Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
File:                     PByHc0fugnKWNq8POjddORCQ-SE.mft (raw, json)
Hash identifier:          A3bONY7ws7jRJFsztt+dk4Y/4AkWzM6ZxLkbvwotINI=
Subject key identifier:   8E:64:6D:E3:46:9F:74:B3:69:9F:FE:5F:47:E9:A7:24:B1:A3:96:C6
Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
Certificate issuer:       /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Certificate serial:       2CEC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
Manifest number:          2CBB
Signing time:             Wed 02 Jul 2025 15:38:41 +0000
Manifest this update:     Wed 02 Jul 2025 15:38:41 +0000
Manifest next update:     Wed 09 Jul 2025 15:38:41 +0000
Files and hashes:         1: PByHc0fugnKWNq8POjddORCQ-SE.crl (hash: ff/MUJAm/WXW13MyOzLG8OlNkTU1Q57eYMUU0GEVpzY=)
                          2: 5728551C6E9611EF8FEC9C1BC4F9AE02.roa (hash: rd1Y32xkoeiGOMGm6/GALVzy5u2L42RHVTq0ym4rGxc=)
                          3: 14820EDE248611EEB600357DC4F9AE02.roa (hash: pfSrv7ABwA9/SpzKbTS+fYCpaS8uDOGjDIZI4jVwlaM=)
                          4: DE61D0DC2A7311F08DDC6D17C4F9AE02.roa (hash: fo5MHUuRRZ0aet/6odghmGpOjhNAEkaCj7xDRNlqGJo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
                          rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 15:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11500 (0x2cec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA2D5, serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
        Validity
            Not Before: Jul  2 15:38:41 2025 GMT
            Not After : Jul  9 15:38:41 2025 GMT
        Subject: CN=68655281-2d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:39:2c:44:e5:3c:de:44:dc:e2:f3:62:4d:9d:
                    f7:e2:de:5d:84:b1:af:f2:6c:dd:ac:86:3c:d7:3a:
                    6d:72:a7:bd:01:44:d8:a2:a3:40:a6:ca:c3:83:24:
                    ba:29:8f:f4:0d:48:a5:93:a1:50:95:eb:33:ae:7b:
                    89:51:4c:bf:ea:9a:34:b2:af:d4:e7:e8:86:5c:20:
                    0e:3c:dd:ed:8d:3f:29:bf:7f:a5:f5:18:23:22:5f:
                    6d:6f:43:a4:00:a5:d6:33:88:af:01:fd:75:89:22:
                    68:52:34:2f:8b:b6:a6:7b:4d:2f:ed:16:62:5d:e5:
                    3b:cf:c7:e1:c1:56:0f:43:0f:61:88:64:4e:14:04:
                    56:f2:12:02:08:c4:22:da:dd:e0:42:da:ce:4d:33:
                    2e:1f:26:75:d3:ad:ce:8d:dc:8c:05:16:a4:a8:5f:
                    b4:36:b9:e6:57:3e:41:5d:ff:7e:8c:1a:59:03:63:
                    18:c5:5a:80:47:dc:29:41:b9:67:d8:75:0d:2f:db:
                    3d:b7:d3:18:57:c4:71:1c:75:6e:db:6b:98:f4:28:
                    b7:2f:29:65:66:6e:5f:cd:4a:d0:4f:19:b0:ed:cd:
                    a6:5e:d0:f8:4c:b8:6d:f9:13:75:3f:e0:ad:26:09:
                    32:52:e7:ff:e1:07:54:ab:43:52:96:59:aa:d3:96:
