Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft
File:                     PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft (raw, json)
Hash identifier:          DkBr4Y1Q06Bir96RE8lmkyO0cXGLJ4uhCpSr87xbd5Q=
Subject key identifier:   D2:52:FD:BF:A2:D5:15:AE:24:48:53:5B:B0:16:F0:D6:77:F2:DF:FB
Authority key identifier: 3C:18:CD:8B:5B:01:D5:02:37:64:0C:26:C0:37:75:46:D8:04:FD:B4
Certificate issuer:       /CN=A911829D/serialNumber=3C18CD8B5B01D50237640C26C0377546D804FDB4
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft
Manifest number:          A2
Signing time:             Wed 17 Sep 2025 06:56:14 +0000
Manifest this update:     Wed 17 Sep 2025 06:56:14 +0000
Manifest next update:     Wed 24 Sep 2025 06:56:14 +0000
Files and hashes:         1: PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl (hash: 02vW8zrM82ZkEvDbxNe/ALQxF/s5RroFRRMBwZ2J+kY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl
                          rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 06:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911829D, serialNumber=3C18CD8B5B01D50237640C26C0377546D804FDB4
        Validity
            Not Before: Sep 17 06:56:14 2025 GMT
            Not After : Sep 24 06:56:14 2025 GMT
        Subject: CN=68ca5b8e-0a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:dd:1f:98:28:ec:77:40:b4:89:09:79:d8:30:
                    fd:97:83:b5:29:b2:15:f7:5f:f9:83:f7:72:f5:d7:
                    b2:ed:4e:4e:dd:18:90:74:00:97:9a:a8:e9:fe:b8:
                    e9:bf:f8:13:f0:83:63:d6:87:6f:cb:3c:aa:e2:c9:
                    e2:43:71:4c:11:e8:69:59:4d:4c:a2:31:21:cf:cb:
                    0d:b3:23:7a:5e:3b:ed:36:9c:21:76:32:cc:83:92:
                    bc:cf:bb:64:f1:45:aa:a0:c7:5c:25:bf:57:30:2e:
                    3a:3e:38:a8:a4:97:bc:3b:c3:fe:4c:c5:e1:b5:62:
                    8a:fa:8c:c4:9a:a0:1e:4b:27:7c:8b:63:71:7b:8a:
                    2b:a6:80:24:6b:7a:05:31:30:c8:93:47:99:f3:f3:
                    c3:cf:1f:c4:c8:1f:0c:a5:d1:6a:e0:e5:91:00:2e:
                    ae:3f:c0:8b:9b:60:d7:8d:83:06:5e:0e:aa:0c:80:
                    bc:5d:82:b4:07:e6:63:7a:e4:57:d8:77:4f:7e:3f:
                    57:b6:e4:99:86:b1:02:fd:ff:aa:e0:5e:0b:af:ea:
                    c7:36:03:77:78:1f:c2:21:49:9f:a1:ef:e2:7f:0e:
                    4e:14:d6:ec:4d:d1:2c:fa:1a:da:64:44:58:91:31:
                    e6:e2:41:70:61:cc:8b:6a:73:a7:44:b2:7b:dc:64:
                    cd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:52:FD:BF:A2:D5:15:AE:24:48:53:5B:B0:16:F0:D6:77:F2:DF:FB
            X509v3 Authority Key Identifier:
                keyid:3C:18:CD:8B:5B:01:D5:02:37:64:0C:26:C0:37:75:46:D8:04:FD:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:a8:3d:e2:1e:2d:d5:bc:34:75:66:cc:e0:d8:fe:cd:38:93:
         01:6a:d7:e6:70:4d:5a:7e:bc:0f:bf:06:25:9b:8c:75:ce:2c:
         5c:b8:86:6e:f0:56:3b:36:13:a2:f6:e2:ad:27:13:d5:4c:20:
         25:3c:b5:b2:9a:78:de:b3:83:c1:d4:0f:ca:e3:e8:86:ba:04:
         9b:c9:b4:b4:37:f9:f4:05:ac:1e:bd:f0:b0:93:d2:10:f6:59:
         ed:ae:49:2f:ca:88:74:40:5a:58:47:90:0a:f5:f4:bb:b0:ca:
         5b:64:33:ec:c6:50:19:9b:80:d0:5b:42:72:af:9c:ec:2e:1f:
         ea:6b:e3:da:01:68:20:e5:b2:b6:62:d6:15:1d:c6:86:7d:6a:
         07:61:7d:36:73:c8:dd:99:c7:2c:bc:ac:a9:62:de:e9:77:98:
         93:fb:16:a5:fc:83:e0:99:ce:f3:45:d7:ba:ea:7a:e4:48:bb:
         b8:d4:32:ea:b0:1c:2a:47:ca:2f:99:cf:43:99:27:95:0c:5c:
         00:f5:36:df:94:d2:96:38:f6:f0:9f:cd:9b:86:d7:ac:f9:cd:
         6e:55:80:4a:cb:7c:93:ef:db:39:bc:18:3d:5a:7f:74:3a:4d:
         ed:b1:cc:85:09:bb:49:8c:19:a0:c1:bb:5d:54:02:85:95:24:
         08:77:14:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:52:16 2025 by rpki-client