Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
File:                     PC3463wb1QIzAvYRqX4F14QXCTs.mft (raw, json)
Hash identifier:          sA5NrqSory1CZsxkz+PIqy0BTsAOubUidEFWzu8aZGA=
Subject key identifier:   21:64:D6:57:D3:8D:44:A4:DA:55:17:8C:F5:A6:D2:AB:49:E4:4A:2E
Authority key identifier: 3C:2D:F8:EB:7C:1B:D5:02:33:02:F6:11:A9:7E:05:D7:84:17:09:3B
Certificate issuer:       /CN=A91334F0/serialNumber=3C2DF8EB7C1BD5023302F611A97E05D78417093B
Certificate serial:       E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
Manifest number:          E6
Signing time:             Fri 19 Sep 2025 05:59:01 +0000
Manifest this update:     Fri 19 Sep 2025 05:59:01 +0000
Manifest next update:     Fri 26 Sep 2025 05:59:01 +0000
Files and hashes:         1: PC3463wb1QIzAvYRqX4F14QXCTs.crl (hash: dTsVEOTs2n2G/GubB8bhK35YprqiwAKof+Jar0HPSag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.crl
                          rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 05:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91334F0, serialNumber=3C2DF8EB7C1BD5023302F611A97E05D78417093B
        Validity
            Not Before: Sep 19 05:59:01 2025 GMT
            Not After : Sep 26 05:59:01 2025 GMT
        Subject: CN=68ccf125-d9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1b:79:e9:93:0c:3a:59:bb:13:61:64:7a:41:
                    cc:26:fc:51:da:81:30:ea:75:4d:62:2a:62:be:8d:
                    d8:9b:7b:94:fe:ba:51:0c:96:a3:45:60:15:fc:7d:
                    dd:41:73:66:0d:8f:a5:e5:87:de:26:bf:aa:77:41:
                    2f:30:ae:63:2f:f8:0e:0b:69:14:13:53:58:1b:da:
                    c6:b3:a1:da:0c:14:cf:30:64:11:9d:91:74:64:83:
                    3b:67:fb:93:aa:9b:e9:cf:09:0b:75:fd:de:61:e5:
                    97:34:97:e3:ef:92:9c:63:f3:a9:8a:33:f1:97:5b:
                    29:ec:66:78:9f:db:5d:11:21:d2:09:be:65:9a:64:
                    6e:30:bb:4b:37:1e:9d:57:fb:06:2a:8f:f9:3a:e6:
                    03:c5:8c:d9:61:11:b7:2b:a0:03:a6:54:53:87:70:
                    1c:85:cf:f5:3e:9d:6c:e4:a3:2e:77:34:71:32:c2:
                    d9:37:5d:7a:54:86:4e:83:c0:95:fa:48:81:2d:48:
                    f4:e8:fe:8d:3a:ec:d5:b0:39:4f:ee:4e:15:b6:56:
                    20:cf:34:a2:56:82:1c:dc:6c:35:16:93:dd:e7:42:
                    7f:1b:0b:55:28:11:b1:3e:de:dd:6f:c9:42:06:21:
                    7b:69:43:90:79:d3:1c:8f:83:c2:81:b3:2d:5e:87:
                    a5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:64:D6:57:D3:8D:44:A4:DA:55:17:8C:F5:A6:D2:AB:49:E4:4A:2E
            X509v3 Authority Key Identifier:
