:9c:09:89:2e:7e:51:4c:36:d1:0b:
                    90:63:79:dd:5b:0f:7f:41:a3:78:1a:22:dc:71:26:
                    d5:34:88:c1:c0:64:e7:d1:9c:ae:77:a2:97:e5:da:
                    92:d7:d3:11:bf:1d:cf:18:db:ca:ad:1a:fc:d7:68:
                    da:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:99:A2:6D:5A:9D:38:3B:16:20:0B:61:26:F2:C4:7A:07:E3:41:0E
            X509v3 Authority Key Identifier:
                keyid:FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:08:16:9c:e9:fe:fa:78:f0:b2:82:34:ca:d2:ce:96:d6:4b:
         5e:ea:1d:31:c1:f0:78:34:18:ad:16:fb:98:eb:ee:69:1c:92:
         7b:79:a4:c3:bc:78:c1:0e:8d:05:bd:73:66:1e:34:a1:30:49:
         3a:1e:98:a2:ac:da:61:55:49:35:89:ea:0a:b2:7f:75:38:0f:
         5e:26:d5:f7:1a:75:e4:d5:b7:de:a9:86:6d:39:d9:d0:63:87:
         9b:e1:b5:7e:85:da:ab:9e:d9:6c:bb:56:e7:86:78:26:97:e8:
         1c:01:74:0a:dd:84:bd:d5:f7:40:b9:0b:79:a7:41:e0:6b:2f:
         64:dc:f0:53:51:06:ab:02:a7:38:95:e6:1e:c9:b9:b5:b8:4b:
         b8:a0:06:04:17:15:8e:f6:bc:fd:6f:e0:4b:74:b8:b1:f5:cf:
         b8:eb:ec:c1:54:4a:15:15:d1:fb:c3:64:0a:df:4e:04:65:69:
         0f:0d:96:1b:b3:2b:c4:1f:0e:e4:6f:ee:02:80:35:fc:90:cc:
         fd:91:65:be:0a:0b:6d:9b:f5:c1:53:9e:ff:e0:0c:61:5e:b0:
         6c:30:88:90:d3:d4:ab:92:d1:82:fd:96:a6:9a:b9:6b:6d:d4:
         15:83:de:64:86:5f:3d:08:6c:e3:2c:22:a9:cd:e8:77:47:37:
         96:de:e9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:42:26 2025 by rpki-client