Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft
File:                     PgYolveWFAxkBV5H1FMISCOnCCQ.mft (raw, json)
Hash identifier:          zLtQ/2q/ouxJRfc2iqb+aaNzKJ2BhyEjixembxuA294=
Subject key identifier:   6C:25:AB:B7:0D:A0:D4:E3:95:9A:21:2B:65:10:A6:C6:BA:8D:44:31
Authority key identifier: 3E:06:28:96:F7:96:14:0C:64:05:5E:47:D4:53:08:48:23:A7:08:24
Certificate issuer:       /CN=A917E65B/serialNumber=3E062896F796140C64055E47D453084823A70824
Certificate serial:       3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft
Manifest number:          3B
Signing time:             Sat 23 Aug 2025 07:46:09 +0000
Manifest this update:     Sat 23 Aug 2025 07:46:08 +0000
Manifest next update:     Sat 30 Aug 2025 07:46:08 +0000
Files and hashes:         1: PgYolveWFAxkBV5H1FMISCOnCCQ.crl (hash: yRayRn9X7e36ZGUsItS81FXVEQ2yQPzB1ZQe4PTREW8=)
                          2: B7498170318011F0A5A76C39C4F9AE02.roa (hash: 4xMCpId57nfxz7XEfKoBdilLfSUib+cCTUbVdicWXMY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.crl
                          rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 07:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E65B, serialNumber=3E062896F796140C64055E47D453084823A70824
        Validity
            Not Before: Aug 23 07:46:08 2025 GMT
            Not After : Aug 30 07:46:08 2025 GMT
        Subject: CN=68a971c1-781a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fc:58:6f:ba:d3:81:cc:16:cc:cb:9a:b7:32:
                    85:2c:16:da:f9:3e:b9:aa:09:8b:87:8d:f2:a7:1b:
                    3c:68:47:13:ff:9d:6f:84:35:53:78:a5:dd:96:8b:
                    67:b3:55:9f:dc:e6:f2:54:c4:60:63:7a:f5:ac:60:
                    0c:6a:36:e4:48:88:76:eb:43:34:6f:e5:61:87:5d:
                    ae:ea:15:c3:81:e0:ad:5f:94:31:c7:62:f4:d4:0d:
                    ef:0d:94:db:f1:35:4a:a1:2a:3d:99:b8:f6:02:c1:
                    b5:f3:fe:ce:27:61:9d:39:8a:7e:2f:93:4a:57:c1:
                    f2:28:f0:ec:e2:e5:8e:02:a5:35:6d:ed:fb:73:89:
                    d2:ad:68:2a:f4:a6:a5:00:ed:ea:8b:53:23:71:0f:
                    57:d8:93:2c:fe:75:c6:b3:c5:ba:bc:8a:e8:f9:a0:
                    de:bd:1b:2b:39:b8:39:79:22:89:c3:d6:a6:f5:a2:
                    bc:06:3a:b4:c9:a2:36:85:94:42:41:6f:aa:10:87:
                    50:65:d2:82:3b:c8:35:06:86:47:fe:12:64:ec:5b:
                    4e:82:78:9e:4c:5e:41:34:04:24:48:e4:8e:31:24:
                    10:cd:38:25:1e:83:2f:2d:65:0a:de:b7:4e:4e:16:
                    ff:3e:40:16:84:4d:02:92:49:de:41:77:a8:85:4f:
                    ed:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:25:AB:B7:0D:A0:D4:E3:95:9A:21:2B:65:10:A6:C6:BA:8D:44:31
            X509v3 Authority Key Identifier:
                keyid:3E:06:28:96:F7:96:14:0C:64:05:5E:47:D4:53:08:48:23:A7:08:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:38:60:5e:dc:d2:0b:94:fa:6e:f1:4b:cb:89:ef:8d:44:f8:
         22:c5:40:83:7d:4d:2d:2c:6f:da:62:87:8e:18:8b:a9:aa:45:
         87:e5:fc:fc:a9:17:c8:b7:bf:b6:3a:d9:37:fe:78:fc:8c:8c:
         24:cd:ec:f2:78:2c:d2:ea:03:ae:b9:31:00:b5:2f:38:07:c3:
         44:4a:19:93:65:44:2b:04:50:19:cd:a0:85:05:00:0c:5d:7f:
         82:b4:b3:ce:90:68:54:a2:42:86:48:37:28:18:fd:bf:eb:6f:
         db:5b:28:d2:a0:3d:e2:bf:84:5c:e1:8b:31:45:a7:ca:ff:15:
         a2:55:c1:2f:a1:14:17:27:14:33:dd:59:27:09:93:c6:cc:67:
         0c:66:6f:b9:b2:f2:98:db:59:de:88:f3:e3:94:2c:0d:fa:06:
         05:75:71:95:80:0e:6c:4c:33:80:ef:de:ca:4f:a5:cb:2c:3a:
         9d:b9:42:cf:29:53:43:a4:60:f2:4b:01:b2:89:1a:36:8d:4a:
         4d:80:61:0f:e8:84:05:7e:59:12:b3:7a:93:b5:ad:0d:a7:8d:
         3e:12:1b:ca:03:80:32:6c:2d:75:d2:32:cc:ce:18:c0:0a:5e:
         3d:00:a1:37:ef:06:87:7f:45:e0:00:62:0e:b1:91:2e:34:65:
         b0:70:d5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:57:30 2025 by rpki-client