Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft
File:                     PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft (raw, json)
Hash identifier:          h7oWYyAbSvECrtk/LuJarpMGHo9kfu0sfMb2YQXdjZk=
Subject key identifier:   09:A3:00:18:04:95:6E:7E:A9:FB:E0:D2:13:BC:1E:47:94:C2:D4:2B
Authority key identifier: 3C:18:CD:8B:5B:01:D5:02:37:64:0C:26:C0:37:75:46:D8:04:FD:B4
Certificate issuer:       /CN=A911829D/serialNumber=3C18CD8B5B01D50237640C26C0377546D804FDB4
Certificate serial:       86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft
Manifest number:          86
Signing time:             Fri 25 Jul 2025 06:56:13 +0000
Manifest this update:     Fri 25 Jul 2025 06:56:13 +0000
Manifest next update:     Fri 01 Aug 2025 06:56:13 +0000
Files and hashes:         1: PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl (hash: HaxxRPKsCvpKgbuCnL96lxN1uKM7ye1syExBTB39mlk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl
                          rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 01 Aug 2025 06:56:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911829D, serialNumber=3C18CD8B5B01D50237640C26C0377546D804FDB4
        Validity
            Not Before: Jul 25 06:56:13 2025 GMT
            Not After : Aug  1 06:56:13 2025 GMT
        Subject: CN=68832a8d-9ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b3:d5:22:2c:6b:e2:ff:6e:e5:98:89:06:e2:
                    03:55:89:71:b0:5d:b0:fa:71:cf:32:8b:e8:69:54:
                    4c:e9:4c:cb:68:fa:16:a0:84:1c:bd:be:f0:a9:f9:
                    1f:87:68:cf:d5:9a:32:39:67:e6:4f:f5:9e:ed:47:
                    89:0d:5e:30:b7:b3:11:25:a5:1c:cc:fb:04:c6:7e:
                    ca:92:df:99:9e:c2:dc:4d:e3:58:ad:4f:19:a9:0f:
                    d3:36:b4:5f:56:b2:be:a0:da:55:6a:ef:9d:e6:e6:
                    af:73:36:a6:62:b0:81:49:3c:b8:cc:2a:7d:4c:95:
                    d8:60:93:4c:d9:66:95:22:bd:dc:bb:c1:66:0f:97:
                    29:13:61:95:ac:43:8c:78:90:37:d7:4b:cf:0f:34:
                    0a:e1:9f:b5:ec:7a:28:05:ed:28:3d:92:2e:ba:12:
                    d6:59:98:91:16:f9:b1:6e:7d:31:ea:c0:2f:fa:a2:
                    90:4d:0a:aa:11:38:cd:ba:0c:64:b3:df:16:dc:50:
                    fa:a5:48:10:a0:17:73:f1:a0:a4:57:43:b4:09:eb:
                    a0:0d:13:fb:f0:2a:f8:a8:98:6c:ab:84:b4:03:d3:
                    de:6e:08:11:84:d1:57:5a:9f:58:62:72:98:00:1a:
                    db:28:ac:a1:bf:71:1e:11:c6:f1:0e:80:41:95:68:
                    84:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A3:00:18:04:95:6E:7E:A9:FB:E0:D2:13:BC:1E:47:94:C2:D4:2B
            X509v3 Authority Key Identifier:
                keyid:3C:18:CD:8B:5B:01:D5:02:37:64:0C:26:C0:37:75:46:D8:04:FD:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:7a:f8:9f:e7:36:6f:da:91:a2:7f:96:6d:f1:fc:e3:97:bc:
         33:57:13:44:46:af:da:c8:e7:a3:bd:6f:f2:33:0b:03:12:7d:
         8e:68:8b:5f:13:c0:13:03:89:6e:cc:ad:f8:49:57:9f:53:e2:
         0a:00:59:96:a7:cb:00:b7:05:a1:b9:64:df:65:0a:8c:22:aa:
         aa:f3:9d:ff:9b:a1:06:e2:f9:d5:6b:84:94:d1:21:24:e3:7f:
         9a:44:cc:07:d6:02:c6:64:3d:21:12:6b:84:84:0e:04:2e:1b:
         d7:ed:7d:2a:04:f2:43:1d:d3:4e:a2:61:53:12:6d:22:d0:79:
         70:89:1d:94:4a:0f:c3:5f:dc:7a:d5:2f:11:f4:64:60:41:16:
         3c:0e:56:ef:9b:02:6d:d2:8b:0e:21:b6:35:09:89:e7:df:be:
         53:fe:92:8a:b0:c3:0f:98:34:91:45:d0:60:15:e7:17:68:ce:
         85:10:da:ff:0a:b3:bc:63:e0:81:1a:81:f1:7b:f8:10:6a:d0:
         b4:9e:56:d9:df:b5:3b:51:36:62:14:be:d6:b5:a7:2a:e3:d8:
         ab:03:81:f1:77:7b:36:04:36:27:37:22:d1:98:73:75:da:8c:
         7e:1a:ae:af:f1:66:62:17:1a:40:19:5d:01:0a:3e:9f:d1:76:
         3e:c2:15:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 02:04:10 2025 by rpki-client