Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
File:                     PqTXApDMqv5dzJxdpfW-J_7d5F4.mft (raw, json)
Hash identifier:          EbrveWN2O3rKKW5JDnnygvACouX+Tlbg7MRyQFHUU8o=
Subject key identifier:   E4:3B:8A:02:6A:BF:2A:F3:80:07:28:8E:F7:4E:68:05:2C:88:8B:A4
Authority key identifier: 3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E
Certificate issuer:       /CN=A911FA74/serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E
Certificate serial:       34BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
Manifest number:          34BD
Signing time:             Thu 18 Sep 2025 14:42:52 +0000
Manifest this update:     Thu 18 Sep 2025 14:42:51 +0000
Manifest next update:     Thu 25 Sep 2025 14:42:51 +0000
Files and hashes:         1: PqTXApDMqv5dzJxdpfW-J_7d5F4.crl (hash: 6E48o9Iszv2W8C0SIt8gwfL7/f5WxH/eUSsoF5wLO/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl
                          rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 14:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13501 (0x34bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FA74, serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E
        Validity
            Not Before: Sep 18 14:42:51 2025 GMT
            Not After : Sep 25 14:42:51 2025 GMT
        Subject: CN=68cc1a6b-4b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b3:b3:e9:54:86:8a:60:73:8e:1e:c6:58:3d:
                    bc:15:1f:2e:9c:0d:d9:6b:05:4f:b5:b3:03:be:14:
                    a3:00:62:3c:c4:ba:da:f9:66:e8:c1:c5:f4:e0:61:
                    c0:2f:0e:7e:e3:60:96:3b:28:b7:9b:bf:ca:9c:8e:
                    ec:88:8e:70:7a:67:eb:05:e2:39:cd:06:28:be:87:
                    45:84:8b:b8:1e:d9:a9:02:e2:7d:79:f9:7a:26:7e:
                    3c:c1:1b:8f:3e:6b:79:92:ba:c3:97:32:4d:35:92:
                    32:f4:a5:8c:6a:08:50:a6:1c:37:33:ca:49:6e:01:
                    dd:b5:1e:53:e3:a5:fc:93:ed:0c:91:47:37:9e:2b:
                    e4:22:c5:c4:b2:e0:dd:54:9c:04:94:8d:2a:7e:bd:
                    5d:a5:70:8f:c8:36:d6:9f:23:cd:72:f6:9d:a7:ed:
                    b9:5f:b5:2d:15:75:c5:9b:e8:92:81:7f:45:90:8f:
                    00:5f:22:56:5a:b2:4b:6e:3c:45:43:4e:e3:b3:e7:
                    85:f4:36:71:58:ff:0b:06:94:97:66:e8:fe:f9:65:
                    f1:de:f7:a4:35:68:bc:af:5d:1e:d7:8a:bd:aa:81:
                    0a:4a:98:0f:51:d5:62:89:81:b3:7b:be:37:42:5b:
                    62:57:d8:03:72:6e:4c:d6:67:02:3c:dc:23:c0:67:
                    e0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3B:8A:02:6A:BF:2A:F3:80:07:28:8E:F7:4E:68:05:2C:88:8B:A4
