Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
File:                     PC3463wb1QIzAvYRqX4F14QXCTs.mft (raw, json)
Hash identifier:          Iq66CBdJ9GOtB1/JKf43nFP0u5q+5dyJO7X3yWOUOSU=
Subject key identifier:   C6:8B:FF:D0:E5:8C:16:9A:53:D7:4B:4F:77:F1:95:2E:53:43:B7:6E
Authority key identifier: 3C:2D:F8:EB:7C:1B:D5:02:33:02:F6:11:A9:7E:05:D7:84:17:09:3B
Certificate issuer:       /CN=A91334F0/serialNumber=3C2DF8EB7C1BD5023302F611A97E05D78417093B
Certificate serial:       BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
Manifest number:          BC
Signing time:             Tue 01 Jul 2025 06:30:27 +0000
Manifest this update:     Tue 01 Jul 2025 06:30:27 +0000
Manifest next update:     Tue 08 Jul 2025 06:30:27 +0000
Files and hashes:         1: PC3463wb1QIzAvYRqX4F14QXCTs.crl (hash: dWku4XCO1yklzMGbkT++ATWkSRdHwqutXXX2GW4rEug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.crl
                          rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 06:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91334F0, serialNumber=3C2DF8EB7C1BD5023302F611A97E05D78417093B
        Validity
            Not Before: Jul  1 06:30:27 2025 GMT
            Not After : Jul  8 06:30:27 2025 GMT
        Subject: CN=68638083-1c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:e2:fa:6a:be:18:ac:29:5e:54:00:b0:92:fe:
                    aa:86:50:67:8c:fd:94:91:c4:d7:5c:62:74:24:a9:
                    b8:eb:72:5e:2d:6c:57:1c:f0:29:a2:30:73:42:92:
                    f1:28:37:0d:24:2c:99:97:66:1b:6d:30:72:7c:16:
                    02:d6:a2:39:f1:c5:3d:53:bf:b3:29:82:c2:61:1f:
                    3a:81:5e:63:42:57:14:22:32:d9:30:87:62:69:0a:
                    ee:f9:b3:58:14:a1:3b:bb:e5:8f:b2:10:7e:6b:ad:
                    89:e9:91:94:16:13:d5:74:66:d9:5f:57:3d:cd:b2:
                    9a:68:45:0e:34:63:56:31:56:bb:45:21:1f:8c:35:
                    9c:46:00:78:6c:06:b6:71:b4:0a:8b:ea:98:9c:65:
                    82:5f:a7:7a:37:2b:3f:cd:ea:23:06:32:5f:13:52:
                    08:55:ed:15:78:98:1d:f2:4f:c5:fc:53:68:55:e7:
                    86:14:13:32:d9:4f:75:78:73:b6:87:12:dc:e4:63:
                    58:3a:16:f0:85:78:34:c6:28:09:a2:3b:de:55:8e:
                    0f:1a:7b:f6:fa:48:56:67:cd:7b:1f:97:8a:07:62:
                    09:15:a8:8e:8a:a2:e8:73:d6:c3:c8:c3:a1:ef:f9:
                    17:68:a8:58:d3:e9:de:8b:27:94:dc:a5:bb:3b:f0:
                    d6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8B:FF:D0:E5:8C:16:9A:53:D7:4B:4F:77:F1:95:2E:53:43:B7:6E
            X509v3 Authority Key Identifier:
                keyid:3C:2D:F8:EB:7C:1B:D5:02:33:02:F6:11:A9:7E:05:D7:84:17:09:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:23:47:e5:9e:0c:cb:d2:e0:97:b5:21:bc:69:67:bb:88:b7:
         8e:1d:66:a6:10:9e:d3:03:e9:90:56:7e:a2:77:02:82:4b:f6:
         c5:15:28:9a:1d:4e:e8:c0:dd:7c:75:eb:47:0a:8a:b8:66:3d:
         b0:e0:dc:36:91:2f:80:c4:ba:b9:5e:e7:f6:79:cd:8b:04:54:
         2e:79:0b:3b:02:30:fc:d1:89:6e:6c:dc:39:e9:c0:70:13:43:
         11:20:f3:ee:c1:19:f8:ec:2a:e5:49:72:1d:01:5a:cf:50:c3:
         c8:1e:af:ac:39:94:5c:0f:5f:f9:6e:e2:16:e2:59:1b:6d:86:
         23:8f:d5:3d:81:7b:1a:0e:77:15:8a:4b:db:05:1f:27:11:7c:
         dc:db:fe:f5:df:59:ac:86:53:a8:4e:39:ac:34:53:a5:44:6a:
         e8:40:e2:d3:74:c4:ad:5f:7f:59:fe:0e:5e:86:d6:d8:58:a2:
         7c:26:50:a8:63:44:4a:b7:40:62:f9:a4:76:36:9b:84:7e:40:
         8e:ba:58:9b:1d:b9:9c:ae:cb:1a:5c:09:bc:9f:a6:ef:b9:88:
         65:fc:d5:4a:84:24:b5:3d:63:55:02:2a:6b:83:46:61:9e:c5:
         94:2a:a6:32:cb:0e:0b:02:9b:9a:75:88:61:98:00:79:1f:15:
         dd:2e:1e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:50:13 2025 by rpki-client