Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
File:                     PdeY67rvfndLLyx3rvsipM171oY.mft (raw, json)
Hash identifier:          SwApiAjslkRcOKWvI9yP5oXZCvV7VdXdEl3MNuEPH00=
Subject key identifier:   34:AB:F5:94:F5:02:06:1E:8C:13:13:01:85:38:04:6C:5B:E1:D3:85
Authority key identifier: 3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86
Certificate issuer:       /CN=A918C0AE/serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686
Certificate serial:       07A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
Manifest number:          0790
Signing time:             Thu 26 Mar 2026 21:24:17 +0000
Manifest this update:     Thu 26 Mar 2026 21:24:17 +0000
Manifest next update:     Thu 02 Apr 2026 21:24:17 +0000
Files and hashes:         1: PdeY67rvfndLLyx3rvsipM171oY.crl (hash: NkcRkSSn+/wZxp57C8JooLtebBkHraESivxkSzA6kuI=)
                          2: 246D53F049BC11EB98F78F66C4F9AE02.roa (hash: snnjjcJSmnSfiLGuLhSOWtXc8qgvzMcRQujW7d1nbB0=)
                          3: 23D40B5049BC11EB98F78F66C4F9AE02.roa (hash: O87q+bxguIFbMrAZ7VUYrSbILFtjGYHtuiggLNAaxfM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl
                          rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 21:24:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1954 (0x7a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C0AE, serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686
        Validity
            Not Before: Mar 26 21:24:17 2026 GMT
            Not After : Apr  2 21:24:17 2026 GMT
        Subject: CN=69c5a401-6a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e0:5c:72:a4:c7:30:ff:fb:76:35:20:75:ce:
                    5f:4e:26:7c:bb:bd:49:bb:cf:41:10:8e:7b:35:24:
                    09:37:b2:6c:2f:50:1a:af:34:da:cb:04:eb:bf:2e:
                    2e:cd:0a:6a:c0:41:42:51:f4:49:e2:53:6d:52:56:
                    bb:8b:30:b6:f5:9b:35:61:50:04:ef:ad:25:d4:ba:
                    81:e2:2f:14:9a:6d:b5:2b:43:e3:57:eb:38:84:5b:
                    00:45:29:16:c9:90:49:1d:e6:8d:a9:07:e6:40:5c:
                    77:c4:37:ee:61:ff:f0:4d:6f:2e:59:45:ab:18:b5:
                    4b:32:e3:17:db:b7:97:bd:cf:58:65:ac:aa:51:fc:
                    82:e1:05:77:0e:7e:35:a6:b4:10:c2:0d:1e:c1:d6:
                    f2:cc:d7:de:7b:94:e5:14:92:77:33:ad:42:27:24:
                    3a:bf:81:c0:6a:ed:4e:88:6e:25:77:cb:b1:2f:b0:
                    32:b3:3e:71:f9:25:cd:c7:e4:aa:86:7f:f0:0d:9b:
                    59:2c:28:77:ff:85:b9:d2:58:29:3b:9f:20:18:90:
                    1c:f7:47:9c:2f:af:bc:4f:cc:22:f6:37:bb:9c:99:
                    f5:92:0f:d8:0f:7f:52:09:ba:c8:1b:8e:62:09:5d:
                    f7:d4:ba:55:a6:2e:95:ac:d4:94:90:84:d5:25:13:
                    fb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AB:F5:94:F5:02:06:1E:8C:13:13:01:85:38:04:6C:5B:E1:D3:85
            X509v3 Authority Key Identifier:
                keyid:3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d5:a1:d3:b9:00:bb:bd:33:d6:b2:f8:22:e9:d2:ec:e7:c2:
         54:e7:af:7a:36:3c:42:ec:98:eb:63:72:37:3d:2a:16:f1:2e:
         9d:10:0d:92:8f:09:af:0b:bc:b2:9a:2e:59:52:d4:ac:30:81:
         84:fc:ed:ae:76:19:73:0d:6f:df:3d:f7:cf:83:a6:9b:cc:b8:
         ef:ab:ae:18:34:a1:a2:c0:d0:50:59:0b:b6:64:ed:a4:98:77:
         b0:00:22:4a:52:ba:88:13:a0:a9:96:77:2e:6f:3a:3b:db:01:
         81:d4:a2:fa:5c:7a:69:98:67:2a:af:6a:3e:41:ac:96:91:c6:
         e6:d8:58:b4:bd:9f:b4:40:2e:0f:fd:a7:2a:01:32:b1:a9:e3:
         18:cf:1b:42:cc:45:5e:01:0d:7d:49:bb:76:7c:9e:62:5f:2c:
         4f:88:40:a1:86:94:08:05:45:70:72:c2:5d:75:9a:60:b2:4a:
         2b:2e:c8:83:e1:4b:ed:17:e0:00:b2:a7:4d:36:d4:bf:0a:ef:
         80:d1:6c:44:e4:ee:74:f2:38:b8:c5:4e:11:1f:9f:22:66:87:
         f9:88:94:c3:a2:cc:03:bb:8e:89:c5:9b:5a:a0:26:2f:44:78:
         99:fd:3b:dc:0f:53:a7:e6:67:97:95:ad:23:27:e7:3e:19:b6:
         d4:cc:0f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:46:17 2026 by rpki-client