Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
File:                     PP5vPrHYknFeQTbpuoVrmPZxR7A.mft (raw, json)
Hash identifier:          XHMVjY4P47oiFD4WvkiEemCpT/cbAVmk1wjmPCYtOJ0=
Subject key identifier:   8D:16:B8:68:64:2A:C5:7A:43:F8:ED:65:7D:87:19:4F:0A:7D:85:C7
Authority key identifier: 3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0
Certificate issuer:       /CN=A9122D89/serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0
Certificate serial:       0867
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
Manifest number:          085E
Signing time:             Fri 12 Jun 2026 20:51:32 +0000
Manifest this update:     Fri 12 Jun 2026 20:51:31 +0000
Manifest next update:     Fri 19 Jun 2026 20:51:31 +0000
Files and hashes:         1: PP5vPrHYknFeQTbpuoVrmPZxR7A.crl (hash: BiNC3CUMXlwhaC1Fq/llhvf2BtILEawlv8A27Z45FBo=)
                          2: 7E8114F414E611EB82C98471C4F9AE02.roa (hash: 4jo636T6jYuAB4lWYCYJ4Jdk6gTR1xHLVvPQO5ElmxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl
                          rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:51:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2151 (0x867)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122D89, serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0
        Validity
            Not Before: Jun 12 20:51:31 2026 GMT
            Not After : Jun 19 20:51:31 2026 GMT
        Subject: CN=6a2c7154-8b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:69:cc:51:4f:22:44:6e:0a:22:17:ac:76:a0:
                    58:84:38:9e:66:72:78:75:e8:70:e0:4f:65:f3:80:
                    6b:d4:ed:2d:28:cc:24:0d:d4:07:07:ad:03:42:51:
                    a8:ff:f2:f7:35:7b:e0:70:15:d7:f3:92:d7:27:ea:
                    4d:39:91:8c:df:2f:a5:46:4c:ed:40:e5:72:f6:24:
                    82:fb:d4:ee:62:6f:a5:44:db:b1:e5:5c:9c:31:4c:
                    f9:f4:e6:54:8a:c2:21:0d:a0:d8:fe:ae:e3:ce:ca:
                    fc:42:34:59:7f:0c:cc:88:ae:8b:23:77:3b:ec:0b:
                    eb:c3:8b:62:08:4e:c9:50:c1:5b:93:65:35:c4:02:
                    83:e4:42:bb:52:5f:64:a0:56:00:2e:5d:36:e0:55:
                    df:f1:c1:56:61:52:e7:e0:55:09:e0:9f:5c:ec:b6:
                    22:31:ea:5f:ad:bb:45:ff:42:9c:61:e7:17:7d:97:
                    49:f9:ad:6b:f1:0c:c2:0e:b6:57:61:8c:a1:55:44:
                    f5:69:e9:d3:a5:06:b2:68:0e:3c:b6:33:0d:57:be:
                    ca:c1:a6:4a:87:da:74:3a:30:c4:67:06:1f:6d:7b:
                    71:9c:ea:2b:e1:21:7a:39:e1:61:e5:ba:8b:73:e8:
                    a7:17:bb:16:c5:68:4b:75:b9:03:3d:b3:75:2a:18:
                    b1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:16:B8:68:64:2A:C5:7A:43:F8:ED:65:7D:87:19:4F:0A:7D:85:C7
            X509v3 Authority Key Identifier:
                keyid:3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ab:c9:eb:c0:28:e2:0c:1f:ee:99:c9:72:cd:5c:c4:e0:68:
         21:c1:40:c9:ea:c7:8e:18:29:e8:64:32:02:dd:80:3f:93:22:
         30:59:04:f8:e5:86:89:fc:2d:24:17:8c:c9:08:67:8b:3c:95:
         5e:6c:e2:cc:a9:55:b8:15:67:66:67:c5:53:5c:28:43:48:6b:
         46:aa:f1:35:d3:fe:27:e6:4e:16:f9:ce:57:56:93:53:8e:3e:
         a4:db:79:52:cc:83:85:96:49:6b:c0:6f:fa:dd:8f:1f:ff:6c:
         3f:ea:ba:ae:6e:66:7d:e0:2f:cb:23:02:9c:39:84:71:d8:0a:
         ad:43:46:b5:63:aa:c1:d6:9e:0c:88:bf:8c:74:3b:15:34:f7:
         26:33:ad:0e:86:80:ab:3d:b7:83:43:98:87:65:d6:04:88:83:
         fc:0f:2f:5c:a2:f7:da:64:38:e7:d0:88:63:6d:8f:ee:48:a8:
         5e:c2:2f:4a:25:a0:4b:1b:19:0c:27:85:ee:68:4f:6b:67:7b:
         62:6b:49:18:c6:b5:db:08:0a:fb:d4:9d:12:bd:8f:8d:3f:ae:
         ad:bb:e3:23:f7:f5:60:ca:05:0e:12:34:c2:e3:4d:0d:7e:e2:
         01:51:e2:22:02:b4:d4:f4:05:b2:a7:eb:7a:c9:4f:83:90:26:
         b0:9b:cf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:01:42 2026 by rpki-client