Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
File:                     PByHc0fugnKWNq8POjddORCQ-SE.mft (raw, json)
Hash identifier:          rCUKc/r/3l8MTcFgjhv1oOIGNX3gmi2Jm4SOO7GYrdc=
Subject key identifier:   91:5E:4C:8D:55:33:8D:91:16:A8:52:5E:F8:8E:23:92:C9:D1:F2:F6
Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
Certificate issuer:       /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Certificate serial:       2D0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
Manifest number:          2CD8
Signing time:             Fri 22 Aug 2025 15:34:34 +0000
Manifest this update:     Fri 22 Aug 2025 15:34:33 +0000
Manifest next update:     Fri 29 Aug 2025 15:34:33 +0000
Files and hashes:         1: PByHc0fugnKWNq8POjddORCQ-SE.crl (hash: 84ZQSIuKdrMfIjwniJ8/hrPY8TpPKOQXHzg4LaULCBk=)
                          2: 5728551C6E9611EF8FEC9C1BC4F9AE02.roa (hash: rd1Y32xkoeiGOMGm6/GALVzy5u2L42RHVTq0ym4rGxc=)
                          3: 14820EDE248611EEB600357DC4F9AE02.roa (hash: pfSrv7ABwA9/SpzKbTS+fYCpaS8uDOGjDIZI4jVwlaM=)
                          4: DE61D0DC2A7311F08DDC6D17C4F9AE02.roa (hash: EH3KOVhO+p9xGSMvIHUrJUleuaQ1FPNW3sUdbyMtTPc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
                          rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 15:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11531 (0x2d0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA2D5, serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
        Validity
            Not Before: Aug 22 15:34:33 2025 GMT
            Not After : Aug 29 15:34:33 2025 GMT
        Subject: CN=68a88e09-cada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:41:c2:95:cd:b8:b7:df:71:42:a9:06:ee:d2:
                    fd:5f:ca:f3:34:82:fd:8f:bd:38:d6:d9:3e:99:fb:
                    75:eb:b6:7a:c1:70:fc:4b:6d:e2:0b:ab:af:10:59:
                    3b:9d:f5:d5:57:87:01:97:6e:e2:21:e7:a9:9d:58:
                    4f:90:8b:e3:d7:12:b7:c5:c7:1d:05:87:7e:4d:c7:
                    4e:5e:16:02:de:f9:fc:c5:65:cf:a5:7f:16:5c:bd:
                    be:8a:8b:85:7e:b1:d0:c9:f1:84:a7:a9:30:93:b7:
                    ee:6f:84:51:93:8a:e4:c6:8b:16:5d:4d:ab:30:5c:
                    13:77:62:53:9b:86:f4:5c:6b:f2:00:ab:e1:d1:25:
                    f3:11:e4:5a:cf:6c:50:b0:5d:67:b1:8c:47:24:11:
                    e2:b6:90:91:d1:eb:cd:11:29:60:87:d3:98:da:18:
                    8a:e5:40:83:e6:cc:c5:20:42:56:a9:f8:5f:89:d3:
                    06:a8:f0:50:74:c9:18:42:03:db:ae:dc:ac:04:d5:
                    7f:ab:ba:67:4d:24:70:95:36:f8:51:ab:19:f9:33:
                    09:70:b8:c5:c2:88:f0:6b:07:cc:fd:17:d3:56:4e:
                    73:bb:43:c6:1c:28:9b:b2:11:76:ae:f9:b8:c0:40:
                    7f:9d:8f:b1:40:d9:2e:17:ef:ab:3c:b3:58:70:04:
                    0a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5E:4C:8D:55:33:8D:91:16:A8:52:5E:F8:8E:23:92:C9:D1:F2:F6
            X509v3 Authority Key Identifier:
                keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:1e:aa:09:6f:43:e0:54:48:12:0f:e2:1d:a7:19:cf:c5:61:
         33:a4:36:18:fd:c2:db:1f:82:d6:19:d1:38:b3:79:2b:2f:f2:
         1c:31:5b:3e:a9:2f:8b:43:4c:56:14:c1:e5:5a:58:03:fc:f2:
         7b:73:7a:07:f3:58:68:4d:de:30:25:ad:ba:55:11:3f:48:79:
         bc:ab:34:f3:2f:4e:7d:53:8c:eb:01:d5:5b:a8:f9:06:cc:9c:
         99:a4:02:6b:a0:1f:db:5d:e4:e6:ac:13:6e:a6:32:44:1b:16:
         d4:a1:80:fe:48:1f:54:55:f0:e6:cf:72:60:01:1b:65:d3:31:
         ef:ed:f7:10:ff:7b:c5:69:22:82:d7:15:4f:8b:c3:a0:b3:2d:
         de:f2:c5:67:7e:03:55:94:e9:fd:e9:4e:a1:02:38:a6:91:c7:
         a0:1c:ef:45:60:88:e2:d6:92:f5:d9:df:8f:ad:11:b8:81:a0:
         94:6e:e4:ef:71:6a:45:0d:2c:73:cd:f6:71:ad:14:e9:1a:04:
         66:32:1c:0f:02:d5:7e:06:8e:70:94:a6:96:6a:6e:65:77:0f:
         8b:77:6d:78:42:94:3a:76:4b:26:38:50:e4:f3:47:29:46:cb:
         4b:c4:fc:05:8e:e5:21:25:7b:57:5d:b4:ae:dd:9c:35:a0:0d:
         86:d7:d9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:08:26 2025 by rpki-client