Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft
File:                     PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft (raw, json)
Hash identifier:          eGL3itcFx6/lKb7uRzv2+N92f3w7Fl0jOXNL2fz4tD8=
Subject key identifier:   9C:64:0E:AE:0C:3C:B9:46:51:0D:27:6B:5E:FB:DE:06:DF:26:41:ED
Authority key identifier: 3D:51:ED:C4:3A:39:99:B1:37:1C:E5:C0:41:42:08:3F:E2:87:D0:F2
Certificate issuer:       /CN=A914E6AA/serialNumber=3D51EDC43A3999B1371CE5C04142083FE287D0F2
Certificate serial:       01BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft
Manifest number:          09FA
Signing time:             Sun 19 Oct 2025 00:16:46 +0000
Manifest this update:     Sun 19 Oct 2025 00:16:45 +0000
Manifest next update:     Sun 26 Oct 2025 00:16:45 +0000
Files and hashes:         1: PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl (hash: o5y40RSU5jjVwrIaMMUVtHyAfLvlWhcCTycce3+Hq1U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl
                          rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:16:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E6AA, serialNumber=3D51EDC43A3999B1371CE5C04142083FE287D0F2
        Validity
            Not Before: Oct 19 00:16:45 2025 GMT
            Not After : Oct 26 00:16:45 2025 GMT
        Subject: CN=68f42ded-5645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:53:4c:b5:55:a7:27:29:7a:5c:0b:58:d2:eb:
                    4f:16:95:4c:84:ee:d7:e4:95:da:43:74:2a:02:51:
                    12:7c:2c:15:36:ea:71:f8:b7:7e:a6:e8:c3:03:01:
                    6b:52:75:22:99:fb:e9:c3:5f:35:f1:3d:cb:5b:fe:
                    52:b3:ed:ff:38:3a:53:28:a5:96:c9:c4:bb:42:b0:
                    6b:0e:08:73:4f:6f:c4:58:e3:6b:6f:c4:53:56:69:
                    bb:7c:4d:cf:6a:48:37:8b:87:d6:d6:41:06:b7:31:
                    2f:34:48:b8:43:a6:9b:3d:86:0a:ac:ac:4a:09:22:
                    a3:37:bb:30:27:f4:a7:82:f8:de:5e:d4:3f:20:ed:
                    c1:47:0f:63:85:40:dd:7a:96:30:1a:1b:51:a0:4e:
                    90:b3:7f:93:f1:b0:90:31:c7:c1:cd:01:be:3c:0f:
                    69:97:9a:08:29:ca:0e:d2:02:34:81:16:01:a7:d3:
                    c7:2d:15:0e:87:d4:11:5d:11:aa:e6:3b:33:de:bc:
                    d9:eb:f2:c3:30:20:b1:93:91:7a:fd:71:ef:a6:d8:
                    0c:48:14:1f:ee:e5:33:87:92:a8:e1:89:da:3f:4a:
                    60:5c:17:13:a8:0d:d3:bd:93:50:b2:ee:a5:dd:45:
                    3e:50:7a:f4:17:b0:dd:c5:35:12:55:23:e2:5b:d2:
                    9d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:64:0E:AE:0C:3C:B9:46:51:0D:27:6B:5E:FB:DE:06:DF:26:41:ED
            X509v3 Authority Key Identifier:
                keyid:3D:51:ED:C4:3A:39:99:B1:37:1C:E5:C0:41:42:08:3F:E2:87:D0:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:eb:8c:2c:a8:74:1d:e8:79:71:52:ac:84:d2:af:cf:5b:43:
         73:a5:a2:f9:b5:a5:7a:78:d5:d3:24:65:32:d7:f2:07:4b:01:
         7e:bb:e8:08:ab:3c:6f:1e:77:2b:48:74:02:22:b9:14:0b:72:
         5e:ab:69:eb:d5:fe:66:73:18:bc:f1:25:cc:53:3a:3f:bd:f5:
         0f:e8:82:03:0e:05:4c:e3:af:b7:13:61:18:29:f1:2b:71:71:
         a1:03:1a:f4:5d:7b:94:3c:1d:6c:fc:11:b1:7a:38:f2:eb:c0:
         b2:86:44:f8:46:17:09:3d:f2:4d:b5:03:9d:89:3f:c7:8e:80:
         68:a7:81:1b:8d:f9:f8:2f:16:fb:19:c4:ce:3f:3e:35:93:54:
         3e:11:9f:93:b6:96:2c:de:be:b7:e9:12:39:95:41:08:f2:7c:
         99:93:4b:67:14:04:90:e3:eb:88:b1:5c:9c:38:4d:74:32:ba:
         66:48:90:e2:41:d3:3f:70:40:94:39:b9:9d:3b:2d:99:b2:b6:
         9a:b6:68:a5:17:c2:59:34:3b:a6:6f:25:63:1c:1f:0f:b8:1b:
         d7:df:12:ca:f6:01:e9:41:35:26:6a:16:1e:1a:a7:ce:c1:6a:
         3e:87:3f:d0:f9:99:2e:5d:cb:0b:52:0f:41:2e:88:c1:78:f3:
         e3:f7:65:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:59:14 2025 by rpki-client