Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
File:                     PLw5Tr9aIgmw6yx0fD_wBratGds.mft (raw, json)
Hash identifier:          VOE0MsiaR+TkMZV6FJGRYSCfTYOkXPORlaZzmR4RCZQ=
Subject key identifier:   CA:66:16:C0:CD:44:8B:39:6B:93:F2:F1:1F:4F:7D:07:2E:91:15:92
Authority key identifier: 3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB
Certificate issuer:       /CN=A91B8E1F/serialNumber=3CBC394EBF5A2209B0EB2C747C3FF006B6AD19DB
Certificate serial:       0189
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
Manifest number:          0187
Signing time:             Thu 21 Aug 2025 03:38:37 +0000
Manifest this update:     Thu 21 Aug 2025 03:38:36 +0000
Manifest next update:     Thu 28 Aug 2025 03:38:36 +0000
Files and hashes:         1: PLw5Tr9aIgmw6yx0fD_wBratGds.crl (hash: p/VGFCwmVQiwk4767kE1+K907jYmT33GlTFDoaiVDjo=)
                          2: 98B1A08E256211EEB175EF31C4F9AE02.roa (hash: 2Bg9UDxMyqhA8+XT8Mmpy9fvyWbq1DLpU1ot8hcHatg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.crl
                          rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Aug 2025 03:38:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8E1F, serialNumber=3CBC394EBF5A2209B0EB2C747C3FF006B6AD19DB
        Validity
            Not Before: Aug 21 03:38:36 2025 GMT
            Not After : Aug 28 03:38:36 2025 GMT
        Subject: CN=68a694bd-14ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:36:51:d0:43:75:3f:17:9b:ee:90:aa:75:6a:
                    d3:c0:e0:6e:d7:62:c6:22:71:27:48:a8:55:ba:47:
                    71:8f:34:2f:77:5b:cd:d8:4a:47:70:5f:c3:00:f0:
                    1e:ec:4a:dc:d7:c4:dd:3f:db:f6:e5:fc:53:b6:17:
                    28:15:1c:5e:30:ec:af:37:0b:73:6f:ee:1e:4e:03:
                    33:15:c5:60:30:c0:fb:22:9e:96:99:e7:23:c4:fa:
                    c8:a3:ac:e2:78:71:f5:a4:e3:f2:90:63:86:d8:ae:
                    bf:66:c9:22:0f:15:88:04:43:b4:bd:5c:af:60:e2:
                    bf:50:45:0f:67:cb:d0:32:37:c5:13:e7:18:5a:9f:
                    e2:e8:c2:d7:e5:50:21:81:9b:7b:3a:f6:43:49:c3:
                    83:73:b5:ce:9c:c7:5d:eb:78:0f:ee:bf:f1:3d:1c:
                    ac:24:67:ba:f3:1f:f1:10:d2:31:93:76:9f:4c:10:
                    ea:0a:16:2d:91:d4:93:da:8d:93:81:17:7f:c8:f2:
                    32:de:45:91:92:8a:ed:28:74:b7:51:a2:bd:c3:76:
                    8f:37:ae:36:37:b8:76:8b:90:97:13:19:58:b7:2a:
                    36:c8:2e:25:46:f8:84:28:00:11:8e:4a:26:78:9c:
                    ef:f5:96:ac:66:4b:77:d2:73:90:b8:5c:e3:ea:38:
                    9c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:66:16:C0:CD:44:8B:39:6B:93:F2:F1:1F:4F:7D:07:2E:91:15:92
            X509v3 Authority Key Identifier:
                keyid:3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:46:e8:59:ac:72:41:b7:8c:f7:57:83:63:8d:5a:c6:c0:c9:
         14:0c:ad:61:6a:e9:40:eb:9e:e6:ee:09:24:8a:5b:e2:12:dd:
         52:d1:28:9c:69:ab:61:c0:22:9b:d0:5b:9e:dc:fd:74:cd:b2:
         ad:16:07:14:bd:8f:cf:e0:a9:db:09:38:79:56:b3:e4:44:41:
         b5:65:cb:da:01:27:97:8c:c1:dc:15:d9:f1:93:91:86:3f:49:
         cf:2b:4d:40:e6:64:20:b8:2a:0c:bb:bb:e9:d3:83:b5:9e:55:
         25:bc:89:b4:9d:b5:a5:75:9d:b4:fd:2a:c7:4f:57:31:c5:c5:
         0c:50:17:9c:59:4f:55:79:61:dc:3c:4b:71:69:d6:cb:03:06:
         23:f0:e3:79:92:63:a1:3a:ba:37:e3:b3:fc:bf:07:c5:85:eb:
         9c:bd:e3:61:0c:13:8a:de:7b:97:2a:45:9d:b3:9f:7d:e2:fb:
         1c:22:87:f3:53:46:94:c6:92:81:6c:f7:a0:e6:0f:72:f4:b0:
         17:c7:5b:4f:79:61:26:ea:10:50:88:98:27:2e:a2:87:43:d9:
         92:ce:60:e5:9c:9a:fd:56:d2:5d:bf:b3:27:3f:a2:69:17:7b:
         9d:6c:18:15:d3:4a:b5:c1:f1:06:3f:5b:36:6d:f6:e4:15:18:
         5c:dc:91:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:22:28 2025 by rpki-client