Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft
File:                     psue-0_owcTgwvGwDoTH8aL0nG8.mft (raw, json)
Hash identifier:          xMiVOTDTxLAhBB3lo90p11kQrmWhLWL30aeNaxxDRyA=
Subject key identifier:   C8:CC:5A:C0:1C:DA:C8:D4:CB:E1:38:54:BE:A9:F4:8F:9B:51:55:3E
Authority key identifier: A6:CB:9E:FB:4F:E8:C1:C4:E0:C2:F1:B0:0E:84:C7:F1:A2:F4:9C:6F
Certificate issuer:       /CN=A91AEE28/serialNumber=A6CB9EFB4FE8C1C4E0C2F1B00E84C7F1A2F49C6F
Certificate serial:       13D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft
Manifest number:          13C8
Signing time:             Fri 18 Jul 2025 17:06:09 +0000
Manifest this update:     Fri 18 Jul 2025 17:06:08 +0000
Manifest next update:     Fri 25 Jul 2025 17:06:08 +0000
Files and hashes:         1: psue-0_owcTgwvGwDoTH8aL0nG8.crl (hash: G4sH9Qogm4/ywwD7sVWnrJhAORWuKdBrU0wsWmF56r8=)
                          2: 7BD0C11E8C3311EAB2E95132C4F9AE02.roa (hash: SD43F6ndbx8cQg58d8qyQwvKSbxddffft/0WNF7cCQU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.crl
                          rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 17:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5073 (0x13d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEE28, serialNumber=A6CB9EFB4FE8C1C4E0C2F1B00E84C7F1A2F49C6F
        Validity
            Not Before: Jul 18 17:06:08 2025 GMT
            Not After : Jul 25 17:06:08 2025 GMT
        Subject: CN=687a7f00-16ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c1:5c:49:c0:db:87:6b:e0:b2:e2:88:73:20:
                    3f:2a:ac:f1:59:12:f5:07:77:b8:85:a8:8c:98:af:
                    72:21:de:c7:d2:68:46:7a:99:67:7b:4b:6f:0c:85:
                    bb:1c:ec:25:8d:38:5f:b6:09:2a:bd:01:5c:a9:ae:
                    89:90:4b:d1:75:df:50:0b:e1:40:20:23:83:36:43:
                    34:14:9d:87:cf:8e:81:1e:b8:8d:1f:83:01:47:23:
                    8d:09:e9:e4:f3:53:ab:d6:fd:ad:ba:58:bc:d2:43:
                    15:c4:7e:44:19:ca:98:d3:fc:b1:18:bd:7e:b5:a5:
                    40:a1:90:34:09:2f:7e:28:69:52:28:ed:83:d4:d9:
                    2b:f1:87:68:2f:1d:3f:08:c5:8b:4d:43:49:6e:30:
                    ab:dd:18:4f:43:32:81:37:27:95:e7:4b:9d:74:58:
                    41:f7:bb:62:dc:a8:e1:47:15:7b:0d:d5:c0:7a:a6:
                    3d:d4:28:d8:07:5a:3b:a1:88:3d:fb:64:22:be:af:
                    85:7a:93:58:13:5a:ab:02:39:bc:e5:a7:d8:71:67:
                    81:e9:87:d7:b1:fc:a5:48:64:e9:9b:69:1c:74:91:
                    54:1b:4e:db:5a:3b:06:dc:4f:c2:f2:30:9b:2e:8e:
                    c4:7b:52:cd:68:8f:fb:f4:56:28:8d:51:e9:7b:7b:
                    09:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CC:5A:C0:1C:DA:C8:D4:CB:E1:38:54:BE:A9:F4:8F:9B:51:55:3E
