Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft
File:                     psue-0_owcTgwvGwDoTH8aL0nG8.mft (raw, json)
Hash identifier:          898kU+9yAWOatLYk5ZzXoOQLHRDRgmn/tdI1dQqhUYk=
Subject key identifier:   41:F6:7F:68:8F:D5:03:79:57:66:8A:6A:0E:2B:06:A4:5F:19:C2:B3
Authority key identifier: A6:CB:9E:FB:4F:E8:C1:C4:E0:C2:F1:B0:0E:84:C7:F1:A2:F4:9C:6F
Certificate issuer:       /CN=A91AEE28/serialNumber=A6CB9EFB4FE8C1C4E0C2F1B00E84C7F1A2F49C6F
Certificate serial:       13E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft
Manifest number:          13DA
Signing time:             Fri 22 Aug 2025 17:04:19 +0000
Manifest this update:     Fri 22 Aug 2025 17:04:19 +0000
Manifest next update:     Fri 29 Aug 2025 17:04:19 +0000
Files and hashes:         1: psue-0_owcTgwvGwDoTH8aL0nG8.crl (hash: Tk6OkMmWz1v8EYRHsj5BOwNeE7Y03t5OYdANFX3f/TA=)
                          2: 7BD0C11E8C3311EAB2E95132C4F9AE02.roa (hash: SD43F6ndbx8cQg58d8qyQwvKSbxddffft/0WNF7cCQU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.crl
                          rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:04:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5091 (0x13e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEE28, serialNumber=A6CB9EFB4FE8C1C4E0C2F1B00E84C7F1A2F49C6F
        Validity
            Not Before: Aug 22 17:04:19 2025 GMT
            Not After : Aug 29 17:04:19 2025 GMT
        Subject: CN=68a8a313-6564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:07:f0:7f:a8:e0:60:09:0c:76:47:c8:7c:6f:
                    e8:7f:0b:f0:82:b0:d8:59:b5:72:b4:1b:14:26:58:
                    98:3c:4c:74:e7:13:18:18:58:72:cf:a3:9e:fe:59:
                    c4:eb:3a:6d:a6:c4:23:82:d0:76:fe:c0:b1:86:8c:
                    57:07:1d:c9:8c:24:63:5c:2a:d8:f2:6f:04:af:a4:
                    56:ae:de:28:c0:74:11:3b:b3:96:56:18:75:9c:01:
                    47:27:dc:50:c0:2a:d2:2e:a8:01:af:60:1e:1c:e2:
                    6a:50:84:04:65:bd:b3:47:a9:ce:88:da:25:58:e3:
                    69:22:66:0f:70:86:ee:96:69:5e:2d:6f:1a:e2:2e:
                    a5:49:42:92:2b:dd:3e:0c:43:44:82:74:72:61:cd:
                    7d:02:b6:21:3e:4a:98:bc:68:7e:7b:15:a4:45:df:
                    3e:71:90:7f:7f:3e:c8:51:82:b6:66:04:e6:58:93:
                    bf:73:bb:ec:f8:4a:ff:3a:59:30:72:26:33:96:47:
                    ac:c7:d2:b6:bf:ce:bf:23:34:ad:1c:8a:ab:d8:02:
                    49:a1:48:82:55:26:76:17:82:5a:10:00:35:44:60:
                    6f:c4:32:88:b6:8c:16:e1:38:f3:d4:5b:f7:d6:5f:
                    2a:30:b1:ae:e6:a3:08:77:63:32:de:8a:b5:78:21:
                    a6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F6:7F:68:8F:D5:03:79:57:66:8A:6A:0E:2B:06:A4:5F:19:C2:B3
