Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
File:                     PdeY67rvfndLLyx3rvsipM171oY.mft (raw, json)
Hash identifier:          tnbPGabEkBJlBGJ7BH54KJJLxKAMYbha2k/XXOMlg+Y=
Subject key identifier:   55:5F:2C:7B:04:88:65:F4:5C:74:F9:2F:5C:31:27:EB:8E:B6:18:CA
Authority key identifier: 3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86
Certificate issuer:       /CN=A918C0AE/serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686
Certificate serial:       0819
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
Manifest number:          0807
Signing time:             Sat 14 Nov 2026 21:06:07 +0000
Manifest this update:     Sat 14 Nov 2026 21:06:07 +0000
Manifest next update:     Sat 21 Nov 2026 21:06:07 +0000
Files and hashes:         1: PdeY67rvfndLLyx3rvsipM171oY.crl (hash: sNGCqqi1x3icTa2FEbprWbc0SXdHZIkFhQGrhWAZDo0=)
                          2: 246D53F049BC11EB98F78F66C4F9AE02.roa (hash: snnjjcJSmnSfiLGuLhSOWtXc8qgvzMcRQujW7d1nbB0=)
                          3: 23D40B5049BC11EB98F78F66C4F9AE02.roa (hash: O87q+bxguIFbMrAZ7VUYrSbILFtjGYHtuiggLNAaxfM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl
                          rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 21:06:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2073 (0x819)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C0AE, serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686
        Validity
            Not Before: Nov 14 21:06:07 2026 GMT
            Not After : Nov 21 21:06:07 2026 GMT
        Subject: CN=6af8cd3f-9f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9f:6a:90:10:55:a2:91:fd:ae:24:70:60:93:
                    ae:35:1b:39:19:9e:8d:5a:3b:07:46:35:3d:90:e9:
                    31:04:11:e8:52:a1:62:2e:7b:08:00:65:db:6f:35:
                    e7:72:3f:40:7c:bc:bc:7e:ed:53:a3:1b:72:5d:2e:
                    dc:d8:98:2c:01:d7:42:c7:30:78:f1:a8:9b:e4:4a:
                    ef:10:7c:7e:95:39:5b:24:71:c7:07:80:6e:98:0d:
                    27:21:e0:ed:c0:ec:96:89:e1:61:c5:b2:5e:78:f0:
                    61:00:ab:63:5e:b5:af:50:8c:ec:0b:ff:88:bf:2a:
                    b6:5a:94:74:b1:b0:d3:07:03:69:42:f7:1e:2d:87:
                    63:4b:48:a6:1d:77:39:e3:1c:12:76:32:45:4a:80:
                    fe:11:85:85:1c:8e:91:27:6b:8c:ce:b2:51:9c:c4:
                    76:ae:d7:cf:be:8c:73:29:02:7c:3c:f8:06:b3:7a:
                    d7:13:27:f2:2b:a1:07:30:d5:38:8e:02:74:31:f0:
                    85:f7:48:da:e8:b9:4f:ca:e6:81:db:14:04:5b:07:
                    dc:39:37:6a:cb:32:86:8d:43:0a:c1:e0:d3:60:04:
                    45:f7:5d:1d:35:91:cc:cf:7b:9e:64:6e:03:48:57:
                    1c:0a:ab:e0:b4:c0:b2:35:43:a7:0c:0d:9e:c4:db:
                    cb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5F:2C:7B:04:88:65:F4:5C:74:F9:2F:5C:31:27:EB:8E:B6:18:CA
            X509v3 Authority Key Identifier:
                keyid:3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:75:d0:47:b6:3e:78:3f:84:df:ef:42:44:05:70:94:f8:fb:
         84:27:4a:b5:cf:5a:c8:ff:c9:e9:f4:16:df:35:1b:f8:c1:58:
         9e:41:bc:36:9f:c5:4f:d3:a5:cf:71:8e:c9:51:75:ca:6d:96:
         38:48:f5:0d:b1:22:86:bc:c5:7d:38:c2:a9:35:3a:bc:75:f4:
         d5:8d:ea:ab:d4:b8:1f:8c:7b:fd:8b:f7:1a:8b:1f:d0:e0:7f:
         cf:f8:2a:af:04:3d:c3:b8:a8:0a:e0:03:25:07:e3:7e:58:47:
         28:d5:67:9f:d2:cc:a9:5c:d9:af:42:4d:a5:ba:79:db:12:76:
         5f:82:d8:c1:5b:19:6e:76:f4:82:57:12:f8:1e:f0:8a:4a:3c:
         41:84:89:b9:21:48:54:8c:d6:04:cd:14:2e:dd:50:59:7d:c4:
         2f:b5:25:fa:17:54:eb:48:b4:31:87:72:37:b3:86:2c:f1:b2:
         c0:ab:f9:69:eb:3e:3c:5d:0e:37:ed:a5:c6:2a:f7:db:41:57:
         2c:ff:bb:59:ff:48:5b:0d:c4:2b:44:d5:d8:4d:6c:3c:0a:89:
         6f:54:22:bf:a5:e9:6c:17:da:67:38:16:d7:05:d9:91:5b:65:
         a8:f4:8d:f3:a4:b2:0e:5f:91:4d:33:90:89:7e:ec:fc:b5:78:
         59:6b:9e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:33:28 2026 by rpki-client