Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft
File:                     psUEnf_CZCcfSnelrurkd9fu6vM.mft (raw, json)
Hash identifier:          8aMjKwy8Ch25uOZyWxp0dq7vCxRyjgCqdO4O7IqJgjA=
Subject key identifier:   CD:22:5F:43:28:4E:A7:5F:47:C9:9E:37:69:75:4F:8F:41:32:F4:E2
Authority key identifier: A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3
Certificate issuer:       /CN=A916683C/serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3
Certificate serial:       0A0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft
Manifest number:          0A00
Signing time:             Wed 20 Aug 2025 19:56:07 +0000
Manifest this update:     Wed 20 Aug 2025 19:56:07 +0000
Manifest next update:     Wed 27 Aug 2025 19:56:07 +0000
Files and hashes:         1: psUEnf_CZCcfSnelrurkd9fu6vM.crl (hash: iPHIfEYbJw7W+l8NPVBJCcedM7ITcpNEWYa0cS/0CmA=)
                          2: 800F1868BEB311EAAFE28B42C4F9AE02.roa (hash: wpAzbtu5F53kU4ooHDJQYR2Sx5W2H0NgT0BgO9+1V88=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.crl
                          rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 19:56:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2571 (0xa0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916683C, serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3
        Validity
            Not Before: Aug 20 19:56:07 2025 GMT
            Not After : Aug 27 19:56:07 2025 GMT
        Subject: CN=68a62857-1ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:45:56:e6:d1:a2:9a:1b:e1:c7:ac:30:02:6e:
                    6b:88:d5:15:25:73:82:b8:7d:bb:03:d9:b2:09:4b:
                    2f:c6:b0:0c:f4:28:ad:9f:c5:c1:6a:ec:c8:5b:0a:
                    3b:fe:14:9c:27:3c:2c:c0:27:13:ad:e0:cd:70:2e:
                    16:81:98:cd:08:a4:d7:8e:1b:94:25:82:6a:b0:55:
                    e2:58:98:ca:92:f2:62:07:fe:55:bf:00:e5:2c:27:
                    6e:69:8e:1e:7f:fc:9e:0d:18:a3:f5:ed:58:b2:b9:
                    bc:12:18:55:cc:fd:8e:bd:48:42:26:65:ab:56:73:
                    dd:bc:99:a1:0f:b8:3b:f7:73:24:bd:79:b5:96:b9:
                    ab:ed:28:af:c2:4a:a8:5b:08:fd:8a:1b:25:44:18:
                    9f:5e:ec:8a:f6:55:65:a7:b5:a3:fc:ae:68:47:6d:
                    4c:fc:fa:c2:7c:72:71:a9:f6:95:ba:d0:23:eb:67:
                    cf:f6:a7:5c:96:67:69:dd:14:4c:dc:c2:6b:24:fa:
                    7d:0f:a7:20:0e:32:1c:b7:6f:02:b8:03:f4:94:c3:
                    de:b8:7a:4f:c3:7c:46:a5:27:4f:09:53:6f:03:d5:
                    6e:0d:e9:65:af:a6:b6:fd:9c:a7:4a:f7:ec:47:26:
                    a7:45:62:06:f9:f1:28:d7:ca:83:88:30:42:ca:0e:
                    8b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:22:5F:43:28:4E:A7:5F:47:C9:9E:37:69:75:4F:8F:41:32:F4:E2
            X509v3 Authority Key Identifier:
                keyid:A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:63:6e:0c:df:a9:86:07:3f:18:a1:6e:a1:0c:2d:55:f2:ff:
         92:d3:90:2f:7e:ad:6d:f0:b3:10:02:07:06:d8:75:39:e5:30:
         c7:72:0c:87:65:7d:56:c7:61:3f:ae:41:02:00:66:0e:76:11:
         48:c3:2b:3a:93:fd:30:c4:25:39:4f:23:f9:82:45:97:74:de:
         17:20:c1:93:19:9a:09:89:ac:50:5b:95:c9:7f:92:bc:c1:a7:
         e6:75:57:6a:71:56:5e:09:03:a6:62:15:2e:64:bf:63:59:3d:
         61:93:72:30:9b:23:dc:76:7e:aa:68:e9:52:55:91:01:66:55:
         bd:73:99:b6:44:92:da:da:29:9e:bd:11:fe:8b:2a:06:50:a0:
         81:9a:7f:0a:ce:98:55:f4:fb:9b:a8:de:2d:e9:fd:3d:91:c4:
         3c:9b:5f:db:5f:e7:c3:a2:d4:25:86:87:ba:95:2a:f3:41:01:
         0c:ef:4f:ca:e7:57:a0:ff:04:23:96:f3:42:d0:21:3c:ca:01:
         cd:73:ef:08:0b:ea:3b:27:7d:45:c5:11:4b:4a:61:09:de:54:
         6d:a7:d2:ff:eb:63:2d:f6:f1:83:8a:48:8e:58:6f:c5:a0:04:
         25:a8:9f:1f:97:11:10:90:89:4c:6d:9c:0b:8a:69:7d:ac:ed:
         5e:fa:58:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:22:28 2025 by rpki-client