            X509v3 Authority Key Identifier:
                keyid:A6:CB:9E:FB:4F:E8:C1:C4:E0:C2:F1:B0:0E:84:C7:F1:A2:F4:9C:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:bc:41:5e:d2:6a:1e:e7:76:66:48:2d:dd:c8:bf:1d:70:39:
         a7:ca:d5:6c:31:4a:e2:ee:e1:c7:83:14:54:e1:1c:0b:c6:20:
         11:ed:f5:4c:7d:5e:fe:13:f2:86:a6:16:42:43:d4:52:a3:15:
         b0:4c:8c:41:5a:ef:a8:57:d1:fa:d0:51:d1:8e:e6:f5:ec:2e:
         ea:7f:fd:be:5d:65:34:40:ed:bc:af:55:a0:cb:d4:92:38:bb:
         49:99:98:86:5a:78:08:71:50:ef:87:f0:0d:62:b3:b6:1e:83:
         bb:30:18:7a:e9:8c:8f:38:e3:5d:66:ff:cf:d1:f2:e9:1b:76:
         82:cb:3e:70:a9:0f:ec:75:c1:c2:01:0f:1c:c2:46:65:34:4f:
         01:77:19:b0:5d:57:78:a0:d3:32:1e:ed:f4:a2:45:70:53:38:
         eb:4b:2a:21:7a:44:5f:ec:e2:25:9b:dc:2e:d6:cd:30:55:98:
         dd:dc:3c:4b:7f:ac:ca:da:9e:ae:06:78:f9:e8:31:0f:e5:9c:
         ea:1a:44:91:07:70:94:27:05:8b:a4:31:8b:c9:5e:16:22:ed:
         2e:49:df:b4:a5:1c:37:47:12:a9:60:66:f4:51:d8:1e:eb:35:
         cc:fb:f4:ae:36:ac:2e:60:93:22:3b:c9:93:54:a7:43:fb:94:
         da:a7:1c:18
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICE+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUVFMjgxMTAvBgNVBAUTKEE2Q0I5RUZCNEZFOEMxQzRFMEMyRjFCMDBFODRDN0Yx
QTJGNDlDNkYwHhcNMjUwODIyMTcwNDE5WhcNMjUwODI5MTcwNDE5WjAYMRYwFAYD
VQQDEw02OGE4YTMxMy02NTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwQfwf6jgYAkMdkfIfG/ofwvwgrDYWbVytBsUJliYPEx05xMYGFhyz6Oe/lnE
6zptpsQjgtB2/sCxhoxXBx3JjCRjXCrY8m8Er6RWrt4owHQRO7OWVhh1nAFHJ9xQ
wCrSLqgBr2AeHOJqUIQEZb2zR6nOiNolWONpImYPcIbulmleLW8a4i6lSUKSK90+
DENEgnRyYc19ArYhPkqYvGh+exWkRd8+cZB/fz7IUYK2ZgTmWJO/c7vs+Er/Olkw
ciYzlkesx9K2v86/IzStHIqr2AJJoUiCVSZ2F4JaEAA1RGBvxDKItowW4Tjz1Fv3
1l8qMLGu5qMId2My3oq1eCGmkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEH2f2iP
1QN5V2aKag4rBqRfGcKzMB8GA1UdIwQYMBaAFKbLnvtP6MHE4MLxsA6Ex/Gi9Jxv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUUyOC9GMUIxRkJCMDkw
QzExMUU4QTQ5MzM5N0ZDNEY5QUUwMi9wc3VlLTBfb3djVGd3dkd3RG9USDhhTDBu
RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BzdWUtMF9vd2NUZ3d2R3dEb1RIOGFMMG5HOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RUUyOC9GMUIxRkJCMDkwQzExMUU4QTQ5MzM5N0ZDNEY5QUUwMi9wc3VlLTBfb3dj
VGd3dkd3RG9USDhhTDBuRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBHvEFe0moe53ZmSC3dyL8dcDmnytVsMUri7uHHgxRU4RwLxiAR7fVM
fV7+E/KGphZCQ9RSoxWwTIxBWu+oV9H60FHRjub17C7qf/2+XWU0QO28r1Wgy9SS
OLtJmZiGWngIcVDvh/ANYrO2HoO7MBh66YyPOONdZv/P0fLpG3aCyz5wqQ/sdcHC
AQ8cwkZlNE8BdxmwXVd4oNMyHu30okVwUzjrSyohekRf7OIlm9wu1s0wVZjd3DxL
f6zK2p6uBnj56DEP5ZzqGkSRB3CUJwWLpDGLyV4WIu0uSd+0pRw3RxKpYGb0Udge
6zXM+/SuNqwuYJMiO8mTVKdD+5TapxwY
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:10:50 2025 by rpki-client