Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
File:                     PC3463wb1QIzAvYRqX4F14QXCTs.mft (raw, json)
Hash identifier:          FLb6Gqxvk2UVZ8OjfOIe8+h4bkJUG8zi38ILoA/ENHY=
Subject key identifier:   5D:38:9A:54:A5:08:0D:49:0A:35:53:F9:C6:79:62:37:5C:90:D7:58
Authority key identifier: 3C:2D:F8:EB:7C:1B:D5:02:33:02:F6:11:A9:7E:05:D7:84:17:09:3B
Certificate issuer:       /CN=A91334F0/serialNumber=3C2DF8EB7C1BD5023302F611A97E05D78417093B
Certificate serial:       D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
Manifest number:          D0
Signing time:             Thu 07 Aug 2025 06:11:07 +0000
Manifest this update:     Thu 07 Aug 2025 06:11:07 +0000
Manifest next update:     Thu 14 Aug 2025 06:11:07 +0000
Files and hashes:         1: PC3463wb1QIzAvYRqX4F14QXCTs.crl (hash: bMwD3faHAjYeSoULQ53NjLHqUpbxS1BvSNcWs9Y0154=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.crl
                          rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91334F0, serialNumber=3C2DF8EB7C1BD5023302F611A97E05D78417093B
        Validity
            Not Before: Aug  7 06:11:07 2025 GMT
            Not After : Aug 14 06:11:07 2025 GMT
        Subject: CN=6894437b-20ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1a:c0:64:53:f9:aa:69:e3:b1:18:f4:52:44:
                    29:83:5e:90:09:26:a3:bc:04:01:54:7b:f6:f0:7c:
                    59:b7:c5:12:84:78:e4:b5:73:2b:0d:8f:4d:34:25:
                    b5:02:c2:94:cb:3d:9e:dc:f2:de:20:83:3f:db:fc:
                    f4:e7:56:f9:2c:7f:65:7c:10:23:48:16:6d:75:e5:
                    6a:b6:91:2d:92:72:07:fd:14:39:fd:64:a7:1b:49:
                    24:95:5e:96:51:aa:85:a3:0d:b1:bd:a4:69:54:be:
                    6f:5e:6c:38:8d:63:6d:00:76:be:c7:04:fa:a3:f7:
                    de:88:1a:a7:38:79:e4:4a:34:b6:11:45:59:f9:f7:
                    c9:d1:a0:d6:98:09:5a:a7:d1:a0:eb:e6:84:8e:8e:
                    f6:a1:4c:ff:f8:6a:35:54:b0:f5:c2:8b:34:9d:50:
                    14:b9:25:ad:04:fe:c0:43:f8:53:56:41:f9:5a:56:
                    3d:93:c9:54:f6:66:3f:9f:e1:e4:d0:46:b9:45:4b:
                    6e:7a:66:76:7a:db:47:74:78:ad:27:22:25:6f:cf:
                    72:c3:18:32:25:f3:5e:30:86:76:d5:ce:99:4a:92:
                    c5:d2:e2:a9:10:3c:53:89:97:f8:22:ff:2e:14:bc:
                    6e:4a:d5:c9:a1:fa:77:60:66:2e:19:04:62:e3:f2:
                    3f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:38:9A:54:A5:08:0D:49:0A:35:53:F9:C6:79:62:37:5C:90:D7:58
            X509v3 Authority Key Identifier:
                keyid:3C:2D:F8:EB:7C:1B:D5:02:33:02:F6:11:A9:7E:05:D7:84:17:09:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:2b:d2:3a:49:b4:0a:80:80:e9:67:3a:06:13:4f:0b:36:a1:
         5a:35:c8:4b:c3:c1:c6:68:99:59:72:ba:09:f0:40:c2:f2:76:
         2e:f8:49:ca:4d:4f:93:c8:3a:db:90:4a:0d:b2:df:18:18:09:
         a5:d8:da:03:86:0c:95:d1:31:da:40:e9:da:8b:c8:b6:12:ff:
         c7:d5:8e:15:57:5b:2a:b6:e6:80:82:b3:bb:bf:de:d5:09:88:
         db:77:85:d7:f2:6c:f9:0f:83:19:3f:48:66:fa:5c:71:6b:57:
         a2:81:73:da:fc:a2:8c:6e:44:0d:ce:f7:37:ae:2b:10:c8:4a:
         21:b7:05:4d:21:bd:e8:22:06:5a:58:0d:22:84:bc:a2:4e:c7:
         80:06:44:01:ef:7c:e3:df:84:c7:bb:2c:ac:a2:85:ea:79:a7:
         a6:40:3c:9a:b1:5b:bc:94:7d:e3:7f:41:7a:38:1d:47:fb:a7:
         bd:fc:4b:bb:79:01:c1:88:12:1b:54:42:19:97:ca:c9:c8:84:
         74:87:39:be:aa:98:50:27:b9:97:e6:9f:22:95:18:57:e2:fa:
         84:95:04:97:72:c2:8e:c1:d0:1f:4b:cf:29:4b:4a:31:b8:ae:
         c6:bc:12:36:c2:5a:5e:6d:ad:ff:7f:16:41:fe:ab:39:83:6c:
         07:75:af:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:39:36 2025 by rpki-client