Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
File:                     PC3463wb1QIzAvYRqX4F14QXCTs.mft (raw, json)
Hash identifier:          sRxqt8YdvrjJ1ztpCdg4oEM/Noqci4h6pFPgIPGPFy4=
Subject key identifier:   8B:4C:F2:05:9A:B5:FC:2B:2E:EB:22:92:49:7E:50:12:B9:FC:0C:BE
Authority key identifier: 3C:2D:F8:EB:7C:1B:D5:02:33:02:F6:11:A9:7E:05:D7:84:17:09:3B
Certificate issuer:       /CN=A91334F0/serialNumber=3C2DF8EB7C1BD5023302F611A97E05D78417093B
Certificate serial:       F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
Manifest number:          F5
Signing time:             Sun 19 Oct 2025 08:08:23 +0000
Manifest this update:     Sun 19 Oct 2025 08:08:22 +0000
Manifest next update:     Sun 26 Oct 2025 08:08:22 +0000
Files and hashes:         1: PC3463wb1QIzAvYRqX4F14QXCTs.crl (hash: 52iv7FOcO8ZVeDkteVqSsnOOlSkekwIWzuE3yAJG168=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.crl
                          rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:08:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91334F0, serialNumber=3C2DF8EB7C1BD5023302F611A97E05D78417093B
        Validity
            Not Before: Oct 19 08:08:22 2025 GMT
            Not After : Oct 26 08:08:22 2025 GMT
        Subject: CN=68f49c77-443e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1a:d5:c2:1b:62:e0:96:0b:a3:73:05:59:e6:
                    2e:b7:bc:14:4e:37:13:9b:b3:36:b8:72:d9:4a:a7:
                    e3:41:2e:e4:bf:68:c1:a1:d4:8f:ab:85:f4:11:b6:
                    1c:e7:00:d8:4e:f0:c4:f4:e5:02:b2:5a:48:8b:21:
                    b7:c3:f6:f3:89:70:7c:16:46:49:12:ba:c8:4d:c3:
                    9d:db:66:c2:60:c8:48:f1:db:40:1d:8b:c8:21:4d:
                    f5:3e:7c:e3:e1:34:22:2e:41:10:aa:51:a8:97:25:
                    86:ac:25:ea:c8:46:db:44:46:e8:28:aa:27:d7:cf:
                    e1:d7:03:17:ce:2b:3b:e7:73:5d:61:4a:79:16:ef:
                    02:86:92:81:b4:98:0d:6c:be:d7:0d:f4:f0:45:b3:
                    fe:6e:2a:05:73:da:c9:a3:51:3e:0e:fd:e4:3e:4c:
                    a1:da:f8:ba:19:37:34:18:df:37:e7:ff:1c:37:8d:
                    c1:e9:79:ba:db:d6:cf:93:63:4c:9f:69:4b:3d:e8:
                    01:b4:46:02:26:62:39:7f:ef:20:5b:43:75:aa:66:
                    7c:b0:9a:e4:10:17:96:50:05:8b:ee:3b:9c:f0:cb:
                    8b:67:f0:8c:ec:9a:6a:a0:24:65:a3:a0:d4:84:79:
                    8a:92:85:1a:d7:f4:f8:4a:ea:4a:ba:9d:a2:98:72:
                    c6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4C:F2:05:9A:B5:FC:2B:2E:EB:22:92:49:7E:50:12:B9:FC:0C:BE
            X509v3 Authority Key Identifier:
                keyid:3C:2D:F8:EB:7C:1B:D5:02:33:02:F6:11:A9:7E:05:D7:84:17:09:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:48:e9:18:3f:7d:4e:de:ec:42:0a:de:f9:4a:35:19:71:8e:
         0b:15:e1:84:53:71:de:1c:1a:2c:44:0b:eb:a7:76:73:0b:4e:
         a8:54:58:65:45:e0:7c:a5:73:56:70:b6:76:a8:b1:81:36:63:
         3d:93:a2:9c:99:c8:4b:1e:50:29:b9:44:df:45:ed:f4:07:ef:
         f7:6f:23:86:47:12:da:df:0c:2e:21:9e:28:db:5d:74:a3:6d:
         63:cc:70:af:66:52:e8:68:9d:d6:61:eb:db:cb:c0:9f:65:40:
         b5:ad:f7:0a:d1:a1:c2:e7:4f:77:fb:1d:f0:f6:01:55:79:12:
         3e:de:a1:64:89:bf:07:75:6c:5c:08:ad:69:ad:51:59:c7:f4:
         13:07:f3:7e:15:95:81:ae:9e:c5:cf:5f:f2:67:1d:37:c8:3e:
         79:76:ff:b3:f7:7f:01:3a:65:f7:b3:a0:b7:20:1f:72:f2:e6:
         31:72:6c:e2:18:25:46:81:7d:0a:bd:c8:40:0c:ec:f4:8a:92:
         d7:9c:32:6a:d4:41:e6:93:18:77:ff:f4:81:93:3b:3d:cc:d7:
         7b:00:6a:bc:20:6b:83:b8:ac:7f:47:fd:95:7f:e8:a6:1f:d3:
         f9:06:01:c4:c6:3a:0f:b2:8f:f4:65:96:5e:a4:9e:0c:8c:1a:
         5b:bd:2b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:08:27 2025 by rpki-client