Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft
File:                     PdrbASYCUFD16FZsRh2atz5J5Uo.mft (raw, json)
Hash identifier:          o2ulhy/Q5GTttBZhcrPTdBy8dHtBZ8qi0s3lDuIbvsE=
Subject key identifier:   3A:31:62:15:1B:8F:8E:2B:07:99:55:E2:0E:DA:00:E2:BB:03:76:64
Authority key identifier: 3D:DA:DB:01:26:02:50:50:F5:E8:56:6C:46:1D:9A:B7:3E:49:E5:4A
Certificate issuer:       /CN=A915A803/serialNumber=3DDADB0126025050F5E8566C461D9AB73E49E54A
Certificate serial:       1592
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft
Manifest number:          157D
Signing time:             Sun 01 Mar 2026 23:59:07 +0000
Manifest this update:     Sun 01 Mar 2026 23:59:07 +0000
Manifest next update:     Sun 08 Mar 2026 23:59:07 +0000
Files and hashes:         1: PdrbASYCUFD16FZsRh2atz5J5Uo.crl (hash: zErwjPlRXxBgrmndtVjHg/AaKiXrqkMT98clA//6t24=)
                          2: 4967F6B8533511E8A678701BC4F9AE02.roa (hash: Qn+0huqeBwXglwQJRxVRLR40yUlrfMuqSCsx/03VN8g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.crl
                          rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5522 (0x1592)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A803, serialNumber=3DDADB0126025050F5E8566C461D9AB73E49E54A
        Validity
            Not Before: Mar  1 23:59:07 2026 GMT
            Not After : Mar  8 23:59:07 2026 GMT
        Subject: CN=69a4d2cb-c633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:da:26:52:3d:bb:0c:0e:32:64:15:4b:ca:14:
                    a4:68:fe:b3:bd:92:87:48:39:11:50:85:e1:d0:ca:
                    f3:0d:c3:cc:ae:a2:51:62:f2:84:fc:00:27:e6:75:
                    bd:0d:35:90:d3:6a:09:f4:c6:26:1f:69:18:24:2f:
                    48:c1:ce:b1:fe:9d:61:3d:9d:69:ea:d6:e5:b2:00:
                    ba:84:e1:fd:ea:19:37:5b:9e:03:c9:74:f1:d1:33:
                    6d:b2:e7:cc:49:0c:e2:f0:d1:45:01:bb:7c:05:83:
                    5b:2e:5f:b0:41:da:19:bc:ab:16:4d:d4:3f:c2:7b:
                    5e:2e:d6:ff:ea:e4:fb:a6:0d:8d:3a:ac:3a:56:1a:
                    89:51:9f:0a:97:9b:93:80:57:b2:47:c0:56:f2:a8:
                    3e:c0:4d:ed:ad:62:1a:5f:4a:0b:ea:00:a3:b2:0c:
                    d7:0e:33:41:fe:21:e5:10:3b:da:9b:7d:5b:06:86:
                    21:6f:a1:3d:6d:69:ae:d1:a1:4d:6c:14:3f:24:bb:
                    99:d4:f2:53:da:fa:a5:3a:e9:ac:9b:7e:92:9f:ca:
                    88:bc:58:02:52:05:4e:06:10:1b:1e:bb:6c:95:58:
                    f9:aa:e1:b1:4f:1f:44:05:73:01:53:9e:08:18:be:
                    a0:63:81:15:57:e8:04:f5:2f:e3:50:56:da:6c:a6:
                    55:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:31:62:15:1B:8F:8E:2B:07:99:55:E2:0E:DA:00:E2:BB:03:76:64
            X509v3 Authority Key Identifier:
                keyid:3D:DA:DB:01:26:02:50:50:F5:E8:56:6C:46:1D:9A:B7:3E:49:E5:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:9a:42:04:8f:86:40:45:d4:ad:08:62:ce:b4:1b:b4:af:77:
         e0:31:3b:e2:56:75:10:2f:17:1d:26:7d:2e:c3:12:59:7c:09:
         c3:a8:93:14:97:8a:0b:0f:08:47:e6:61:e5:f3:6e:7a:8f:92:
         25:e1:c5:bf:f2:09:86:28:e5:71:bb:27:e6:7e:f1:c5:e9:90:
         d5:15:43:f5:f1:f0:10:4e:aa:a8:78:15:d8:92:2f:4a:cc:43:
         9f:ec:64:c5:62:53:06:cb:73:e8:be:61:c0:c1:a5:19:bb:7c:
         06:8b:34:34:5d:a8:42:6c:6d:2b:b8:76:60:68:24:81:bb:89:
         5b:d8:63:ca:47:9a:97:86:c9:41:fb:0a:8a:dc:e2:37:49:12:
         70:40:6c:92:ce:5d:f8:c1:0c:b8:04:27:0d:cc:f1:05:70:0f:
         93:80:34:c8:fe:6c:06:3d:ff:e7:d7:7e:50:0c:cb:11:4c:ca:
         6c:34:34:f4:29:29:86:d0:d4:99:de:60:50:30:02:77:05:50:
         94:4b:42:58:a5:8f:8a:d7:3c:19:61:4f:8c:bb:82:30:16:e1:
         ba:5e:5b:a4:df:ae:68:04:5c:2f:af:e9:22:e6:66:39:70:66:
         c8:ba:f0:44:3d:54:a9:9b:23:aa:ae:22:a8:d2:63:14:3d:44:
         0c:94:ed:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:45:28 2026 by rpki-client