Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
File:                     PC3463wb1QIzAvYRqX4F14QXCTs.mft (raw, json)
Hash identifier:          sj+qWo5knNsi92hq7TkpqRPS9VUWInjxJonxdQrk/wk=
Subject key identifier:   3E:F0:CB:BC:76:49:EE:A4:47:43:AE:4A:84:65:1C:4C:9C:B8:31:CA
Authority key identifier: 3C:2D:F8:EB:7C:1B:D5:02:33:02:F6:11:A9:7E:05:D7:84:17:09:3B
Certificate issuer:       /CN=A91334F0/serialNumber=3C2DF8EB7C1BD5023302F611A97E05D78417093B
Certificate serial:       FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
Manifest number:          FC
Signing time:             Mon 03 Nov 2025 05:05:55 +0000
Manifest this update:     Mon 03 Nov 2025 05:05:54 +0000
Manifest next update:     Mon 10 Nov 2025 05:05:54 +0000
Files and hashes:         1: PC3463wb1QIzAvYRqX4F14QXCTs.crl (hash: 58kjDnDTHxROIGzszYi3vLQTmuZhwC2IF+B34txgWbs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.crl
                          rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 05:05:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91334F0, serialNumber=3C2DF8EB7C1BD5023302F611A97E05D78417093B
        Validity
            Not Before: Nov  3 05:05:54 2025 GMT
            Not After : Nov 10 05:05:54 2025 GMT
        Subject: CN=69083832-90f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:c0:ab:49:73:20:8b:69:03:60:f1:b7:9a:
                    42:19:16:21:60:a8:bb:8a:0a:55:6e:f6:f8:75:5e:
                    40:16:07:e8:9a:29:39:59:8e:8b:fb:d2:f7:5e:41:
                    7e:a6:c1:f4:b2:de:82:47:35:85:58:14:36:b6:86:
                    1d:33:18:9a:ec:ad:42:36:78:2e:09:3f:a9:89:9b:
                    1f:e5:ba:bc:02:a7:ae:9b:91:b0:f4:7b:e0:9a:9e:
                    0d:2d:b3:4f:58:3a:ed:4d:c0:c4:50:fb:fe:ae:b3:
                    80:e4:0a:7b:18:da:2f:4b:b0:46:28:49:bc:50:42:
                    e4:82:e0:07:02:99:1a:ea:0d:0c:99:56:94:8e:aa:
                    53:e2:63:91:26:b1:90:6e:e4:10:e7:ae:73:89:13:
                    11:3c:03:16:55:b1:b4:e6:05:86:88:b3:c8:d1:7e:
                    02:fd:a5:cb:45:6f:3f:89:5a:c0:b1:66:4f:1f:58:
                    5e:01:b8:05:dc:bf:8d:da:9e:2b:28:5a:88:e7:1f:
                    6e:12:c3:f7:df:52:60:ec:a2:c3:d1:d4:b1:10:a4:
                    7b:f7:65:6a:3f:eb:59:a2:17:8c:aa:e1:58:d2:05:
                    e4:a8:f5:2f:39:41:b1:d4:f4:b6:9a:75:ad:54:18:
                    10:01:55:d4:e1:00:76:7c:64:70:36:c5:ec:e6:9c:
                    1a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F0:CB:BC:76:49:EE:A4:47:43:AE:4A:84:65:1C:4C:9C:B8:31:CA
            X509v3 Authority Key Identifier:
                keyid:3C:2D:F8:EB:7C:1B:D5:02:33:02:F6:11:A9:7E:05:D7:84:17:09:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:61:b8:dd:d3:37:e8:f7:01:b3:58:95:89:4d:77:f5:82:f1:
         63:1b:4a:e6:a9:2e:cf:7c:6c:56:66:7d:5d:5b:fe:9e:c4:90:
         c5:31:a4:96:3e:0a:61:12:6e:92:96:a2:d4:3c:a4:cf:bb:29:
         ea:05:65:eb:cf:33:7e:68:af:b6:df:0c:b8:92:70:9a:1b:24:
         61:57:09:12:6e:c0:c3:eb:9d:92:77:9d:35:ae:58:29:da:56:
         cf:3b:85:80:0d:39:9f:e2:e1:74:a5:9e:e4:e5:8c:80:43:e7:
         9e:d2:97:f1:0c:9f:ef:6c:ff:89:6a:6c:6e:51:08:bb:06:14:
         68:be:a1:bf:ce:67:cc:0b:46:67:0e:49:fe:15:d9:f2:63:16:
         0b:1a:0a:a1:a5:8a:bd:b7:6d:ab:d3:4e:19:ea:c6:ac:43:ea:
         59:22:2c:91:2a:6c:97:df:a2:4e:4d:c3:cb:45:35:1e:e8:dc:
         67:90:4e:8d:d7:90:50:00:24:4a:87:76:91:ae:61:91:fe:cf:
         b1:83:6c:c5:ae:a8:f2:ae:b6:dd:4c:0d:dc:88:bf:2d:ff:16:
         aa:ea:7d:e3:4f:5b:09:d0:0f:6f:d2:74:e1:6d:92:65:b3:af:
         5a:93:c2:cc:36:92:21:72:70:9c:29:e0:08:4c:79:f5:26:d0:
         24:f1:01:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:06:41 2025 by rpki-client