Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft
File:                     PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft (raw, json)
Hash identifier:          heAK8ZdpvfvD+A3kVQYGjzWLuWXpp+cpVRDSUqnVAs4=
Subject key identifier:   C2:7C:55:7B:88:2B:BB:AC:53:9F:EE:C0:06:24:2F:83:C9:7C:BD:63
Authority key identifier: 3C:18:CD:8B:5B:01:D5:02:37:64:0C:26:C0:37:75:46:D8:04:FD:B4
Certificate issuer:       /CN=A911829D/serialNumber=3C18CD8B5B01D50237640C26C0377546D804FDB4
Certificate serial:       7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft
Manifest number:          7B
Signing time:             Thu 03 Jul 2025 06:56:57 +0000
Manifest this update:     Thu 03 Jul 2025 06:56:57 +0000
Manifest next update:     Thu 10 Jul 2025 06:56:56 +0000
Files and hashes:         1: PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl (hash: g5NEvm9UK2PZQ17eSR5/0RrAKM371HnzCLwNzaoKoqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl
                          rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911829D, serialNumber=3C18CD8B5B01D50237640C26C0377546D804FDB4
        Validity
            Not Before: Jul  3 06:56:57 2025 GMT
            Not After : Jul 10 06:56:56 2025 GMT
        Subject: CN=686629b9-663d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b4:20:cc:f5:e5:27:ae:3a:d8:60:10:6d:1b:
                    b1:0b:c1:bc:06:e7:05:e6:39:15:55:cd:7b:5c:75:
                    b1:9a:4b:42:08:d6:3d:c0:c3:50:04:65:63:7d:c3:
                    4f:9e:e3:a3:2d:d4:15:a5:77:c4:01:97:2d:c0:ca:
                    d1:c8:3f:6b:3d:7a:c8:06:71:2d:26:07:06:c6:73:
                    c7:26:a4:ad:47:88:2e:e3:79:db:36:aa:a7:7e:80:
                    0d:25:5f:b3:15:14:e0:14:4b:5c:0b:ca:5e:d5:f3:
                    35:ff:7e:fa:8e:e5:a3:1d:31:99:89:4e:1f:57:12:
                    32:bb:94:4e:da:ba:ca:0f:a7:e7:18:64:ec:a1:da:
                    50:7f:92:6a:e0:0b:b1:53:50:dd:e4:80:a5:71:c5:
                    ce:56:0a:cd:1b:03:1c:6c:5e:77:9e:8c:3a:0e:a8:
                    23:04:11:8c:6b:1b:0f:31:c1:11:89:da:89:f9:3b:
                    c4:a4:db:92:ca:76:c6:b4:db:a5:23:3e:42:f9:04:
                    a7:a3:45:19:81:25:60:a3:66:37:7b:09:38:92:39:
                    92:1b:20:d2:ad:7f:67:6b:43:04:ed:75:b8:43:e0:
                    fc:ec:b5:54:93:97:3e:91:0e:11:bb:82:12:9f:12:
                    52:1c:14:b1:dd:0a:4e:3a:0b:86:f6:00:1f:2b:64:
                    f2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7C:55:7B:88:2B:BB:AC:53:9F:EE:C0:06:24:2F:83:C9:7C:BD:63
            X509v3 Authority Key Identifier:
                keyid:3C:18:CD:8B:5B:01:D5:02:37:64:0C:26:C0:37:75:46:D8:04:FD:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:64:1f:e2:b4:bc:65:bc:44:86:2d:cc:a5:8e:9b:fc:a3:51:
         dc:af:6e:40:3f:b1:5b:1b:66:96:5e:e7:62:ca:8f:8c:98:f3:
         74:0a:51:70:10:43:8d:0d:8a:a0:65:51:97:fc:de:d0:29:12:
         48:64:bb:41:cc:c0:a8:56:5d:bf:35:01:f1:0c:21:4f:18:ed:
         f8:95:37:e7:72:ce:bb:b1:3b:32:44:94:4b:07:f8:2b:22:c5:
         83:33:f9:1d:9f:c0:e0:c1:cb:af:ba:ce:db:77:75:8d:a4:b1:
         df:23:03:50:1b:dc:cc:c1:7a:ac:e2:c2:8b:b9:5e:1d:b5:a2:
         42:5b:81:a2:bf:b0:14:2c:0d:2c:b9:84:81:57:6e:b6:5b:65:
         d7:95:75:7f:ec:00:05:19:4a:e3:7c:a3:ff:6d:4f:d1:a2:44:
         8c:20:ca:47:37:3c:4d:8b:33:42:f0:38:c3:53:73:12:d6:67:
         f6:51:1a:06:ee:72:7a:fa:ff:48:19:e8:c1:2c:5f:be:3e:72:
         8e:b4:7f:7c:9f:54:d7:3e:9d:d0:0d:bf:f0:5c:58:7b:03:ee:
         7d:ac:78:f5:b6:6a:21:17:3b:23:88:d2:7e:c7:ae:dd:1e:19:
         59:3d:33:92:94:db:8b:02:88:73:45:2e:48:a5:c5:ce:96:3e:
         b0:64:4f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:21:48 2025 by rpki-client