Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft
File:                     pGM3j5KTiRbgseQTrw8MinPCH08.mft (raw, json)
Hash identifier:          kV9f1mfR7y1d+vNN1eA/L/s12/KZ67CUpzvdcV6udTw=
Subject key identifier:   A8:24:8B:88:19:C8:07:D6:18:4F:D4:F2:D6:7B:06:19:A0:9E:E7:3E
Authority key identifier: A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F
Certificate issuer:       /CN=A917C3A7/serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F
Certificate serial:       0479
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft
Manifest number:          0479
Signing time:             Sat 09 Aug 2025 00:35:29 +0000
Manifest this update:     Sat 09 Aug 2025 00:35:28 +0000
Manifest next update:     Sat 16 Aug 2025 00:35:28 +0000
Files and hashes:         1: pGM3j5KTiRbgseQTrw8MinPCH08.crl (hash: AjwiJn01O8IFY5zUpdJBiJW2F0yr+CP8Nmc+sDgLBkA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl
                          rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1145 (0x479)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C3A7, serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F
        Validity
            Not Before: Aug  9 00:35:28 2025 GMT
            Not After : Aug 16 00:35:28 2025 GMT
        Subject: CN=689697d1-78d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cb:5f:d6:66:40:d9:7a:59:da:ed:f4:27:a3:
                    b2:6c:41:15:cb:ed:16:63:e4:54:11:db:e7:51:80:
                    f6:6e:a1:df:59:ec:5f:70:dd:d9:1a:13:49:dd:8a:
                    af:d1:a1:c0:32:1a:a0:a7:25:72:72:05:6d:37:86:
                    b7:e9:5d:27:22:26:07:bc:88:1d:0a:8c:68:2d:e4:
                    47:18:0f:6b:4f:c5:10:c6:1a:67:ef:76:8d:19:25:
                    d2:13:8d:b8:e5:5e:63:bf:97:95:65:37:d3:20:d1:
                    b2:db:f2:bb:4d:f1:13:13:72:03:61:b0:ef:86:10:
                    46:4a:61:a3:df:7e:2a:ff:bd:fc:5b:10:ec:73:43:
                    d5:9f:87:2a:cc:bc:ce:c3:8d:67:b4:88:60:1d:e1:
                    dc:3b:9c:25:b8:ea:ce:68:a1:b6:0a:ce:40:2d:93:
                    df:b6:19:81:95:80:a2:98:05:16:90:bf:d5:74:38:
                    92:09:18:ea:11:b9:04:22:72:e1:d3:a0:90:bf:2e:
                    a6:37:1d:64:61:6b:c1:46:25:37:e0:50:88:9a:fb:
                    27:85:ef:35:5a:cb:2d:23:ba:89:7a:02:f0:ed:95:
                    a7:5d:91:81:10:6b:ed:46:23:1b:d2:0d:8d:0f:77:
                    10:55:ed:70:c1:53:4d:e9:4d:28:69:f9:a5:b9:d3:
                    1c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:24:8B:88:19:C8:07:D6:18:4F:D4:F2:D6:7B:06:19:A0:9E:E7:3E
            X509v3 Authority Key Identifier:
                keyid:A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d0:76:e2:fa:03:f6:a1:b4:2d:af:5c:08:2d:00:e4:1f:82:
         be:f0:bb:40:cb:d6:cf:a4:7b:6f:0c:29:73:dc:21:99:d2:d0:
         45:26:6e:2f:c5:9f:ef:24:80:21:97:1b:a8:80:ef:0a:92:4b:
         42:cf:bd:fa:16:16:00:d5:c9:97:f2:9c:f1:6c:8c:c1:2a:d3:
         7b:24:e7:24:6f:04:aa:97:40:74:c6:fd:50:eb:00:57:85:e1:
         1f:14:8d:cb:19:41:e6:bf:dd:f5:42:96:74:bc:ac:cc:a1:82:
         78:58:2b:72:c8:1c:d6:0e:7b:02:8a:43:0b:f5:ad:dc:37:64:
         cf:ae:0f:a2:46:f6:26:12:28:f6:81:c8:6c:05:87:28:a9:bb:
         3f:f3:c8:10:6d:c4:38:f5:b6:c3:6d:e1:ed:98:5f:66:eb:f3:
         5f:b1:c0:76:5e:fd:e8:b5:77:cc:73:8e:e6:35:7a:6a:4b:39:
         cc:5c:d4:a8:c9:d5:30:2b:7b:06:3b:eb:93:ec:49:5a:de:f0:
         c4:85:8c:2d:c8:e1:b7:f6:97:00:9a:d4:f5:9c:b8:f4:05:8e:
         ed:d2:97:46:a0:ad:33:3c:8a:1d:74:12:c2:95:24:93:b1:60:
         7c:04:04:35:fa:c3:13:94:75:62:e5:4e:34:65:a3:91:c7:13:
         e2:84:b4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:53:57 2025 by rpki-client