Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
File:                     PcKYLLOQv9qGmu23U1P-S7lwobw.mft (raw, json)
Hash identifier:          +IVCOFcY8HZusuwlJpxC/w6iMwKKYMLdju2eu8X1S5U=
Subject key identifier:   CD:7D:5F:EB:02:ED:02:18:37:2F:F9:60:3D:3E:91:9C:8A:3E:EC:C8
Authority key identifier: 3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC
Certificate issuer:       /CN=A9156D54/serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC
Certificate serial:       0287
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
Manifest number:          0287
Signing time:             Thu 03 Jul 2025 02:00:57 +0000
Manifest this update:     Thu 03 Jul 2025 02:00:57 +0000
Manifest next update:     Thu 10 Jul 2025 02:00:57 +0000
Files and hashes:         1: PcKYLLOQv9qGmu23U1P-S7lwobw.crl (hash: hqXIB1XJLyTeIqvmF83VCyr/HabbLc7SjF94ze4LPaY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl
                          rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 02:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 647 (0x287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156D54, serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC
        Validity
            Not Before: Jul  3 02:00:57 2025 GMT
            Not After : Jul 10 02:00:57 2025 GMT
        Subject: CN=6865e459-6fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:47:4d:60:f7:83:5d:ed:c8:86:45:03:cd:70:
                    39:58:c2:a2:e7:1c:bc:93:e1:1f:a4:ac:99:53:53:
                    37:39:2e:66:c1:3e:5f:59:85:f1:47:db:60:8b:e2:
                    e4:b7:42:d5:f5:d5:80:ca:bb:75:f5:52:29:5d:17:
                    65:f4:19:65:3a:c7:1e:a1:11:0b:1e:23:c6:f1:4c:
                    f0:94:55:a8:c8:81:e3:52:19:34:e3:4a:a0:13:26:
                    2a:09:9d:61:22:55:cf:ff:95:b4:b2:95:b6:9a:6a:
                    e9:e5:5a:84:4e:b5:10:8c:d5:22:69:4c:6b:36:18:
                    79:b0:a8:e8:33:3e:92:21:03:06:a2:fb:3a:8f:99:
                    89:c1:dd:c5:68:ea:bb:47:ff:e2:06:e2:17:c9:6c:
                    76:a5:ca:cc:0f:8e:97:e1:e2:40:7a:8b:aa:d2:5e:
                    8e:8e:73:46:6f:49:4d:28:29:f5:05:9e:b1:6e:bb:
                    58:65:92:71:f2:2e:37:4d:bc:5f:02:0c:90:94:ed:
                    db:2a:15:ab:25:b4:1b:7c:4c:b0:c2:60:98:5d:77:
                    52:bf:47:e5:c2:9d:1e:19:53:f5:cc:00:69:33:23:
                    6e:0e:81:f4:8b:cc:d5:80:3d:f3:a6:fa:ab:3f:0f:
                    cd:14:02:78:03:18:0a:a0:fc:dc:1e:3f:10:82:9b:
                    2f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7D:5F:EB:02:ED:02:18:37:2F:F9:60:3D:3E:91:9C:8A:3E:EC:C8
            X509v3 Authority Key Identifier:
                keyid:3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:03:aa:75:fd:6b:3b:ed:03:d4:b2:ec:24:9c:07:29:2e:82:
         a6:e7:ca:41:65:5d:a4:ab:47:8d:66:ca:34:6d:08:cd:b0:cb:
         1d:8f:2e:4e:21:3e:67:26:03:4b:4c:71:f8:80:2a:a3:79:27:
         ba:5b:18:cc:2e:50:27:3f:22:60:3c:3c:5b:4f:3b:c8:c3:b0:
         0c:f9:34:98:09:dd:3f:e1:57:cd:ca:fa:4c:c8:90:e8:52:55:
         25:ea:4a:89:41:be:dc:be:b0:e6:5c:c3:c3:69:96:00:d7:b5:
         8e:45:db:e4:82:9e:60:e8:ff:fd:af:d7:59:30:1a:7b:9e:c6:
         b1:e6:dc:01:47:82:e5:65:90:b5:11:06:29:0c:af:ac:a6:8d:
         57:97:1e:11:c8:c7:88:f5:00:55:ee:70:fe:a3:56:d7:1b:15:
         a9:42:fd:1b:3a:e1:9f:1e:ca:a5:17:13:70:0d:5f:8f:90:74:
         6f:20:c8:f2:86:38:95:8d:95:28:d7:50:20:35:1a:99:fe:7c:
         b8:6e:bc:4e:c0:49:f8:05:20:5a:85:89:8d:5d:8d:cc:80:e9:
         33:24:89:9d:9c:ad:49:f0:2d:0d:0f:b9:ed:a4:59:d7:d4:4d:
         ba:b5:09:73:58:14:99:6f:b6:bf:b8:09:40:e5:05:79:83:68:
         c3:1a:c0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 23:14:32 2025 by rpki-client