Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft
File:                     PdrbASYCUFD16FZsRh2atz5J5Uo.mft (raw, json)
Hash identifier:          zzT/8jhw5BNk33Lss6wQCPEtH2Q61EH/gO4RhmdasB8=
Subject key identifier:   7F:24:7C:4E:A7:98:4E:C9:D4:FC:BE:D6:B2:5E:DD:37:C6:3F:F5:1A
Authority key identifier: 3D:DA:DB:01:26:02:50:50:F5:E8:56:6C:46:1D:9A:B7:3E:49:E5:4A
Certificate issuer:       /CN=A915A803/serialNumber=3DDADB0126025050F5E8566C461D9AB73E49E54A
Certificate serial:       1507
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft
Manifest number:          14FD
Signing time:             Sun 20 Jul 2025 16:50:40 +0000
Manifest this update:     Sun 20 Jul 2025 16:50:39 +0000
Manifest next update:     Sun 27 Jul 2025 16:50:39 +0000
Files and hashes:         1: PdrbASYCUFD16FZsRh2atz5J5Uo.crl (hash: Y7LS8Wun0aBl7EmaU1nReK8TedkOfAsRVcgbFy2EdoM=)
                          2: 4967F6B8533511E8A678701BC4F9AE02.roa (hash: 1riiNEo45WZ6XH/Os//x78+gBRpcFmxijL/HJsGk51k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.crl
                          rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 16:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5383 (0x1507)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A803, serialNumber=3DDADB0126025050F5E8566C461D9AB73E49E54A
        Validity
            Not Before: Jul 20 16:50:39 2025 GMT
            Not After : Jul 27 16:50:39 2025 GMT
        Subject: CN=687d1e60-e9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2f:60:ad:fc:7d:d9:da:5f:55:0d:8a:1e:bb:
                    04:7a:0e:49:9e:ac:04:5a:bc:95:c3:c8:6b:22:a7:
                    61:6e:6f:0e:3c:12:c6:b4:55:b4:c9:5f:34:94:7a:
                    57:ed:77:9c:dc:fd:77:d6:1a:87:6f:3f:e7:1e:e2:
                    df:36:17:ee:18:cf:c6:fb:31:fb:60:48:d0:98:20:
                    0d:5f:8c:30:e5:47:de:cd:3e:79:21:4f:79:27:b6:
                    67:6b:fc:ac:29:f1:59:f9:5b:16:bc:60:57:60:86:
                    b3:7e:37:56:99:4e:8f:ab:a8:d9:43:a1:20:c6:20:
                    89:a4:35:c0:cf:47:5b:f3:6a:e0:6e:d9:35:e7:c7:
                    34:85:0d:e3:c9:8d:22:75:42:48:58:2d:69:75:9f:
                    48:a2:ae:d3:bf:73:22:01:90:0e:99:2f:47:7a:7a:
                    e1:7f:b6:52:08:ba:7f:e3:60:61:87:33:ee:78:91:
                    67:4f:e5:29:1a:88:35:00:a5:d3:d7:d8:da:2a:36:
                    86:f7:1a:8f:cc:1b:36:f5:20:5f:a1:4c:34:26:30:
                    9e:54:33:1b:4f:90:3f:a6:ba:f2:3f:76:a5:35:74:
                    ed:20:3c:45:24:9c:65:75:e6:f3:40:29:89:8c:6e:
                    4f:fa:0a:f5:ff:2c:fa:65:79:62:86:a9:5f:ec:8f:
                    cb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:24:7C:4E:A7:98:4E:C9:D4:FC:BE:D6:B2:5E:DD:37:C6:3F:F5:1A
            X509v3 Authority Key Identifier:
                keyid:3D:DA:DB:01:26:02:50:50:F5:E8:56:6C:46:1D:9A:B7:3E:49:E5:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:dc:b9:a9:09:f5:35:65:71:0a:0a:42:5e:91:4f:f9:cc:22:
         68:6c:d7:b1:49:0f:bb:fa:9f:76:0e:a4:84:2b:16:b8:a2:3c:
         f8:e7:a2:6e:20:70:17:44:6f:16:15:23:aa:13:ee:37:d7:a5:
         d4:49:01:0e:bc:53:04:2f:41:02:6d:d7:1d:1d:88:e5:01:9d:
         0b:fc:b1:f5:20:01:a8:52:30:cc:d7:c9:df:e2:69:8a:65:0b:
         a3:e7:1a:5a:59:3b:b4:f2:e8:90:f4:69:d4:ba:77:b6:90:8d:
         0e:8e:40:68:38:ac:39:94:a5:43:8c:be:ff:e9:4c:05:9b:85:
         76:c2:94:c4:70:b2:71:48:3d:61:8b:dc:d8:52:0f:d1:b2:57:
         a4:c8:5e:27:97:6d:66:92:ec:9d:7f:a0:cd:b9:d9:0b:d1:04:
         20:aa:7b:36:e1:cf:bc:08:51:66:cf:b9:e0:62:b4:69:ce:fb:
         91:94:a4:2a:29:d7:bf:e7:2d:a7:89:2f:bb:26:29:d7:43:cf:
         c2:93:46:22:de:e3:37:64:f5:da:72:44:40:c6:6b:bd:ec:a5:
         48:cc:46:c6:0c:b1:40:ce:1a:60:36:7b:85:51:5d:45:1a:c2:
         bf:9f:93:e1:f6:69:1c:ec:dd:b1:17:06:56:c7:09:17:12:a2:
         cb:51:54:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:56:52 2025 by rpki-client