Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
File:                     PmqgA4_dRmnJDxiDgji35BAt3Bk.mft (raw, json)
Hash identifier:          gyQgRCE8cZzHs/pZoodFB2JiL9PcyxiXVfcJnH47Rxs=
Subject key identifier:   2B:AD:A0:FE:E0:37:FE:31:5E:14:AF:31:23:69:3D:90:91:2F:E0:95
Authority key identifier: 3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19
Certificate issuer:       /CN=A9161322/serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
Manifest number:          0154
Signing time:             Wed 05 Nov 2025 04:17:55 +0000
Manifest this update:     Wed 05 Nov 2025 04:17:55 +0000
Manifest next update:     Wed 12 Nov 2025 04:17:55 +0000
Files and hashes:         1: PmqgA4_dRmnJDxiDgji35BAt3Bk.crl (hash: onqaAd9mIO2PxCfEvghmg9KdmWd8+9kTNtKNL6a924c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl
                          rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 04:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161322, serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19
        Validity
            Not Before: Nov  5 04:17:55 2025 GMT
            Not After : Nov 12 04:17:55 2025 GMT
        Subject: CN=690acff3-5de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9e:51:a7:f0:43:b0:e6:1e:50:46:a2:ff:d3:
                    12:23:e8:5d:95:21:bf:7a:db:f7:ff:3b:38:bd:0e:
                    13:af:ba:82:bc:37:a3:d0:60:d0:ae:39:53:cd:34:
                    9d:fd:ad:96:d7:67:97:14:8c:63:97:52:3d:e8:fc:
                    e6:cb:44:83:49:39:17:ad:80:35:0c:a2:96:d1:fc:
                    ce:43:04:56:94:9e:81:3f:40:b7:5d:82:db:71:03:
                    20:5a:34:a3:87:42:e0:87:a8:c1:96:40:c8:30:b6:
                    b2:5a:d4:4d:ec:e7:86:42:4e:bd:8e:66:1f:7c:38:
                    a1:23:58:f1:c5:fb:5a:a1:f1:9e:1c:b4:3f:6a:ee:
                    69:00:b8:77:92:8a:ca:03:87:63:58:1a:fd:8f:92:
                    f2:c5:d5:64:8e:5f:05:3c:04:06:f8:aa:84:9f:73:
                    73:a4:cb:84:c2:46:0a:66:dc:83:07:12:9f:a3:66:
                    ce:7b:d3:7c:59:7d:dd:2f:a9:f0:61:4d:4d:86:8e:
                    74:c8:11:66:e6:c0:22:ee:0a:67:73:ec:ec:d6:47:
                    9a:e9:c6:de:8f:1f:fe:e7:59:3a:91:b1:4f:60:91:
                    63:3d:a1:ea:e6:f9:47:f2:b3:97:32:54:93:a2:3e:
                    36:a1:77:ab:9b:d9:76:4a:5e:14:90:c9:0a:ed:18:
                    6a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AD:A0:FE:E0:37:FE:31:5E:14:AF:31:23:69:3D:90:91:2F:E0:95
            X509v3 Authority Key Identifier:
                keyid:3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:7e:2c:82:b0:2b:c8:73:8c:ce:05:08:c4:93:01:7e:5d:b3:
         01:ca:c5:3a:73:b8:e7:32:77:57:cc:11:6a:07:75:93:55:24:
         b0:21:a8:cd:73:d7:63:67:83:16:86:51:3e:c1:ff:f0:86:37:
         ff:93:a2:0b:c2:7f:04:44:c3:04:1e:09:98:7e:8b:9d:f6:7b:
         63:27:79:ed:d1:86:94:9c:77:e8:f4:28:e0:d4:32:7e:e8:04:
         48:38:b2:1d:f9:e4:34:3a:98:7a:9a:36:70:43:cf:33:e9:67:
         71:5b:d8:db:8a:79:19:67:83:16:03:95:8f:85:5a:90:cf:0b:
         3d:b3:8f:4f:f8:8f:58:e4:c5:8f:2a:48:4a:3b:b1:82:85:30:
         14:f6:a3:a2:f9:2b:c5:49:97:22:45:fc:cd:e6:dd:b5:7e:a3:
         0d:a4:80:ae:45:2b:bd:7b:98:fd:4c:ce:99:2d:b2:f0:3b:11:
         17:51:fe:c2:d4:48:d7:ca:54:62:c8:84:25:36:9b:0f:2c:08:
         03:bb:ef:2b:7b:c1:bf:ea:7f:c5:3a:0c:4b:ed:8b:36:3a:8e:
         1b:c9:b0:5c:62:c8:b4:3b:6e:04:f0:43:99:ef:eb:24:36:ae:
         5c:36:cd:17:bf:3f:9b:4a:61:10:7a:10:88:43:ea:0d:31:d5:
         fd:0d:a0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:47:31 2025 by rpki-client