            X509v3 Authority Key Identifier:
                keyid:3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:7e:d4:d2:ff:8d:87:00:5b:34:4c:99:12:1d:a7:ab:df:bb:
         ac:1e:e8:2e:80:c6:58:5e:5f:b3:5e:16:62:83:ba:28:ce:54:
         55:4d:4d:14:84:f1:7c:43:d8:12:4d:0b:7f:87:23:c5:85:f7:
         6b:29:ea:de:a9:77:f7:0c:60:70:10:d1:24:1b:a8:82:95:5b:
         43:8b:f9:e0:cb:59:b4:76:a9:64:7b:40:b7:02:22:a0:7d:a6:
         4e:77:b6:2d:d7:ac:b9:01:4c:7c:fc:22:66:fd:6d:08:a0:b3:
         77:b5:a6:9d:8a:c5:71:c4:dc:90:cd:38:96:f3:96:6f:16:bf:
         43:30:73:19:50:32:41:02:c9:c6:03:89:6f:67:09:3c:72:b4:
         17:6c:ef:5d:19:dd:e6:ae:25:ab:d9:8d:df:b9:bd:9c:49:51:
         f0:d9:b9:27:57:54:a3:df:35:fd:66:9b:86:ac:a9:ad:ea:8f:
         20:f1:8f:e1:ce:9e:33:b3:96:55:53:68:f3:4c:aa:3a:c0:72:
         08:fc:c8:a0:f2:1c:17:a4:62:22:7d:2a:2f:15:12:a6:44:12:
         49:42:42:94:84:ff:66:7e:25:6f:59:6b:26:cf:00:9f:ba:a4:
         ea:47:da:82:1b:c5:66:5c:32:f6:3f:8f:c7:a8:5d:e6:dd:76:
         27:8a:56:de
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUZBNzQxMTAvBgNVBAUTKDNFQTRENzAyOTBDQ0FBRkU1RENDOUM1REE1RjVCRTI3
RkVEREU0NUUwHhcNMjUwOTE4MTQ0MjUxWhcNMjUwOTI1MTQ0MjUxWjAYMRYwFAYD
VQQDEw02OGNjMWE2Yi00YjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArbOz6VSGimBzjh7GWD28FR8unA3ZawVPtbMDvhSjAGI8xLra+WbowcX04GHA
Lw5+42CWOyi3m7/KnI7siI5wemfrBeI5zQYovodFhIu4HtmpAuJ9efl6Jn48wRuP
Pmt5krrDlzJNNZIy9KWMaghQphw3M8pJbgHdtR5T46X8k+0MkUc3nivkIsXEsuDd
VJwElI0qfr1dpXCPyDbWnyPNcvadp+25X7UtFXXFm+iSgX9FkI8AXyJWWrJLbjxF
Q07js+eF9DZxWP8LBpSXZuj++WXx3vekNWi8r10e14q9qoEKSpgPUdViiYGze743
QltiV9gDcm5M1mcCPNwjwGfgEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQ7igJq
vyrzgAcojvdOaAUsiIukMB8GA1UdIwQYMBaAFD6k1wKQzKr+XcycXaX1vif+3eRe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkE3NC82MTAxQjVCNjFE
OEYxMUUyODQ3QzVGRUUwOEIwMkNEMi9QcVRYQXBETXF2NWR6SnhkcGZXLUpfN2Q1
RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BxVFhBcERNcXY1ZHpKeGRwZlctSl83ZDVGNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RkE3NC82MTAxQjVCNjFEOEYxMUUyODQ3QzVGRUUwOEIwMkNEMi9QcVRYQXBETXF2
NWR6SnhkcGZXLUpfN2Q1RjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCtftTS/42HAFs0TJkSHaer37usHugugMZYXl+zXhZig7oozlRVTU0U
hPF8Q9gSTQt/hyPFhfdrKereqXf3DGBwENEkG6iClVtDi/ngy1m0dqlke0C3AiKg
faZOd7Yt16y5AUx8/CJm/W0IoLN3taadisVxxNyQzTiW85ZvFr9DMHMZUDJBAsnG
A4lvZwk8crQXbO9dGd3mriWr2Y3fub2cSVHw2bknV1Sj3zX9ZpuGrKmt6o8g8Y/h
zp4zs5ZVU2jzTKo6wHII/Mig8hwXpGIifSovFRKmRBJJQkKUhP9mfiVvWWsmzwCf
uqTqR9qCG8VmXDL2P4/HqF3m3XYnilbe
-----END CERTIFICATE-----
Generated at Fri Sep 19 10:56:50 2025 by rpki-client