                    ba:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:64:6D:E3:46:9F:74:B3:69:9F:FE:5F:47:E9:A7:24:B1:A3:96:C6
            X509v3 Authority Key Identifier:
                keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:5a:ac:3e:c0:55:0e:38:39:e1:db:4f:10:93:10:93:31:37:
         43:cd:1d:8e:e0:3e:89:46:ba:6f:09:bf:65:42:ee:5b:4b:83:
         36:45:82:60:f7:af:4b:d5:29:03:c0:8c:8f:a7:6e:32:26:a4:
         1a:51:ed:81:93:02:03:42:a4:ff:ba:89:36:fa:e8:35:1d:fe:
         e0:6b:3c:ed:eb:c8:7a:60:bd:40:42:e7:c4:ad:ef:e1:2c:34:
         ce:5a:6f:33:89:56:99:9d:93:f2:ed:21:f4:c1:37:0b:82:f0:
         32:5f:5f:30:45:ca:55:f7:ff:f8:e2:04:76:4c:59:7a:e7:c3:
         1a:f3:04:c3:a7:c7:c4:46:51:c7:34:3d:40:a4:54:e4:02:40:
         d1:d8:90:49:23:8a:de:ac:05:b4:7f:f7:95:e3:7e:4b:01:b0:
         0c:d0:41:88:54:69:21:87:37:bf:03:f5:14:83:7d:5b:9c:dc:
         e1:5b:69:64:39:24:ca:e1:4a:2e:f5:41:68:d2:b9:ad:6b:c6:
         4b:50:4d:7d:95:7a:8d:25:c2:5f:0e:7a:24:84:a2:3d:d0:cb:
         47:9b:74:c4:42:93:57:1b:18:d8:30:43:0f:e4:90:98:27:76:
         b1:7d:a3:27:48:87:aa:22:13:30:75:ca:11:c5:c3:38:12:e0:
         89:8f:98:28
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICLOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REEyRDUxMTAvBgNVBAUTKDNDMUM4NzczNDdFRTgyNzI5NjM2QUYwRjNBMzc1RDM5
MTA5MEY5MjEwHhcNMjUwNzAyMTUzODQxWhcNMjUwNzA5MTUzODQxWjAYMRYwFAYD
VQQDEw02ODY1NTI4MS0yZDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4DksROU83kTc4vNiTZ334t5dhLGv8mzdrIY81zptcqe9AUTYoqNApsrDgyS6
KY/0DUilk6FQleszrnuJUUy/6po0sq/U5+iGXCAOPN3tjT8pv3+l9RgjIl9tb0Ok
AKXWM4ivAf11iSJoUjQvi7ame00v7RZiXeU7z8fhwVYPQw9hiGROFARW8hICCMQi
2t3gQtrOTTMuHyZ1063OjdyMBRakqF+0NrnmVz5BXf9+jBpZA2MYxVqAR9wpQbln
2HUNL9s9t9MYV8RxHHVu22uY9Ci3LyllZm5fzUrQTxmw7c2mXtD4TLht+RN1P+Ct
JgkyUuf/4QdUq0NSllmq05a6CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5kbeNG
n3SzaZ/+X0fppySxo5bGMB8GA1UdIwQYMBaAFDwch3NH7oJyljavDzo3XTkQkPkh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTJENS81Rjg2MUVFNkI4
OUExMUUzQjRBQzdFNzg1OTExRUEzMi9QQnlIYzBmdWduS1dOcThQT2pkZE9SQ1Et
U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BCeUhjMGZ1Z25LV05xOFBPamRkT1JDUS1TRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QTJENS81Rjg2MUVFNkI4OUExMUUzQjRBQzdFNzg1OTExRUEzMi9QQnlIYzBmdWdu
S1dOcThQT2pkZE9SQ1EtU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQWqw+wFUOODnh208QkxCTMTdDzR2O4D6JRrpvCb9lQu5bS4M2RYJg
969L1SkDwIyPp24yJqQaUe2BkwIDQqT/uok2+ug1Hf7gazzt68h6YL1AQufEre/h
LDTOWm8ziVaZnZPy7SH0wTcLgvAyX18wRcpV9//44gR2TFl658Ma8wTDp8fERlHH
ND1ApFTkAkDR2JBJI4rerAW0f/eV435LAbAM0EGIVGkhhze/A/UUg31bnNzhW2lk
OSTK4Uou9UFo0rmta8ZLUE19lXqNJcJfDnokhKI90MtHm3TEQpNXGxjYMEMP5JCY
J3axfaMnSIeqIhMwdcoRxcM4EuCJj5go
-----END CERTIFICATE-----
Generated at Thu Jul 3 19:55:14 2025 by rpki-client