Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
File:                     PuJvukvjWd6uUAeS6_940ArLdgw.mft (raw, json)
Hash identifier:          opVd7x7lZHwolulVNNNPRcv/NoVtt1YQS+zNUnrXsxc=
Subject key identifier:   15:5E:54:B1:49:E1:47:D1:14:81:16:C0:D2:F4:6D:22:46:8C:EC:A1
Authority key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C
Certificate issuer:       /CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C
Certificate serial:       0415
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
Manifest number:          0406
Signing time:             Sat 23 Aug 2025 00:40:15 +0000
Manifest this update:     Sat 23 Aug 2025 00:40:15 +0000
Manifest next update:     Sat 30 Aug 2025 00:40:15 +0000
Files and hashes:         1: PuJvukvjWd6uUAeS6_940ArLdgw.crl (hash: lpP5kxarjk5rD5V13JwgsYKCnO5NIuseMv8X3iDbdcE=)
                          2: 0A4D6250833411ECBB74C786C4F9AE02.roa (hash: 6+2Lk4Xai3HUwAmjg8bW8UOOypYan1IgfWd2mzH9/MA=)
                          3: 0AE155E6833411ECBB74C786C4F9AE02.roa (hash: P2hgHU8XOvbHIrBabwcVzNSzMatmcwCF4tAzz5uDO10=)
                          4: 09B62A48833411ECBB74C786C4F9AE02.roa (hash: 4y99R2661TzfOkabp7/pgfm0pWxC4+jDx6PFu0Fa6p8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl
                          rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 00:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1045 (0x415)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91596C4, serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C
        Validity
            Not Before: Aug 23 00:40:15 2025 GMT
            Not After : Aug 30 00:40:15 2025 GMT
        Subject: CN=68a90def-6169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f4:5f:e7:2e:c5:d3:63:18:d4:ef:6c:06:66:
                    63:27:a5:76:2a:e9:79:ee:ea:67:bb:a2:05:3c:86:
                    8b:92:73:3e:5a:ee:b4:f4:13:1f:56:5c:f1:c0:d6:
                    e6:b4:1f:7b:da:bf:04:f2:63:9b:2f:ed:a1:69:4b:
                    75:32:a3:91:aa:28:18:af:cf:f9:c3:b2:69:a2:ff:
                    2b:8b:42:6b:2a:85:f2:3d:ed:e5:e6:72:93:59:87:
                    0b:77:95:f0:b5:d6:80:0a:c0:f1:42:49:a8:ee:df:
                    c4:71:c8:65:3f:63:df:70:3c:38:83:48:13:23:20:
                    82:85:24:05:76:ca:5e:5c:df:21:d8:b4:ea:49:9f:
                    9c:25:f8:cf:35:bb:e0:29:69:19:da:2f:35:64:a3:
                    53:39:6b:13:02:f6:3c:07:00:24:df:7e:a3:b4:95:
                    41:4c:b6:74:46:a5:93:22:1a:65:2d:34:53:48:06:
                    a1:d5:2e:0d:b5:19:79:8b:47:3b:4f:96:20:a9:e5:
                    f3:fb:02:ab:df:78:82:b6:6d:fe:c1:4a:35:3a:2f:
                    91:1a:05:af:6b:1b:16:e0:ac:ab:5f:e0:04:63:ba:
                    62:2e:84:2c:d5:2f:d3:ea:61:9f:fb:5e:a1:32:51:
                    49:29:cb:b7:e7:9c:67:00:d8:12:82:fa:4f:9c:22:
                    75:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5E:54:B1:49:E1:47:D1:14:81:16:C0:D2:F4:6D:22:46:8C:EC:A1
            X509v3 Authority Key Identifier:
                keyid:3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:62:fd:d1:86:5b:ed:b9:4d:f1:22:79:cb:e7:82:31:11:46:
         9e:d1:44:4b:eb:ed:45:fe:5e:93:81:30:15:f5:4f:9b:f0:bc:
         ed:1c:1a:db:b0:f4:2b:de:5f:aa:c0:44:a4:9b:e8:d1:62:27:
         58:ea:8f:7e:ef:fb:ad:a2:2a:80:1a:f3:c0:79:9e:ea:b3:a6:
         a5:dc:f9:63:50:80:48:e8:7f:22:12:d9:7b:85:9d:57:71:47:
         ab:69:41:2c:c0:ed:79:d6:da:00:5e:69:2c:7d:44:93:e9:fa:
         d0:9d:89:9e:d6:7d:ad:01:15:c2:37:02:76:dd:63:14:fa:ff:
         48:84:d3:05:11:09:bd:34:79:c6:84:2c:d5:82:c9:e2:5e:b6:
         00:4f:26:ac:32:dd:7e:dd:c3:62:62:3f:6f:81:68:8c:96:70:
         76:8c:22:66:15:41:d4:5f:56:1a:68:be:e3:d8:05:52:b1:39:
         12:b5:ec:35:94:6c:87:10:2b:2a:82:cf:fd:58:76:33:d5:9a:
         dc:6b:cd:be:c8:97:3d:c2:b9:5e:e0:ae:df:62:39:02:f7:69:
         c3:81:23:13:1c:45:08:6c:2c:61:bc:91:09:18:b1:3d:9b:f4:
         92:72:41:39:cd:78:71:14:0e:33:e5:19:2c:87:de:b3:87:89:
         fa:29:01:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:30:05 2025 by rpki-client