Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft
File:                     PeqLG7hy3RJspkfMN1wgdgJAw4U.mft (raw, json)
Hash identifier:          jP/ceWr56E75awOsJ80r+P1Kq+dq3OjUoSBj3SWsxuk=
Subject key identifier:   15:03:29:4B:CB:52:9E:6C:8D:F6:7A:59:DA:A6:84:AD:C2:96:33:84
Authority key identifier: 3D:EA:8B:1B:B8:72:DD:12:6C:A6:47:CC:37:5C:20:76:02:40:C3:85
Certificate issuer:       /CN=A918F0E2/serialNumber=3DEA8B1BB872DD126CA647CC375C20760240C385
Certificate serial:       92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PeqLG7hy3RJspkfMN1wgdgJAw4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft
Manifest number:          91
Signing time:             Thu 21 Aug 2025 06:41:33 +0000
Manifest this update:     Thu 21 Aug 2025 06:41:33 +0000
Manifest next update:     Thu 28 Aug 2025 06:41:33 +0000
Files and hashes:         1: PeqLG7hy3RJspkfMN1wgdgJAw4U.crl (hash: R+kUElfWphODb1ihFkFx7O+594NdNnx52n4pQPqPJNg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.crl
                          rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PeqLG7hy3RJspkfMN1wgdgJAw4U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Aug 2025 06:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F0E2, serialNumber=3DEA8B1BB872DD126CA647CC375C20760240C385
        Validity
            Not Before: Aug 21 06:41:33 2025 GMT
            Not After : Aug 28 06:41:33 2025 GMT
        Subject: CN=68a6bf9d-f618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4e:22:69:5b:c0:4d:5f:93:94:f2:af:06:bc:
                    c5:fc:c0:e5:17:65:5e:9e:49:30:be:ab:14:ed:aa:
                    29:08:e7:7c:a1:da:3e:ba:39:77:1f:dc:72:82:03:
                    69:a1:ee:0c:ad:e7:64:1e:cc:f0:ce:a4:1d:1c:fc:
                    19:e4:72:a2:7b:f2:c5:6b:cc:c2:a9:c7:61:45:9d:
                    54:a7:11:36:39:32:d4:9c:cb:64:6f:d2:c4:bc:b6:
                    1d:24:32:27:4b:f3:6d:fe:7e:c4:22:28:7f:d2:fe:
                    2e:9e:53:97:42:85:9c:e9:9c:29:c6:6c:14:ab:3d:
                    9f:65:e3:c8:05:87:5a:b1:f7:96:42:0a:35:34:ef:
                    84:fe:44:e4:0b:7f:b6:e5:5e:bf:80:43:51:d6:27:
                    92:75:05:12:07:22:49:46:33:29:e1:40:0d:14:01:
                    ca:17:ef:d9:f1:c2:f2:38:43:61:24:0e:2d:c2:82:
                    e1:bd:12:da:33:40:48:49:6d:53:f3:04:b0:68:94:
                    20:82:0b:65:e5:8a:f9:e3:e7:bd:98:6d:38:35:e7:
                    63:82:60:1f:7e:80:4d:4e:dd:d6:14:1b:7b:f8:8a:
                    0e:9a:4d:76:77:8b:6a:9a:8c:6a:6e:4b:4f:69:3d:
                    29:ce:78:0c:da:0a:2d:67:b8:c7:33:5e:d6:df:00:
                    bc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:03:29:4B:CB:52:9E:6C:8D:F6:7A:59:DA:A6:84:AD:C2:96:33:84
            X509v3 Authority Key Identifier:
                keyid:3D:EA:8B:1B:B8:72:DD:12:6C:A6:47:CC:37:5C:20:76:02:40:C3:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PeqLG7hy3RJspkfMN1wgdgJAw4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/348DE1CEA25E11EFA38D9375C4F9AE02/PeqLG7hy3RJspkfMN1wgdgJAw4U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:8b:dc:ce:c0:54:fe:e5:a9:3c:79:3e:dd:46:a4:ec:28:18:
         ae:7e:30:0f:37:1f:d9:42:15:6b:20:59:5f:41:32:f8:eb:68:
         38:95:66:d4:7f:21:1a:b3:6a:87:54:40:f7:02:a5:79:6a:91:
         3a:94:81:1f:6f:f0:70:ab:50:eb:2e:0f:0d:c0:0b:f4:88:e5:
         ce:56:47:af:ab:22:e8:db:5c:c4:75:96:76:3b:c2:6a:c8:b1:
         38:27:c6:59:8f:5b:9e:af:88:6e:7b:64:72:e2:7f:29:d4:b3:
         83:f3:73:05:c3:6b:12:9f:87:d7:b7:a5:8e:ca:db:6d:e7:1e:
         1b:0f:95:45:74:f6:97:78:cf:05:b4:03:65:22:27:4a:c6:f4:
         16:51:48:dd:3c:eb:c1:bf:02:3b:90:1d:90:9b:88:f4:c6:ec:
         f6:1f:d7:a2:75:1d:31:3c:63:38:61:a1:ea:f6:75:8b:f1:e3:
         cf:8a:9e:06:ac:b5:29:e7:b7:54:5a:a9:78:d7:f0:19:38:d5:
         6c:e2:c5:68:87:5e:39:a6:e6:37:c0:78:73:5b:d4:8a:ac:36:
         eb:db:e2:cf:7f:0d:1d:50:0c:0c:c1:f2:48:93:5b:1f:7d:b9:
         9f:3a:58:df:4b:dd:c6:18:a3:9c:55:3e:bf:2a:4d:cc:71:18:
         e6:b7:6e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:27:42 2025 by rpki-client