            X509v3 Authority Key Identifier:
                keyid:A6:CB:9E:FB:4F:E8:C1:C4:E0:C2:F1:B0:0E:84:C7:F1:A2:F4:9C:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:9f:bc:80:a8:87:52:23:a6:7f:c0:ed:10:27:e4:d7:fa:47:
         6a:2e:6f:e8:6c:d0:e9:1c:16:3b:2b:1d:03:cb:bf:b8:56:f6:
         50:de:43:1d:45:44:ce:52:cb:c0:cf:7f:90:7b:34:74:d4:d5:
         d3:98:de:45:32:b8:c6:42:9d:76:23:11:b7:de:50:61:aa:08:
         09:1b:58:c6:90:5e:71:40:12:8b:d8:07:4f:e1:23:2e:1c:c9:
         f7:20:6a:d2:41:a4:73:79:09:83:1d:fb:57:5a:46:b1:df:90:
         41:db:1b:87:f3:d2:d4:b5:7e:2b:35:3f:6a:9b:1e:3d:7d:45:
         d8:9e:48:fb:8f:a2:67:d1:ea:a0:17:a4:40:0c:10:b5:0d:3f:
         92:e8:0e:61:65:96:99:7c:9d:7f:e2:e2:28:07:59:2a:27:18:
         56:59:06:b6:d2:e3:96:64:6c:04:05:a1:0f:08:cb:d8:5a:4b:
         e2:91:72:a9:c4:1a:fb:d2:f6:af:a8:c6:35:f5:26:c0:3c:5a:
         38:3b:68:b9:38:12:43:03:ea:18:69:a0:f6:ae:2e:b6:da:25:
         8a:cb:cf:11:cb:c4:c9:66:fa:17:7b:40:f2:d2:6a:1f:98:15:
         91:ee:62:c2:f4:08:04:a3:88:16:b8:d5:ae:44:a6:f5:72:ab:
         06:7d:a4:46
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICE9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUVFMjgxMTAvBgNVBAUTKEE2Q0I5RUZCNEZFOEMxQzRFMEMyRjFCMDBFODRDN0Yx
QTJGNDlDNkYwHhcNMjUwNzE4MTcwNjA4WhcNMjUwNzI1MTcwNjA4WjAYMRYwFAYD
VQQDEw02ODdhN2YwMC0xNmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4sFcScDbh2vgsuKIcyA/KqzxWRL1B3e4haiMmK9yId7H0mhGeplne0tvDIW7
HOwljThftgkqvQFcqa6JkEvRdd9QC+FAICODNkM0FJ2Hz46BHriNH4MBRyONCenk
81Or1v2tuli80kMVxH5EGcqY0/yxGL1+taVAoZA0CS9+KGlSKO2D1Nkr8YdoLx0/
CMWLTUNJbjCr3RhPQzKBNyeV50uddFhB97ti3KjhRxV7DdXAeqY91CjYB1o7oYg9
+2Qivq+FepNYE1qrAjm85afYcWeB6YfXsfylSGTpm2kcdJFUG07bWjsG3E/C8jCb
Lo7Ee1LNaI/79FYojVHpe3sJDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjMWsAc
2sjUy+E4VL6p9I+bUVU+MB8GA1UdIwQYMBaAFKbLnvtP6MHE4MLxsA6Ex/Gi9Jxv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUUyOC9GMUIxRkJCMDkw
QzExMUU4QTQ5MzM5N0ZDNEY5QUUwMi9wc3VlLTBfb3djVGd3dkd3RG9USDhhTDBu
RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BzdWUtMF9vd2NUZ3d2R3dEb1RIOGFMMG5HOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RUUyOC9GMUIxRkJCMDkwQzExMUU4QTQ5MzM5N0ZDNEY5QUUwMi9wc3VlLTBfb3dj
VGd3dkd3RG9USDhhTDBuRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAIn7yAqIdSI6Z/wO0QJ+TX+kdqLm/obNDpHBY7Kx0Dy7+4VvZQ3kMd
RUTOUsvAz3+QezR01NXTmN5FMrjGQp12IxG33lBhqggJG1jGkF5xQBKL2AdP4SMu
HMn3IGrSQaRzeQmDHftXWkax35BB2xuH89LUtX4rNT9qmx49fUXYnkj7j6Jn0eqg
F6RADBC1DT+S6A5hZZaZfJ1/4uIoB1kqJxhWWQa20uOWZGwEBaEPCMvYWkvikXKp
xBr70vavqMY19SbAPFo4O2i5OBJDA+oYaaD2ri622iWKy88Ry8TJZvoXe0Dy0mof
mBWR7mLC9AgEo4gWuNWuRKb1cqsGfaRG
-----END CERTIFICATE-----
Generated at Sun Jul 20 07:40:43 2025 by rpki-client