Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft
File:                     PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft (raw, json)
Hash identifier:          bAnIWTc+4cszGA9Zg1vsLK+dTl+ExKH8qvaMy5jjMf8=
Subject key identifier:   FD:89:A2:E6:8F:08:5E:73:65:ED:BE:41:F3:C4:F2:FE:A6:4D:86:38
Authority key identifier: 3C:18:CD:8B:5B:01:D5:02:37:64:0C:26:C0:37:75:46:D8:04:FD:B4
Certificate issuer:       /CN=A911829D/serialNumber=3C18CD8B5B01D50237640C26C0377546D804FDB4
Certificate serial:       8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft
Manifest number:          8E
Signing time:             Sat 09 Aug 2025 06:57:14 +0000
Manifest this update:     Sat 09 Aug 2025 06:57:13 +0000
Manifest next update:     Sat 16 Aug 2025 06:57:13 +0000
Files and hashes:         1: PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl (hash: 97R3op3k7E6Qh1ErTtl0EfNNHDada0F06SLOglO6Oqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl
                          rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911829D, serialNumber=3C18CD8B5B01D50237640C26C0377546D804FDB4
        Validity
            Not Before: Aug  9 06:57:13 2025 GMT
            Not After : Aug 16 06:57:13 2025 GMT
        Subject: CN=6896f14a-a1b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:64:cc:4b:a6:f8:8e:c8:69:89:51:84:bf:e9:
                    82:3e:84:61:6b:14:2c:13:88:0e:a5:c4:f0:19:96:
                    17:f3:9b:37:71:1a:59:10:f9:fe:2c:2b:7a:de:73:
                    cb:ae:27:77:fc:1d:4e:d8:a7:2b:c7:7e:ff:2c:cf:
                    ab:83:74:41:75:0a:e9:8f:a3:8e:d3:a9:3f:b2:e4:
                    26:09:35:6f:2f:64:fa:b8:65:d7:7e:f8:2f:99:2d:
                    a4:3b:cc:42:6c:94:22:e8:56:2c:b9:73:54:62:66:
                    f4:1f:2c:95:a3:c2:c2:b6:60:54:2c:ba:25:6e:5d:
                    55:7d:d6:67:1f:e0:12:a8:14:7e:bd:3a:1f:00:1d:
                    fe:d1:63:e4:9c:34:c2:72:5e:c8:7b:d3:60:bd:f9:
                    14:24:44:b6:57:eb:5d:91:12:7c:f7:8a:07:d7:d4:
                    0e:cb:5a:ff:c4:7f:ec:9c:5b:e9:9a:50:b4:b8:b4:
                    6a:74:e0:d4:cb:24:b1:1e:df:36:68:c8:79:b7:fd:
                    bf:76:aa:70:41:47:1c:2c:45:2e:5f:a1:ff:f6:5b:
                    08:09:0a:c7:36:8d:95:58:2f:34:18:5b:ee:2d:d3:
                    40:3a:bd:7b:69:f2:28:5a:75:f6:45:90:12:6e:a7:
                    b1:22:76:58:45:c2:6b:50:da:37:e4:c6:05:cf:15:
                    7b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:89:A2:E6:8F:08:5E:73:65:ED:BE:41:F3:C4:F2:FE:A6:4D:86:38
            X509v3 Authority Key Identifier:
                keyid:3C:18:CD:8B:5B:01:D5:02:37:64:0C:26:C0:37:75:46:D8:04:FD:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:94:56:f5:95:27:78:6f:6c:c8:6b:2d:40:4e:6e:b7:af:26:
         95:89:8c:21:83:4a:39:f4:58:e0:0d:6e:64:72:c7:f9:ca:13:
         d1:67:97:ca:36:80:55:cc:90:26:b0:8c:b0:be:e9:c6:47:e2:
         67:68:f0:50:02:1d:02:c9:2f:7b:5c:f9:d3:01:d0:95:50:8c:
         23:a8:4b:a3:29:11:05:c4:7d:b3:a5:09:b8:12:17:41:69:b5:
         c4:70:87:31:ce:a2:9e:9f:c4:10:17:39:72:c3:dc:73:4b:76:
         7f:bd:9f:99:4a:8d:39:0d:f3:8c:af:36:e9:c0:b0:b9:f2:06:
         96:b9:54:c1:ed:e2:87:b4:a1:cb:d9:e1:36:86:d4:14:8f:c4:
         15:e3:18:2d:e5:d2:29:ef:05:c9:4d:2b:f1:ce:69:62:70:be:
         d1:7f:a3:bf:c9:fe:1f:9f:06:d4:a8:30:40:c0:85:a2:a6:bb:
         24:5d:3f:f2:65:b0:39:ed:69:d9:86:ab:3d:fc:ef:a1:ba:c7:
         f0:48:ec:18:95:4b:f8:de:3e:7e:24:81:ed:ab:57:54:b5:e4:
         0d:c4:f7:94:55:ae:88:a2:96:61:ea:1e:8f:49:d7:c9:e0:5e:
         21:76:c1:25:52:dd:ca:8d:81:24:f9:96:19:47:88:a6:ee:f1:
         4f:62:f3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:51:06 2025 by rpki-client