Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
File:                     PdeY67rvfndLLyx3rvsipM171oY.mft (raw, json)
Hash identifier:          5MSVnbyOEoi/jYSZrQw0s/TOFoa4Uad932XnMEEc6gE=
Subject key identifier:   8D:2E:95:88:EA:E6:1B:C1:10:33:BF:78:BB:5B:C7:AF:8E:78:5F:BE
Authority key identifier: 3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86
Certificate issuer:       /CN=A918C0AE/serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686
Certificate serial:       074D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
Manifest number:          0741
Signing time:             Sun 02 Nov 2025 21:42:49 +0000
Manifest this update:     Sun 02 Nov 2025 21:42:48 +0000
Manifest next update:     Sun 09 Nov 2025 21:42:48 +0000
Files and hashes:         1: PdeY67rvfndLLyx3rvsipM171oY.crl (hash: DYS2MtqQa9BuBaRbLX4Hs/lfxfCeN0/rWxIhpqOP5B8=)
                          2: 23D40B5049BC11EB98F78F66C4F9AE02.roa (hash: bE6+fF3Z2aJLcDObD8suz2TxAd7cotS0UZ/nrStzxDQ=)
                          3: 246D53F049BC11EB98F78F66C4F9AE02.roa (hash: EjFNRenEr22lcCVrIFxeoH925N5NhrGgL+Mz7mHjB8Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl
                          rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 21:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1869 (0x74d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C0AE, serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686
        Validity
            Not Before: Nov  2 21:42:48 2025 GMT
            Not After : Nov  9 21:42:48 2025 GMT
        Subject: CN=6907d058-52ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:47:3d:cc:7b:3c:02:14:c6:8f:f6:0b:95:7c:
                    6e:06:1d:19:4a:6b:ad:3d:92:d8:38:c4:52:83:ef:
                    b0:90:42:3e:c9:f9:ef:2d:33:bd:d5:3c:c1:f9:97:
                    cc:16:67:45:c1:34:1d:25:ee:10:da:53:e5:71:1c:
                    e4:90:3a:4b:9e:62:ae:60:21:6b:c8:e1:87:08:f6:
                    84:d8:58:6c:9e:cd:f6:79:ca:91:34:0f:c7:c4:52:
                    dd:52:21:8a:b3:81:1e:c9:2c:63:0f:00:f1:6f:8d:
                    02:1a:85:ad:2f:be:43:2b:fa:be:e2:8e:f4:17:27:
                    ac:ff:8b:17:ec:75:08:90:14:1a:20:15:3d:f6:47:
                    f9:db:04:58:eb:a6:4a:f8:29:8e:51:de:cf:bd:f8:
                    05:6b:48:0c:76:1a:d2:1b:a1:90:ae:b2:45:09:86:
                    45:93:4a:d7:d7:88:95:4c:a6:4e:0f:af:37:27:5b:
                    08:1d:a9:92:bf:6c:dc:72:92:42:e0:96:28:e0:d1:
                    77:4a:39:a0:2c:6b:b3:7d:96:28:2f:d3:a3:c9:84:
                    19:22:b1:14:e5:45:90:07:8c:aa:7d:32:35:5f:e0:
                    9b:03:72:64:55:ff:36:8e:6a:d6:63:61:c4:7f:c8:
                    42:03:ca:3d:c5:3a:0f:ee:2e:00:72:0a:f1:d9:35:
                    d1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2E:95:88:EA:E6:1B:C1:10:33:BF:78:BB:5B:C7:AF:8E:78:5F:BE
            X509v3 Authority Key Identifier:
                keyid:3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:4c:ba:d2:5f:76:a4:ce:b7:58:77:d7:01:ae:07:af:12:19:
         e9:a8:35:c7:be:69:e1:be:6d:96:56:97:ef:e3:11:b1:b2:90:
         19:9a:e9:48:be:e6:b3:a6:b0:0b:97:c5:54:05:af:29:8c:64:
         a6:06:b0:68:6a:62:67:fd:7f:51:ed:72:9d:d2:df:0b:a5:cc:
         ef:6a:bd:85:f0:ed:7c:82:d5:c2:f6:e7:2f:f2:01:40:5f:20:
         75:5d:88:6f:45:a5:45:61:89:d6:d6:fb:ce:58:93:ba:ad:ea:
         78:cc:0b:04:b1:1f:1f:0d:b2:c4:fc:86:37:71:8d:40:35:45:
         96:cc:3c:9c:31:de:cf:25:16:7a:1c:19:d3:cd:84:fe:c4:5a:
         ef:b2:a0:60:74:55:c8:0e:b6:bb:8a:eb:25:1d:ce:e0:0d:d7:
         dd:63:75:ac:b0:92:48:6a:25:58:ef:11:97:5a:85:10:85:bf:
         71:f7:75:61:13:2f:a7:a4:d5:91:e7:3c:cf:d1:85:4e:65:4a:
         c4:c9:08:4b:92:63:1f:86:83:a3:8d:d8:79:0e:cb:d8:e4:eb:
         4d:71:c8:af:d1:25:cf:33:1e:ac:a8:1e:98:5f:dc:7d:fd:4a:
         c8:eb:13:2d:4a:2d:93:6e:4f:f7:48:5a:df:0b:48:ba:c3:56:
         65:f7:f7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:17:14 2025 by rpki-client