Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft
File:                     PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft (raw, json)
Hash identifier:          yNwKf/5EoyK7lv1OWhl/92F1PmoRV1h/tpTjx39E6Dw=
Subject key identifier:   FD:C9:1A:BE:74:E1:A7:59:35:5B:4E:AF:CB:30:CF:03:0A:C6:4C:EF
Authority key identifier: 3C:35:87:DC:3A:F2:E9:37:EC:DB:65:A8:38:92:75:9A:41:C8:85:0B
Certificate issuer:       /CN=A9134B4A/serialNumber=3C3587DC3AF2E937ECDB65A83892759A41C8850B
Certificate serial:       01BF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft
Manifest number:          01AD
Signing time:             Thu 03 Sep 2026 04:22:35 +0000
Manifest this update:     Thu 03 Sep 2026 04:22:35 +0000
Manifest next update:     Thu 10 Sep 2026 04:22:35 +0000
Files and hashes:         1: PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl (hash: RWFrXXUJ4tWdEUIHJTXkrCfYO7OC8vpiaSMr2S9HT1k=)
                          2: A63B6120238711F08D2B4460C4F9AE02.roa (hash: CSNhoZkKt729AJAsDVCNWknT1CnJ47gjrYdcuOI20TM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl
                          rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 04:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447 (0x1bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134B4A, serialNumber=3C3587DC3AF2E937ECDB65A83892759A41C8850B
        Validity
            Not Before: Sep  3 04:22:35 2026 GMT
            Not After : Sep 10 04:22:35 2026 GMT
        Subject: CN=6a98f60b-2d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:15:d0:14:c3:c0:4a:09:06:c1:4c:b7:3f:7a:
                    f1:69:1c:9d:23:3e:70:69:1e:41:91:eb:27:2d:1e:
                    bc:72:33:db:b8:84:ec:ec:54:bb:82:46:51:0f:c4:
                    9c:1e:2b:85:6f:b1:c2:cd:e4:68:f5:1a:6f:69:ba:
                    0d:d2:34:18:5b:59:86:47:83:33:8f:df:d1:1e:40:
                    11:6c:4b:c1:ef:b4:e8:ad:07:c0:5c:68:90:14:93:
                    d2:42:17:a3:52:11:ab:b4:e0:96:39:e9:83:fe:1e:
                    24:de:94:10:5a:70:2a:a5:b0:78:9e:59:84:70:cd:
                    31:e0:d7:0e:22:be:f5:14:81:91:af:a4:d9:ab:06:
                    33:ed:98:7f:57:9e:2d:d4:36:fc:fa:7f:38:53:9a:
                    71:ac:e1:a6:b4:bb:a6:35:91:8d:4f:bc:9a:db:6b:
                    64:69:37:9a:5a:b8:99:eb:0b:42:4c:67:59:f4:6c:
                    a2:b7:7c:c5:88:1c:30:a1:1f:3f:9f:60:d2:62:f4:
                    75:2f:19:b8:8a:cb:b8:fe:ce:1d:1e:56:3a:e0:1d:
                    dc:4a:21:e3:d6:6b:e9:a8:61:6c:9a:a8:b2:8f:63:
                    74:41:d0:5d:56:58:a9:14:80:97:c9:92:d3:8e:2a:
                    38:99:7e:e8:aa:d6:27:85:4e:c7:7f:18:39:ff:6f:
                    8e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C9:1A:BE:74:E1:A7:59:35:5B:4E:AF:CB:30:CF:03:0A:C6:4C:EF
            X509v3 Authority Key Identifier:
                keyid:3C:35:87:DC:3A:F2:E9:37:EC:DB:65:A8:38:92:75:9A:41:C8:85:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:d8:43:15:e1:c4:55:e1:92:49:92:ee:34:ea:dc:57:05:7f:
         69:21:f0:99:d4:79:1f:07:c1:3f:4e:59:4e:02:b6:c2:b0:c7:
         46:64:9c:b0:f8:74:dd:61:4f:12:f3:5d:cf:47:a7:16:aa:3e:
         6c:22:9c:47:85:24:ce:9d:e8:00:28:93:8c:30:25:d7:e4:df:
         27:8a:61:f3:d9:5b:11:e2:85:5a:7a:9c:10:e1:7d:5d:c4:0c:
         e7:b9:a0:c9:70:ee:30:93:e3:b4:ca:ac:71:21:fb:6f:00:cb:
         e5:62:a9:ad:df:c2:43:7c:a0:ae:67:a0:78:62:e5:90:3c:35:
         a5:a7:fa:90:cf:84:48:6e:a7:1a:73:db:38:3e:4e:cf:a3:3c:
         a6:cb:fa:a7:3a:d1:dd:6e:14:63:70:c4:a0:87:bc:70:02:08:
         4c:c6:68:e6:96:da:58:d3:e1:4e:2f:9d:46:8e:26:b1:6b:45:
         68:85:bf:ca:ca:e2:4c:fc:8f:4a:cb:42:50:06:c6:4e:87:c5:
         d6:73:52:3f:0b:b3:0c:52:65:78:f6:cc:fa:29:e5:d6:85:49:
         b5:57:cf:0a:c0:4d:c6:25:bb:3d:9e:68:65:a9:03:ac:37:f2:
         a5:c9:57:fa:6c:38:f5:33:cb:31:1c:cb:4f:f3:f9:6f:57:15:
         1f:69:1a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:43:49 2026 by rpki-client