Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
File:                     PqTXApDMqv5dzJxdpfW-J_7d5F4.mft (raw, json)
Hash identifier:          xpIZRXihEQS+qGcBQqkBMOQxaPWlDqB3giBep/pgr/g=
Subject key identifier:   35:76:B9:9B:34:5B:53:25:53:17:99:8C:C5:95:FA:1B:CE:77:3C:0C
Authority key identifier: 3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E
Certificate issuer:       /CN=A911FA74/serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E
Certificate serial:       34A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
Manifest number:          34A9
Signing time:             Sun 10 Aug 2025 14:39:34 +0000
Manifest this update:     Sun 10 Aug 2025 14:39:34 +0000
Manifest next update:     Sun 17 Aug 2025 14:39:34 +0000
Files and hashes:         1: PqTXApDMqv5dzJxdpfW-J_7d5F4.crl (hash: +FUP/Riv4sPc7S33AJfNiOP+eKyZ/YDC7LOsUI1/qKs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl
                          rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13481 (0x34a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FA74, serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E
        Validity
            Not Before: Aug 10 14:39:34 2025 GMT
            Not After : Aug 17 14:39:34 2025 GMT
        Subject: CN=6898af26-575d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3e:e6:bf:dc:a5:a6:8b:f5:b7:9a:08:df:6b:
                    b1:b4:5a:71:db:b1:69:bd:90:7f:e2:d4:a9:55:7d:
                    d2:43:34:d4:25:f6:1a:06:0c:87:93:46:91:df:ed:
                    09:b9:35:e6:d6:fb:9c:36:0b:56:4a:e0:47:9a:54:
                    c8:58:0d:40:37:cf:e1:25:b8:27:03:e6:aa:fc:53:
                    52:cb:1a:6e:25:ca:b2:fa:2e:c7:5f:88:61:3a:d3:
                    e8:97:e3:87:2d:e6:d8:c1:70:73:40:07:09:41:e1:
                    88:8c:74:cc:5b:2c:70:05:3d:6b:7b:60:cf:1f:a7:
                    4d:e5:d2:2f:59:ad:b8:52:3d:a0:27:9f:cd:b3:70:
                    f3:ba:e2:3a:aa:8d:41:92:50:e2:08:e3:03:ad:0e:
                    d8:6a:80:72:37:3c:4f:ce:d6:23:80:87:c9:71:35:
                    0d:d2:87:f0:d4:e7:e7:2d:04:b5:f5:2d:19:22:f4:
                    6a:64:b7:20:ae:98:ec:de:59:2c:9b:cd:e8:b1:03:
                    7a:5b:8d:1d:9a:b9:d0:20:b1:fe:fb:25:35:d7:96:
                    5d:3e:4a:f6:15:2a:57:c8:5e:e4:68:dd:16:29:d6:
                    d9:c9:e8:c6:37:fd:5b:a9:f8:27:cf:43:74:42:a3:
                    95:98:8b:6e:b8:0e:91:7d:f6:67:f2:77:ba:3f:2d:
                    20:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:76:B9:9B:34:5B:53:25:53:17:99:8C:C5:95:FA:1B:CE:77:3C:0C
            X509v3 Authority Key Identifier:
                keyid:3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:a4:c9:d1:da:cb:2d:35:2e:cb:83:3a:9c:cb:a1:fc:83:ee:
         34:ab:65:be:af:c5:82:cb:0e:d2:39:ae:f6:f6:3e:95:4f:5f:
         cc:91:7b:f5:e7:96:23:d3:9b:ba:04:26:18:d2:48:cd:4b:1e:
         00:d2:e6:6c:04:be:b9:c3:0a:88:df:78:a2:06:9c:78:fb:1a:
         2c:86:a5:5a:08:fd:68:4b:60:30:4f:0b:5d:01:8e:c3:4e:31:
         86:f8:7c:93:88:26:75:6a:89:9b:98:40:2e:3c:77:ca:26:aa:
         7f:4c:42:85:7b:65:6d:08:62:d7:a8:a7:b3:96:16:c4:df:cd:
         75:73:f7:aa:8e:e4:e5:42:cc:6d:4f:8c:51:da:2a:73:01:50:
         1e:b9:6a:55:59:81:9d:cd:72:d8:b3:73:e7:83:32:aa:dd:ed:
         2c:6f:92:35:15:f6:65:34:e7:f3:79:f8:6f:91:37:bd:4e:36:
         33:06:73:39:02:59:8f:b8:5b:fa:76:3f:14:06:7e:b9:04:74:
         98:f5:59:6d:9f:4a:89:19:b9:2d:76:0e:9a:57:bd:01:ae:b1:
         c5:08:94:52:6a:2e:05:29:bd:a4:8d:19:ca:30:4f:8a:11:f4:
         e8:04:b2:22:fb:4c:46:e3:c7:b8:e3:69:f9:41:c0:53:48:82:
         24:c5:d2:e5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUZBNzQxMTAvBgNVBAUTKDNFQTRENzAyOTBDQ0FBRkU1RENDOUM1REE1RjVCRTI3
RkVEREU0NUUwHhcNMjUwODEwMTQzOTM0WhcNMjUwODE3MTQzOTM0WjAYMRYwFAYD
VQQDEw02ODk4YWYyNi01NzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtT7mv9ylpov1t5oI32uxtFpx27FpvZB/4tSpVX3SQzTUJfYaBgyHk0aR3+0J
uTXm1vucNgtWSuBHmlTIWA1AN8/hJbgnA+aq/FNSyxpuJcqy+i7HX4hhOtPol+OH
LebYwXBzQAcJQeGIjHTMWyxwBT1re2DPH6dN5dIvWa24Uj2gJ5/Ns3DzuuI6qo1B
klDiCOMDrQ7YaoByNzxPztYjgIfJcTUN0ofw1OfnLQS19S0ZIvRqZLcgrpjs3lks
m83osQN6W40dmrnQILH++yU115ZdPkr2FSpXyF7kaN0WKdbZyejGN/1bqfgnz0N0
QqOVmItuuA6RffZn8ne6Py0gCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDV2uZs0
W1MlUxeZjMWV+hvOdzwMMB8GA1UdIwQYMBaAFD6k1wKQzKr+XcycXaX1vif+3eRe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkE3NC82MTAxQjVCNjFE
OEYxMUUyODQ3QzVGRUUwOEIwMkNEMi9QcVRYQXBETXF2NWR6SnhkcGZXLUpfN2Q1
RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BxVFhBcERNcXY1ZHpKeGRwZlctSl83ZDVGNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RkE3NC82MTAxQjVCNjFEOEYxMUUyODQ3QzVGRUUwOEIwMkNEMi9QcVRYQXBETXF2
NWR6SnhkcGZXLUpfN2Q1RjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAfpMnR2sstNS7Lgzqcy6H8g+40q2W+r8WCyw7SOa729j6VT1/MkXv1
55Yj05u6BCYY0kjNSx4A0uZsBL65wwqI33iiBpx4+xoshqVaCP1oS2AwTwtdAY7D
TjGG+HyTiCZ1aombmEAuPHfKJqp/TEKFe2VtCGLXqKezlhbE3811c/eqjuTlQsxt
T4xR2ipzAVAeuWpVWYGdzXLYs3PngzKq3e0sb5I1FfZlNOfzefhvkTe9TjYzBnM5
AlmPuFv6dj8UBn65BHSY9Vltn0qJGbktdg6aV70BrrHFCJRSai4FKb2kjRnKME+K
EfToBLIi+0xG48e442n5QcBTSIIkxdLl
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:28:43 2025 by rpki-client