Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft
File:                     PdrbASYCUFD16FZsRh2atz5J5Uo.mft (raw, json)
Hash identifier:          VLYGaWzCl///s31OgD+kKXikXzas/BnV4BYq/iTAn80=
Subject key identifier:   F1:8C:14:14:DC:02:18:CC:A2:DB:A3:B6:C3:C1:FD:44:E8:18:95:7D
Authority key identifier: 3D:DA:DB:01:26:02:50:50:F5:E8:56:6C:46:1D:9A:B7:3E:49:E5:4A
Certificate issuer:       /CN=A915A803/serialNumber=3DDADB0126025050F5E8566C461D9AB73E49E54A
Certificate serial:       153E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft
Manifest number:          1534
Signing time:             Tue 04 Nov 2025 16:53:36 +0000
Manifest this update:     Tue 04 Nov 2025 16:53:36 +0000
Manifest next update:     Tue 11 Nov 2025 16:53:36 +0000
Files and hashes:         1: PdrbASYCUFD16FZsRh2atz5J5Uo.crl (hash: RwWYRvBlVAgJ/zTmSk+S9ZH+oO4l+a9s6sFQca4F9T0=)
                          2: 4967F6B8533511E8A678701BC4F9AE02.roa (hash: 1riiNEo45WZ6XH/Os//x78+gBRpcFmxijL/HJsGk51k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.crl
                          rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 16:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5438 (0x153e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A803, serialNumber=3DDADB0126025050F5E8566C461D9AB73E49E54A
        Validity
            Not Before: Nov  4 16:53:36 2025 GMT
            Not After : Nov 11 16:53:36 2025 GMT
        Subject: CN=690a2f90-9553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:33:55:ce:17:75:2b:d8:04:87:c0:13:3b:
                    fc:d3:f4:81:4d:28:6e:56:6c:21:0a:ed:c9:57:29:
                    91:08:50:55:63:69:09:50:e6:14:85:48:fd:39:5c:
                    4f:fd:cd:5a:86:d6:b7:aa:c5:55:e2:72:6b:13:84:
                    c7:27:34:10:b2:7c:d4:59:81:b6:66:09:c1:84:d8:
                    c5:64:a7:d9:a7:94:aa:d0:39:41:17:81:cf:e5:48:
                    46:d6:60:1b:43:08:8c:d7:99:78:18:b9:72:a4:09:
                    6d:cb:42:af:c9:f7:ce:8f:63:7a:12:1d:c1:84:f1:
                    dc:ec:6a:05:be:8d:4d:f3:99:e1:16:e2:ee:2c:bc:
                    81:7e:60:b0:92:3d:b4:9f:d3:4e:4c:42:15:05:4d:
                    29:ff:28:3e:44:f2:02:d8:1a:d8:74:28:a4:2d:d9:
                    8c:a2:6f:ac:54:d7:b8:bd:f7:d1:ee:fb:23:59:23:
                    01:29:4d:46:43:67:4a:1b:96:4f:d5:1d:41:aa:ba:
                    27:78:a5:2c:25:e4:ff:f8:44:95:b5:ff:df:ab:52:
                    e3:17:53:2e:ad:b9:64:63:45:0e:56:43:88:37:b5:
                    b1:3f:61:23:fa:76:66:a6:c8:41:75:bc:b2:c0:43:
                    8b:32:f6:b8:41:17:a7:c7:41:53:8d:b4:1a:81:7f:
                    a8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:8C:14:14:DC:02:18:CC:A2:DB:A3:B6:C3:C1:FD:44:E8:18:95:7D
            X509v3 Authority Key Identifier:
                keyid:3D:DA:DB:01:26:02:50:50:F5:E8:56:6C:46:1D:9A:B7:3E:49:E5:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b9:af:6e:a3:ad:a4:56:28:1e:89:da:24:32:8f:b3:d2:da:
         79:69:e4:88:7e:a8:6b:59:e6:ec:58:80:fb:d4:d9:91:71:9a:
         ce:10:94:88:2b:18:62:3a:2c:96:16:63:6b:4d:6d:d4:ac:09:
         54:d1:11:d2:4b:5d:81:f7:34:00:b5:b2:9e:4b:91:e7:e4:10:
         64:fb:b0:ef:8f:74:1c:cc:d1:a8:87:e0:9c:1a:b4:5e:43:7a:
         70:5e:b3:df:29:7d:1c:39:43:50:4e:9e:af:b8:c2:67:27:f6:
         ea:d5:77:ed:ae:07:ca:a6:42:4d:15:96:19:4c:11:47:fb:1d:
         57:e2:70:7a:cf:d4:db:7f:2f:46:c0:bb:46:f2:e0:d6:51:3f:
         2a:48:f9:9b:39:57:80:95:9a:19:32:ae:86:fa:0b:24:63:02:
         0b:53:f4:52:25:80:33:8a:9e:25:ef:3a:62:16:25:bd:46:dd:
         e9:20:ba:92:73:c6:9a:da:a6:c2:6d:cb:c3:01:89:d8:a3:94:
         42:79:b0:f2:ee:dc:be:fe:ac:65:79:5c:33:76:71:22:b0:0b:
         1c:94:3b:7f:9a:e0:93:68:37:5a:98:77:9e:71:af:2a:b9:f7:
         ad:c6:a5:d3:10:83:05:d3:ac:2c:60:f5:d2:94:4d:49:fe:7b:
         ba:57:30:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:28:53 2025 by rpki-client