                keyid:3C:2D:F8:EB:7C:1B:D5:02:33:02:F6:11:A9:7E:05:D7:84:17:09:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:33:b9:92:77:bc:4e:77:e8:28:65:d9:4b:a7:65:15:c5:66:
         02:a6:da:ed:12:d9:8c:3b:05:99:ed:2d:0b:e0:23:bb:2f:84:
         3c:17:8b:cd:35:43:85:37:5e:59:96:0d:26:f6:b0:66:9e:7c:
         ef:1b:fb:f8:35:ba:f9:0f:0a:d5:4c:4e:15:5a:fe:6c:f7:a4:
         19:04:d3:f0:aa:4d:f7:bd:8d:75:ca:ef:40:84:b0:70:28:36:
         83:57:51:35:e1:39:b7:6f:fc:e1:0e:2c:a9:66:a4:25:b3:5f:
         41:d7:d9:3f:7b:91:2f:26:be:dc:0c:16:66:66:07:69:68:12:
         2b:6d:6e:5d:bc:d8:33:df:70:2b:7f:9d:df:ec:b3:af:a3:09:
         8e:90:85:9a:45:29:7b:2f:52:aa:0b:e8:1d:98:24:b0:a6:38:
         a5:80:bf:b6:4a:a3:71:cc:2d:46:f7:8b:b1:28:2d:bc:fa:85:
         6b:e7:03:3b:13:ef:02:a6:3b:28:e9:ea:c3:83:9d:4c:bc:76:
         26:7d:d4:ca:43:16:3b:37:1a:5d:27:3e:73:92:d2:76:e5:77:
         3a:5e:2d:42:ce:e1:f4:94:ab:d1:ce:8c:83:fd:aa:72:74:d1:
         75:0d:36:9f:02:1a:70:1b:81:35:fc:47:34:64:3f:c6:8d:8e:
         d2:79:4d:76
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzM0RjAxMTAvBgNVBAUTKDNDMkRGOEVCN0MxQkQ1MDIzMzAyRjYxMUE5N0UwNUQ3
ODQxNzA5M0IwHhcNMjUwOTE5MDU1OTAxWhcNMjUwOTI2MDU1OTAxWjAYMRYwFAYD
VQQDEw02OGNjZjEyNS1kOWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2xt56ZMMOlm7E2FkekHMJvxR2oEw6nVNYipivo3Ym3uU/rpRDJajRWAV/H3d
QXNmDY+l5YfeJr+qd0EvMK5jL/gOC2kUE1NYG9rGs6HaDBTPMGQRnZF0ZIM7Z/uT
qpvpzwkLdf3eYeWXNJfj75KcY/OpijPxl1sp7GZ4n9tdESHSCb5lmmRuMLtLNx6d
V/sGKo/5OuYDxYzZYRG3K6ADplRTh3Achc/1Pp1s5KMudzRxMsLZN116VIZOg8CV
+kiBLUj06P6NOuzVsDlP7k4VtlYgzzSiVoIc3Gw1FpPd50J/GwtVKBGxPt7db8lC
BiF7aUOQedMcj4PCgbMtXoel7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCFk1lfT
jUSk2lUXjPWm0qtJ5EouMB8GA1UdIwQYMBaAFDwt+Ot8G9UCMwL2Eal+BdeEFwk7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzRGMC8xNjBDQUIzQTM0
MDAxMUVGOTQ3Nzk1NDBDNEY5QUUwMi9QQzM0NjN3YjFRSXpBdllScVg0RjE0UVhD
VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BDMzQ2M3diMVFJekF2WVJxWDRGMTRRWENUcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MzRGMC8xNjBDQUIzQTM0MDAxMUVGOTQ3Nzk1NDBDNEY5QUUwMi9QQzM0NjN3YjFR
SXpBdllScVg0RjE0UVhDVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDLM7mSd7xOd+goZdlLp2UVxWYCptrtEtmMOwWZ7S0L4CO7L4Q8F4vN
NUOFN15Zlg0m9rBmnnzvG/v4Nbr5DwrVTE4VWv5s96QZBNPwqk33vY11yu9AhLBw
KDaDV1E14Tm3b/zhDiypZqQls19B19k/e5EvJr7cDBZmZgdpaBIrbW5dvNgz33Ar
f53f7LOvowmOkIWaRSl7L1KqC+gdmCSwpjilgL+2SqNxzC1G94uxKC28+oVr5wM7
E+8Cpjso6erDg51MvHYmfdTKQxY7NxpdJz5zktJ25Xc6Xi1CzuH0lKvRzoyD/apy
dNF1DTafAhpwG4E1/Ec0ZD/GjY7SeU12
-----END CERTIFICATE-----
Generated at Fri Sep 19 09:23:13 2025 by rpki-client