Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
File:                     PC3463wb1QIzAvYRqX4F14QXCTs.mft (raw, json)
Hash identifier:          4RlGEadPPOILzo5MRcnY8n41Nq3i1S33vOnTq5+fmxk=
Subject key identifier:   B9:C1:4E:E5:B2:72:E4:DB:B4:92:FE:D1:BC:11:D1:50:02:2A:4E:59
Authority key identifier: 3C:2D:F8:EB:7C:1B:D5:02:33:02:F6:11:A9:7E:05:D7:84:17:09:3B
Certificate issuer:       /CN=A91334F0/serialNumber=3C2DF8EB7C1BD5023302F611A97E05D78417093B
Certificate serial:       B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
Manifest number:          B3
Signing time:             Fri 13 Jun 2025 04:54:25 +0000
Manifest this update:     Fri 13 Jun 2025 04:54:25 +0000
Manifest next update:     Fri 20 Jun 2025 04:54:25 +0000
Files and hashes:         1: PC3463wb1QIzAvYRqX4F14QXCTs.crl (hash: wLPskfyykPu1bEJclUxniR0Fv/LVrlJ0gRg7FzlMXCA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.crl
                          rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 04:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91334F0, serialNumber=3C2DF8EB7C1BD5023302F611A97E05D78417093B
        Validity
            Not Before: Jun 13 04:54:25 2025 GMT
            Not After : Jun 20 04:54:25 2025 GMT
        Subject: CN=684baf01-9b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:95:ea:81:f6:d0:1c:1b:10:d3:17:28:f1:bc:
                    d4:ef:8f:42:6d:9d:79:f4:4a:96:cb:bf:44:ae:b7:
                    46:58:f3:b5:8c:3d:2b:c8:e2:a2:a7:7d:df:8b:19:
                    3b:8b:b4:9a:c5:1d:2d:1c:18:0f:0a:82:98:d1:90:
                    e8:a0:36:8b:c1:3f:93:59:c4:52:69:37:87:ba:9e:
                    30:4b:56:a5:db:1e:c4:dd:00:ce:9d:23:c7:93:5c:
                    73:64:01:fb:d7:db:5c:ea:c4:7f:2b:fb:85:94:a0:
                    f6:0c:0b:08:80:44:94:78:07:9f:1f:23:3a:ac:48:
                    a2:5a:26:b9:c5:9f:32:8b:99:71:5e:b9:35:29:37:
                    90:30:2f:f0:d9:0e:3a:06:65:11:93:d4:d7:35:43:
                    82:11:be:2d:e8:ab:7b:ed:ed:4f:75:7e:e4:02:aa:
                    a4:8a:27:c1:f6:92:c3:a0:bf:9b:33:ea:c2:3f:90:
                    39:c3:47:19:b6:3a:9e:cd:25:3f:b5:cc:ef:3c:07:
                    7b:71:5d:d8:d5:30:d5:5c:28:cd:11:a0:d3:35:69:
                    bb:16:9a:53:94:33:f0:5f:9f:82:b5:f9:51:62:9c:
                    21:83:a0:74:e2:8e:ab:72:83:1c:e6:99:10:ef:2b:
                    23:76:33:f8:81:61:64:84:c1:9d:f2:98:f0:e3:4b:
                    42:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C1:4E:E5:B2:72:E4:DB:B4:92:FE:D1:BC:11:D1:50:02:2A:4E:59
            X509v3 Authority Key Identifier:
                keyid:3C:2D:F8:EB:7C:1B:D5:02:33:02:F6:11:A9:7E:05:D7:84:17:09:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:0b:69:d9:c2:b3:8f:78:5a:32:bf:c3:c1:b9:09:9d:dc:69:
         52:4d:50:cc:57:c9:04:99:5e:68:ea:b4:e2:c4:c9:19:f0:ab:
         9d:8b:6d:41:46:f9:50:97:a8:49:1c:6a:37:62:9a:62:d1:31:
         1a:a5:90:c0:9d:eb:77:2e:23:b4:37:a8:81:7f:30:ec:f4:8c:
         31:1a:91:e9:c5:87:3d:e6:49:c7:96:f0:71:f3:a7:b9:7f:2b:
         ce:ba:25:df:aa:8a:d3:af:40:e8:0c:d2:0e:6c:6c:b2:2d:13:
         ad:7d:ec:f9:49:5c:5e:00:36:9f:ea:11:16:8d:71:63:75:e1:
         cf:3a:fb:59:e1:33:20:e1:5b:03:23:9f:a8:d6:f7:c9:fd:28:
         7b:ad:9e:b5:90:9b:bd:f2:8e:35:8c:8d:6a:a1:70:54:46:1e:
         d7:b5:4e:4e:dd:ab:98:12:40:5d:22:75:ed:30:2a:f8:4b:d5:
         5e:8e:e4:60:5a:11:33:d5:6d:50:e3:0c:30:f3:73:cf:cf:99:
         0c:fb:5e:c4:18:d9:7d:41:21:ee:d5:e2:f8:72:68:3b:ae:3b:
         3c:c6:87:65:71:6f:47:1d:54:50:df:aa:63:9c:b2:17:df:4d:
         1e:1b:66:8e:60:ad:c0:0d:4a:b0:50:a0:1a:e3:28:43:db:d7:
         51:ce:11:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:51:02 2025 by rpki-client