Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft
File:                     PdrbASYCUFD16FZsRh2atz5J5Uo.mft (raw, json)
Hash identifier:          AnXZrggSIdf1wSniOrxWQg5pv59wKuC5SSctnjh9bqE=
Subject key identifier:   52:03:45:96:58:4B:40:CA:BC:9C:55:96:AC:D4:18:0D:2A:10:80:97
Authority key identifier: 3D:DA:DB:01:26:02:50:50:F5:E8:56:6C:46:1D:9A:B7:3E:49:E5:4A
Certificate issuer:       /CN=A915A803/serialNumber=3DDADB0126025050F5E8566C461D9AB73E49E54A
Certificate serial:       159E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft
Manifest number:          1589
Signing time:             Tue 24 Mar 2026 16:40:07 +0000
Manifest this update:     Tue 24 Mar 2026 16:40:07 +0000
Manifest next update:     Tue 31 Mar 2026 16:40:07 +0000
Files and hashes:         1: PdrbASYCUFD16FZsRh2atz5J5Uo.crl (hash: CMYeE1aG3tY7wPLXchNiSoJ78PUqdEx5YjovPTgG6a0=)
                          2: 4967F6B8533511E8A678701BC4F9AE02.roa (hash: Qn+0huqeBwXglwQJRxVRLR40yUlrfMuqSCsx/03VN8g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.crl
                          rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:40:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5534 (0x159e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A803, serialNumber=3DDADB0126025050F5E8566C461D9AB73E49E54A
        Validity
            Not Before: Mar 24 16:40:07 2026 GMT
            Not After : Mar 31 16:40:07 2026 GMT
        Subject: CN=69c2be67-b8ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cd:f8:89:ba:26:82:5b:e2:f9:fc:27:94:b0:
                    a0:23:51:2e:ac:cd:80:4b:50:73:e5:c1:cd:cc:2d:
                    6f:85:05:ee:2d:3c:36:d1:35:ba:ff:a7:5b:43:60:
                    53:10:a9:e2:30:63:a6:42:7f:4b:19:d2:e4:36:25:
                    af:ba:d9:a8:58:6d:d5:cc:1e:13:24:5a:d4:9c:a6:
                    ab:76:88:25:bc:43:87:63:86:ff:56:30:d5:63:70:
                    2a:2e:83:df:db:98:47:31:45:f5:07:59:2b:8a:31:
                    60:2f:2f:95:a2:0c:be:d0:69:fd:ce:66:14:58:b9:
                    4f:b5:c0:ab:d7:87:41:74:00:1b:c5:bd:12:42:0a:
                    41:be:5e:f5:0c:cd:a5:59:fc:0c:4f:b1:b5:dc:47:
                    ed:32:aa:b8:2a:ed:d9:d5:10:ca:9f:65:a9:0e:44:
                    4c:91:ad:71:a1:ee:be:d6:7e:b3:84:39:ed:0f:54:
                    cd:15:7a:2e:dc:9f:aa:a2:92:27:66:b6:5c:b2:fe:
                    a8:67:1e:21:52:95:57:5d:ed:23:41:b0:0e:2d:e5:
                    b0:79:41:b8:29:bf:24:8d:27:65:1b:b5:4a:0d:0a:
                    4a:07:bc:31:45:37:0e:86:99:a4:e9:43:85:5e:7a:
                    95:c5:aa:5e:00:ef:8c:4c:78:c5:e2:c5:21:98:71:
                    af:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:03:45:96:58:4B:40:CA:BC:9C:55:96:AC:D4:18:0D:2A:10:80:97
            X509v3 Authority Key Identifier:
                keyid:3D:DA:DB:01:26:02:50:50:F5:E8:56:6C:46:1D:9A:B7:3E:49:E5:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:bd:f2:2d:2d:0e:d9:0a:39:da:15:d7:20:fa:84:5b:e5:3c:
         83:0f:eb:8e:b9:43:ea:6e:8f:7e:84:1f:a1:14:93:e6:4c:d8:
         21:0c:27:5e:9c:8e:aa:67:0f:63:81:8c:a8:e7:39:e5:01:56:
         37:97:b7:11:a1:c6:a7:dc:ca:6d:e9:54:1c:e1:df:fc:e1:1e:
         c3:b1:08:8b:8c:06:0f:f9:9b:33:3f:c0:3c:9b:f5:e0:47:37:
         ea:71:b2:2f:82:30:be:ef:f1:40:82:fb:25:e1:bc:91:a0:b2:
         77:44:91:4e:c5:20:61:c8:56:9b:e3:63:f2:2f:20:ed:d6:01:
         5a:bc:1a:36:fd:1b:23:9e:2f:37:8f:27:c4:5c:47:bd:78:69:
         42:17:6d:cf:cc:e6:2d:aa:47:68:6d:4e:d1:77:1e:aa:6d:32:
         fb:36:67:b3:c3:a0:d7:d9:8a:b3:62:c8:13:3d:ba:a8:64:86:
         72:4a:8c:fe:fa:12:33:56:a4:5c:8d:2d:8d:6d:a8:6d:90:3a:
         69:e0:32:2f:e0:ef:5f:90:af:95:a4:be:50:91:e6:f0:67:82:
         a3:9c:fd:40:d4:86:3f:87:56:a4:fe:17:c9:55:07:6a:3a:1d:
         1c:74:dc:df:71:8c:b3:56:f5:93:78:0f:06:dd:0f:99:6c:40:
         3c:a1:cf:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:25:55 2026 by rpki-client