Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
File:                     PqTXApDMqv5dzJxdpfW-J_7d5F4.mft (raw, json)
Hash identifier:          KXVCmXwUwi6gWBKaVs491ulUfRa7yfPqtzuOAu6Xx7M=
Subject key identifier:   A1:59:E3:E9:99:E5:0F:80:C3:FF:BE:CA:81:0A:40:41:6A:1A:D1:E9
Authority key identifier: 3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E
Certificate issuer:       /CN=A911FA74/serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E
Certificate serial:       34CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
Manifest number:          34CC
Signing time:             Sat 18 Oct 2025 14:44:26 +0000
Manifest this update:     Sat 18 Oct 2025 14:44:25 +0000
Manifest next update:     Sat 25 Oct 2025 14:44:25 +0000
Files and hashes:         1: PqTXApDMqv5dzJxdpfW-J_7d5F4.crl (hash: xyptBEvb49Q0V44PT+o/GMsiYwBFVwFnvh3jQJsqDbE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl
                          rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13516 (0x34cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FA74, serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E
        Validity
            Not Before: Oct 18 14:44:25 2025 GMT
            Not After : Oct 25 14:44:25 2025 GMT
        Subject: CN=68f3a7c9-ef73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e6:f9:ec:d0:9f:7d:7c:d7:0b:dc:33:0c:8e:
                    5c:1c:39:b2:82:51:ca:8a:b6:62:80:17:52:c9:0a:
                    91:02:dd:51:d4:d5:e8:ba:d5:ba:91:ac:e5:7f:3b:
                    10:8d:93:6f:89:8e:96:97:48:1b:97:90:bc:31:91:
                    a1:05:f7:bc:36:5a:bd:07:2f:ef:e2:84:c5:ef:75:
                    1a:08:45:6e:cb:88:c8:ed:f2:0c:8c:4e:be:c1:64:
                    ae:3b:2e:78:5b:94:bb:be:db:c8:08:6b:36:06:5c:
                    a5:d2:cf:5f:ef:0f:56:b5:3c:cf:3a:cf:99:e3:54:
                    30:a6:0b:40:c7:3a:60:b0:b7:1c:2b:46:97:c1:0a:
                    83:34:39:db:0d:f4:63:10:bc:24:ed:de:b3:0d:5c:
                    da:05:29:fe:89:02:de:c0:ac:d6:de:ce:e9:d7:3b:
                    30:d8:e3:64:5f:0c:fe:6b:57:09:55:68:ad:8a:03:
                    c4:ab:ab:1f:f9:4c:34:e7:ff:a5:85:24:09:4f:3a:
                    15:65:77:f1:41:c1:88:4d:aa:70:97:76:dd:cb:01:
                    39:97:0f:24:bc:1e:61:7d:3b:b5:32:36:60:35:03:
                    f3:f2:24:e7:dc:14:1a:8c:37:82:ee:08:9a:31:05:
                    ae:94:82:3e:40:94:fa:9f:2c:48:29:3f:a4:e8:af:
                    f8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:59:E3:E9:99:E5:0F:80:C3:FF:BE:CA:81:0A:40:41:6A:1A:D1:E9
            X509v3 Authority Key Identifier:
                keyid:3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:14:58:6f:3b:68:45:76:c2:5d:49:5f:87:e0:dd:62:f2:b2:
         82:0b:88:d1:b8:3e:68:3a:ec:67:1b:a3:27:4c:4f:15:87:df:
         0e:63:14:7c:94:a5:25:fa:a7:a1:87:00:9e:74:e1:62:3a:6e:
         ce:a2:2a:51:ae:2b:d5:ff:5b:46:08:e0:d2:ea:2b:bd:9d:bc:
         a5:80:7f:50:69:3a:da:0f:0f:07:8e:18:2b:07:84:2b:d1:7d:
         ac:34:cf:49:3e:5f:a4:64:89:8a:94:a7:06:35:d3:90:c1:b8:
         92:87:c1:4a:72:28:2d:55:4d:24:3a:12:f8:47:c4:16:5c:08:
         f3:37:e5:78:fc:07:28:4d:bf:c0:a9:04:07:2d:f8:3e:26:64:
         2d:0a:4d:75:72:ef:f7:1d:54:04:06:38:a4:9d:fc:fe:ac:6c:
         ae:df:72:ff:f2:d2:dd:0f:eb:d6:86:37:7e:6c:84:f3:f1:d4:
         43:48:4a:fd:6e:0e:c4:e5:4a:7f:6b:80:5f:b7:35:85:15:24:
         da:59:fc:92:93:22:d6:bd:55:8b:8e:b6:b3:27:df:80:bb:f4:
         7c:e3:13:72:af:28:fb:02:67:1a:49:bf:87:08:f7:b6:ee:b9:
         82:ac:3c:c5:8e:23:7c:fe:2c:a4:0d:12:a0:f9:0f:d8:3e:d4:
         cb:42:2e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:31 2025 by rpki-client