Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft
File:                     pLh_nflqIHJhuXtMnjjIO1yA1m4.mft (raw, json)
Hash identifier:          m1QH7sRZxtQapfsx1opDOtoaRXgdOGSSRh69JzrPZVQ=
Subject key identifier:   E8:3B:F9:50:6E:C4:57:E9:22:45:BE:48:46:71:77:3B:F9:4C:1D:1E
Authority key identifier: A4:B8:7F:9D:F9:6A:20:72:61:B9:7B:4C:9E:38:C8:3B:5C:80:D6:6E
Certificate issuer:       /CN=A91BC6A6/serialNumber=A4B87F9DF96A207261B97B4C9E38C83B5C80D66E
Certificate serial:       BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLh_nflqIHJhuXtMnjjIO1yA1m4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft
Manifest number:          B8
Signing time:             Mon 11 Aug 2025 06:10:17 +0000
Manifest this update:     Mon 11 Aug 2025 06:10:17 +0000
Manifest next update:     Mon 18 Aug 2025 06:10:17 +0000
Files and hashes:         1: pLh_nflqIHJhuXtMnjjIO1yA1m4.crl (hash: jHiM61z1paPdmjvtu/EnuBLjQadT8HhBcbc3oCg0Bz4=)
                          2: E2FE5F1C5F3911EF9C33492EC4F9AE02.roa (hash: w7XAoEqzOUn2fN+Z5QNERvhpDDcLRxuYcXrspPvLSME=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.crl
                          rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLh_nflqIHJhuXtMnjjIO1yA1m4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 Aug 2025 06:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC6A6, serialNumber=A4B87F9DF96A207261B97B4C9E38C83B5C80D66E
        Validity
            Not Before: Aug 11 06:10:17 2025 GMT
            Not After : Aug 18 06:10:17 2025 GMT
        Subject: CN=68998949-c431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a4:b5:9c:54:69:3a:76:7d:3b:aa:37:37:2e:
                    7c:c1:cc:23:c5:e6:ae:78:57:f2:9e:3a:ea:74:ae:
                    99:3c:e6:83:ec:30:ef:cc:3a:a7:cd:e8:df:aa:8b:
                    b8:77:45:a7:f1:df:8e:25:43:0e:f8:13:35:e2:3c:
                    3c:84:09:5c:ac:36:cf:90:b8:ca:90:4b:1c:c5:69:
                    28:63:10:b2:93:b8:e9:3d:8d:dd:fd:1b:1b:97:9b:
                    ce:32:80:1b:6d:c6:f0:2d:3f:4e:b7:e0:65:1e:50:
                    e1:8a:ac:e6:1c:d5:1b:bb:a3:3b:01:db:02:4b:9e:
                    a5:a5:bd:f4:69:c8:cb:f0:0a:8c:b5:53:9f:3d:99:
                    27:09:b4:b6:57:43:e3:b6:41:c6:8b:2e:6e:46:ee:
                    ee:a2:0e:cf:74:dd:3f:c0:39:ea:e3:a9:ab:3c:aa:
                    a6:3d:88:7e:fd:c2:c1:43:b5:28:cf:f5:e3:1b:48:
                    a1:8c:83:86:a4:66:08:96:23:4c:3e:6c:45:9e:76:
                    14:a0:9d:15:fe:39:f7:19:df:31:50:6f:ca:64:c9:
                    3c:d6:cf:58:0f:d7:b0:bf:d1:f6:7c:82:1e:ae:7f:
                    90:c5:e0:eb:9a:b2:ef:57:eb:c3:be:cd:ee:c8:4a:
                    bc:d7:95:c4:72:ff:82:79:48:77:b8:4b:d1:18:82:
                    d8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3B:F9:50:6E:C4:57:E9:22:45:BE:48:46:71:77:3B:F9:4C:1D:1E
            X509v3 Authority Key Identifier:
                keyid:A4:B8:7F:9D:F9:6A:20:72:61:B9:7B:4C:9E:38:C8:3B:5C:80:D6:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLh_nflqIHJhuXtMnjjIO1yA1m4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:85:6d:89:e0:51:55:45:70:90:e5:e6:05:51:eb:af:8e:0d:
         4c:b6:d4:f6:78:e4:8e:4d:4e:98:19:db:7e:6e:28:0b:50:ee:
         7c:6b:01:0a:0b:3a:cf:c1:55:a2:f5:8d:23:52:24:2f:df:a3:
         8c:e3:54:cd:5a:62:9e:c5:15:eb:5e:6a:f3:93:60:3b:03:f2:
         b2:5b:50:11:d1:ac:41:c1:0d:5f:07:29:ed:a4:48:6b:64:31:
         88:e9:b7:c4:0e:63:66:73:eb:b3:4c:19:f3:fb:31:16:eb:81:
         80:71:b3:55:b3:b6:b6:13:72:66:40:28:ae:7e:65:41:96:a3:
         35:d4:0b:a2:12:6e:fc:1b:46:e0:b3:52:3c:7a:98:59:3d:0d:
         9e:09:31:73:1d:2e:3e:aa:22:f8:15:c1:e1:9e:15:58:13:24:
         aa:eb:c3:63:80:72:53:c4:85:14:2a:5c:75:f5:29:93:88:e8:
         1d:52:b4:92:8d:c0:b2:85:38:2f:ed:c5:6b:4f:9f:00:15:25:
         22:35:20:35:73:17:91:29:40:0d:b8:96:1c:88:e1:f8:c4:97:
         7e:dd:87:5b:03:07:a8:f8:34:cd:a0:98:ac:66:43:8a:60:cb:
         2f:dc:60:c2:0a:63:cf:eb:75:2d:d2:69:f5:c2:63:57:52:f6:
         01:df:c3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:34:10 2025 by rpki-client