Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft
File:                     P32buu18W_27o6NJq-lrIa0n2mc.mft (raw, json)
Hash identifier:          +750Q7upnpL2RWa1o1INEzAZj3FcYFSMQr3FMO5vnS8=
Subject key identifier:   EA:EF:E5:85:89:A0:86:9D:F5:96:1B:E3:99:40:1E:07:7B:72:90:32
Authority key identifier: 3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67
Certificate issuer:       /CN=A91C4D8E/serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67
Certificate serial:       0C76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft
Manifest number:          0C6D
Signing time:             Fri 22 Aug 2025 18:32:38 +0000
Manifest this update:     Fri 22 Aug 2025 18:32:38 +0000
Manifest next update:     Fri 29 Aug 2025 18:32:38 +0000
Files and hashes:         1: P32buu18W_27o6NJq-lrIa0n2mc.crl (hash: BhqOfMiW6SIdJJVr61h3tRr7C0iFuIW1aVSmwv11DQc=)
                          2: C9FF2A7E06A511EAA1FFDB3DC4F9AE02.roa (hash: 78Vf6/fB7sknA1Wt2VtN9AZj7sBbXgPyMuxI8cL1zlU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl
                          rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 18:32:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3190 (0xc76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4D8E, serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67
        Validity
            Not Before: Aug 22 18:32:38 2025 GMT
            Not After : Aug 29 18:32:38 2025 GMT
        Subject: CN=68a8b7c6-39eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6a:55:ab:82:69:5b:37:ba:34:c6:84:cf:f6:
                    ec:c8:19:37:b0:23:72:88:f9:13:20:c5:d8:31:47:
                    db:d6:7a:36:3c:b9:4c:f0:cf:94:03:06:5b:b7:7f:
                    a3:14:e6:18:2d:ff:0f:52:15:4c:cf:04:a6:56:4c:
                    44:40:14:a2:dc:98:18:08:c7:6c:3e:dc:84:6e:57:
                    51:ed:41:2c:5a:f5:6d:9b:55:aa:66:d1:8d:12:36:
                    f4:71:5d:2c:a5:6a:56:16:17:45:d0:02:23:9d:a3:
                    bf:5b:6e:dd:64:6e:03:5e:98:90:fe:9d:da:91:2a:
                    e6:08:5f:89:76:28:60:4b:95:c8:9a:d9:ca:ef:af:
                    81:4f:0a:e3:ed:d1:fb:c2:49:ba:3f:72:ef:da:be:
                    e9:b9:d0:c5:b0:34:93:4e:b1:f6:c7:c3:99:71:48:
                    5e:85:9c:55:fe:07:e2:97:1a:fa:24:76:de:be:04:
                    c9:69:92:7a:05:39:67:b3:95:6a:43:82:ce:dc:a5:
                    ac:0b:e6:7d:2c:4d:49:9a:6a:79:cf:02:b3:14:e8:
                    49:55:3b:b1:50:42:cf:ae:a2:5c:4c:51:0e:88:85:
                    7f:f8:aa:22:5e:3f:22:a6:ec:c4:20:bd:e1:93:5e:
                    03:d5:0d:4b:33:0c:b8:7e:29:54:6f:2f:c6:51:ba:
                    1d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:EF:E5:85:89:A0:86:9D:F5:96:1B:E3:99:40:1E:07:7B:72:90:32
            X509v3 Authority Key Identifier:
                keyid:3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:93:ba:22:82:9f:bb:cf:4a:be:46:c9:93:47:f3:c1:1a:d2:
         50:a4:fb:73:bb:2f:07:0a:26:9b:02:2a:9d:7c:47:ae:51:54:
         0e:f3:64:4f:9b:c6:e4:04:bf:59:fb:b0:69:ee:50:bf:00:fc:
         58:aa:fb:a4:7b:7a:6e:9a:49:2d:5d:79:b2:ec:e4:8d:4f:6a:
         0a:7f:1f:af:c1:e8:ff:a4:44:68:90:f1:d1:98:72:10:dd:f1:
         19:99:20:c5:7c:1c:04:42:1c:f0:d9:bc:39:ad:d1:46:b9:a0:
         7b:87:1e:d9:42:45:6c:94:1b:53:27:ac:c3:3b:cd:8f:e1:93:
         da:d5:80:d8:35:4f:92:57:71:b8:89:a8:09:57:e8:c3:11:3c:
         5e:59:d3:c2:46:95:16:4e:bf:94:0b:96:38:33:32:61:a0:64:
         f7:cf:73:35:f4:94:a4:dc:09:dd:52:b3:93:91:67:e9:e9:58:
         8a:1c:63:12:79:36:6e:0f:3e:9b:d0:94:76:41:8c:e6:c8:ee:
         97:bb:13:2e:be:00:71:79:bd:5c:5e:a5:6a:0f:96:c7:a4:e9:
         14:0d:46:4a:13:a7:c7:bd:1c:da:1f:de:24:73:9f:10:16:6d:
         8e:f5:23:73:d6:24:9e:e3:13:3d:2f:70:95:a4:10:e6:14:1a:
         63:3e:cc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:17:06 2025 by rpki-client