Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
File:                     PByHc0fugnKWNq8POjddORCQ-SE.mft (raw, json)
Hash identifier:          Z8MCVsJmKqHqoXb1D+SxFasN7x6VbpIBAvb1YfcHOts=
Subject key identifier:   9A:35:A7:D5:7F:93:EC:23:64:CB:23:86:E1:A4:6C:5C:95:02:DF:F1
Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
Certificate issuer:       /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Certificate serial:       2D04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
Manifest number:          2CD1
Signing time:             Fri 08 Aug 2025 15:35:12 +0000
Manifest this update:     Fri 08 Aug 2025 15:35:11 +0000
Manifest next update:     Fri 15 Aug 2025 15:35:11 +0000
Files and hashes:         1: PByHc0fugnKWNq8POjddORCQ-SE.crl (hash: QnI2RzKvxnQNS21Iam0+l76egHg9TBWvO0CiIWGGHgY=)
                          2: 5728551C6E9611EF8FEC9C1BC4F9AE02.roa (hash: rd1Y32xkoeiGOMGm6/GALVzy5u2L42RHVTq0ym4rGxc=)
                          3: 14820EDE248611EEB600357DC4F9AE02.roa (hash: pfSrv7ABwA9/SpzKbTS+fYCpaS8uDOGjDIZI4jVwlaM=)
                          4: DE61D0DC2A7311F08DDC6D17C4F9AE02.roa (hash: EH3KOVhO+p9xGSMvIHUrJUleuaQ1FPNW3sUdbyMtTPc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
                          rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11524 (0x2d04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA2D5, serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
        Validity
            Not Before: Aug  8 15:35:11 2025 GMT
            Not After : Aug 15 15:35:11 2025 GMT
        Subject: CN=6896192f-71bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:08:3d:5b:71:41:85:1c:1a:23:ff:83:06:
                    fe:d9:73:11:20:62:7c:60:3d:cc:47:25:b4:71:3d:
                    ec:3f:ef:4d:a5:db:44:13:e9:a6:a5:3e:83:bd:90:
                    5c:7c:66:5f:7e:bc:8f:97:16:c9:01:76:c0:be:08:
                    81:97:49:df:7b:4c:1d:e4:93:b9:32:a7:e0:09:9f:
                    02:77:b2:e9:8f:ec:c8:23:6f:02:bb:21:78:75:de:
                    e9:1c:03:11:c9:af:ab:d7:58:e7:88:42:8f:b1:25:
                    12:f7:a8:b3:18:f7:1c:74:96:26:8e:31:db:f2:61:
                    22:f2:f7:2a:47:de:66:29:f0:fe:20:0c:2d:c4:cf:
                    e4:b0:4b:e6:76:bf:9b:82:4e:eb:2f:81:5d:87:83:
                    45:e6:bd:0b:04:e5:ca:39:90:24:35:73:e7:d8:06:
                    38:4e:1c:75:37:e9:ac:bf:2e:0c:81:65:74:e3:b0:
                    c6:3c:b7:4f:a6:7c:99:da:e4:cb:cf:1d:c9:3d:17:
                    a8:10:f4:8c:c4:a9:6c:23:f2:81:5e:b8:b7:2c:74:
                    ab:79:1f:c5:7f:6a:dd:72:a9:50:aa:05:49:7a:d9:
                    b1:3c:d1:34:e4:c9:2c:cf:ba:8d:88:fb:6a:af:67:
                    da:ee:d4:a0:28:04:f1:00:b6:0a:e1:0c:9c:39:ac:
                    cd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:35:A7:D5:7F:93:EC:23:64:CB:23:86:E1:A4:6C:5C:95:02:DF:F1
            X509v3 Authority Key Identifier:
                keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c5:12:41:b9:20:b5:d2:48:82:dd:f9:0b:7f:3c:74:d6:a8:
         31:2f:e4:17:d0:f8:47:69:32:eb:46:16:7a:a4:ca:3d:b6:c5:
         1f:b7:16:10:6d:73:ad:1b:37:10:8b:b4:29:70:68:c2:d1:7e:
         1e:39:f8:55:e7:75:cc:6b:fd:69:cd:5a:95:ac:70:06:2c:d7:
         96:f9:38:9f:8d:c4:f8:60:ff:ae:d9:4c:11:5f:cf:aa:fc:48:
         04:b2:45:a1:02:c3:88:32:26:a7:82:80:e1:5f:8d:7d:92:46:
         ec:72:00:db:68:a9:d7:25:0c:c4:a7:c5:0e:1c:50:dd:05:f9:
         ae:7a:52:e0:35:a6:31:ff:67:6a:20:4a:3b:27:a8:ed:91:6b:
         b2:b3:88:9d:a1:7e:28:b9:41:bc:0c:7b:01:b5:f7:d6:1f:55:
         59:8c:72:0c:3f:50:cd:b8:70:5c:ea:19:c6:a8:db:9a:0f:7f:
         24:b2:18:66:f6:9b:9c:ab:89:61:b0:42:45:0d:c0:65:83:0c:
         47:3f:55:2c:2a:e0:27:77:b1:07:4e:f8:fd:d7:0a:f7:bb:92:
         00:b6:f0:1b:a4:c2:fd:86:ea:37:b7:c5:14:89:98:4b:0c:50:
         69:47:36:fc:f3:3c:e3:dd:75:d8:2f:f4:80:2d:35:8f:62:c2:
         dd:06:c6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:48:54 2025 by rpki-client